0009:trace:relay:load_list L"RelayExclude" = L"ntdll.RtlEnterCriticalSection;ntdll.RtlLeaveCriticalSection;kernel32.94;kernel32.95;kernel32.96;kernel32.97;kernel32.98" 0009:trace:relay:load_list L"RelayFromExclude" = L"winex11.drv;user32;gdi32;advapi32;kernel32" 0009:Call KERNEL32.__wine_kernel_init() ret=7ef9c638 000b:trace:relay:load_list L"RelayExclude" = L"ntdll.RtlEnterCriticalSection;ntdll.RtlLeaveCriticalSection;kernel32.94;kernel32.95;kernel32.96;kernel32.97;kernel32.98" 000b:trace:relay:load_list L"RelayFromExclude" = L"winex11.drv;user32;gdi32;advapi32;kernel32" 000b:Call KERNEL32.__wine_kernel_init() ret=7ef9c638 000b:Call PE DLL (proc=0x7efd1850,module=0x7ef60000 L"ntdll.dll",reason=PROCESS_ATTACH,res=0x1) 000b:Ret PE DLL (proc=0x7efd1850,module=0x7ef60000 L"ntdll.dll",reason=PROCESS_ATTACH,res=0x1) retval=1 000b:Call PE DLL (proc=0x7ee72a90,module=0x7edf0000 L"KERNEL32.dll",reason=PROCESS_ATTACH,res=0x1) 000b:Ret PE DLL (proc=0x7ee72a90,module=0x7edf0000 L"KERNEL32.dll",reason=PROCESS_ATTACH,res=0x1) retval=1 000b:Call PE DLL (proc=0x7ec414e0,module=0x7ec10000 L"advapi32.dll",reason=PROCESS_ATTACH,res=0x1) 000b:Ret PE DLL (proc=0x7ec414e0,module=0x7ec10000 L"advapi32.dll",reason=PROCESS_ATTACH,res=0x1) retval=1 000b:Starting process L"C:\\windows\\system32\\wineboot.exe" (entryproc=0x7ec654e0) 000b:Call KERNEL32.GetWindowsDirectoryW(7ec6d780,00000104) ret=7ec63b2b 000b:Ret KERNEL32.GetWindowsDirectoryW() retval=0000000a ret=7ec63b2b 000b:Call KERNEL32.SetCurrentDirectoryW(7ec6d780 L"C:\\windows") ret=7ec63b3c 000b:Ret KERNEL32.SetCurrentDirectoryW() retval=00000001 ret=7ec63b3c 000b:Call KERNEL32.CreateEventW(0033fd94,00000001,00000000,7ec66260 L"__wineboot_event") ret=7ec63d46 000b:Ret KERNEL32.CreateEventW() retval=00000014 ret=7ec63d46 000b:Call KERNEL32.ResetEvent(00000014) ret=7ec63d57 000b:Ret KERNEL32.ResetEvent() retval=00000001 ret=7ec63d57 000b:Call KERNEL32.GetPrivateProfileSectionW(7ec662ba L"rename",0033ef7c,00000400,7ec662a2 L"wininit.ini") ret=7ec63da4 000b:Ret KERNEL32.GetPrivateProfileSectionW() retval=00000000 ret=7ec63da4 000b:Call advapi32.RegOpenKeyExW(80000002,7ec662e0 L"System\\CurrentControlSet\\Control\\Session Manager",00000000,000f003f,0033fdb0) ret=7ec63e64 000b:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ec63e64 000b:Call advapi32.RegQueryValueExW(0000001c,7ec66360 L"PendingFileRenameOperations",00000000,00000000,00000000,0033fdb4) ret=7ec64325 000b:Ret advapi32.RegQueryValueExW() retval=00000002 ret=7ec64325 000b:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec64373 000b:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec64373 000b:Call advapi32.RegCloseKey(0000001c) ret=7ec6438c 000b:Ret advapi32.RegCloseKey() retval=00000000 ret=7ec6438c 000b:Call advapi32.RegOpenKeyW(80000002,7ec66400 L"Software\\Microsoft\\Windows NT\\CurrentVersion\\Winlogon",0033fdb0) ret=7ec63e9c 000b:Ret advapi32.RegOpenKeyW() retval=00000002 ret=7ec63e9c 000b:Call advapi32.RegCloseKey(00000000) ret=7ec63f00 000b:Ret advapi32.RegCloseKey() retval=00000006 ret=7ec63f00 000b:Call KERNEL32.GetSystemDirectoryW(00000000,00000000) ret=7ec63f17 000b:Ret KERNEL32.GetSystemDirectoryW() retval=00000014 ret=7ec63f17 000b:Call ntdll.RtlAllocateHeap(00110000,00000000,00000040) ret=7ec63f3e 000b:Ret ntdll.RtlAllocateHeap() retval=001190a0 ret=7ec63f3e 000b:Call KERNEL32.GetSystemDirectoryW(001190a0,00000014) ret=7ec63f53 000b:Ret KERNEL32.GetSystemDirectoryW() retval=00000013 ret=7ec63f53 000b:Call KERNEL32.FindFirstFileW(001190a0 L"C:\\windows\\system32\\dllcache\\*",0033ef7c) ret=7ec63fad 000b:Ret KERNEL32.FindFirstFileW() retval=ffffffff ret=7ec63fad 000b:Call KERNEL32.FindClose(ffffffff) ret=7ec640c4 000b:Ret KERNEL32.FindClose() retval=00000000 ret=7ec640c4 000b:Call ntdll.RtlFreeHeap(00110000,00000000,001190a0) ret=7ec640ea 000b:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec640ea 000b:Call advapi32.RegOpenKeyExW(80000002,7ec66540 L"Software\\Microsoft\\Windows\\CurrentVersion",00000000,00020019,0033eeb8) ret=7ec63395 000b:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ec63395 000b:Call advapi32.RegOpenKeyExW(0000001c,7ec66214 L"RunServicesOnce",00000000,000f003f,0033eeb4) ret=7ec633d1 000b:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ec633d1 000b:Call advapi32.RegCloseKey(0000001c) ret=7ec633e3 000b:Ret advapi32.RegCloseKey() retval=00000000 ret=7ec633e3 000b:Call advapi32.RegOpenKeyExW(80000002,7ec66540 L"Software\\Microsoft\\Windows\\CurrentVersion",00000000,00020019,0033eeb8) ret=7ec63395 000b:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ec63395 000b:Call advapi32.RegOpenKeyExW(0000001c,7ec661d8 L"RunServices",00000000,00020019,0033eeb4) ret=7ec633d1 000b:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ec633d1 000b:Call advapi32.RegCloseKey(0000001c) ret=7ec633fb 000b:Ret advapi32.RegCloseKey() retval=00000000 ret=7ec633fb 000b:Call advapi32.RegQueryInfoKeyW(00000020,00000000,00000000,00000000,00000000,00000000,00000000,0033eeb0,0033eea8,0033eeac,00000000,00000000) ret=7ec6345e 000b:Ret advapi32.RegQueryInfoKeyW() retval=00000000 ret=7ec6345e 000b:Call ntdll.RtlAllocateHeap(00110000,00000000,0000002c) ret=7ec635e9 000b:Ret ntdll.RtlAllocateHeap() retval=001190a0 ret=7ec635e9 000b:Call ntdll.RtlAllocateHeap(00110000,00000000,00000020) ret=7ec63629 000b:Ret ntdll.RtlAllocateHeap() retval=001190d8 ret=7ec63629 000b:Call advapi32.RegEnumValueW(00000020,00000000,001190d8,0033eea4,00000000,0033ee9c,001190a0,0033eea0) ret=7ec6369d 000b:Ret advapi32.RegEnumValueW() retval=00000000 ret=7ec6369d 000b:Call KERNEL32.CreateProcessW(00000000,001190a0 L"winemenubuilder -a -r",00000000,00000000,00000000,00000000,00000000,00000000,0033ee44,0033ee88) ret=7ec638ad 000d:trace:relay:load_list L"RelayExclude" = L"ntdll.RtlEnterCriticalSection;ntdll.RtlLeaveCriticalSection;kernel32.94;kernel32.95;kernel32.96;kernel32.97;kernel32.98" 000d:trace:relay:load_list L"RelayFromExclude" = L"winex11.drv;user32;gdi32;advapi32;kernel32" 000d:Call KERNEL32.__wine_kernel_init() ret=7ef9c638 000b:Ret KERNEL32.CreateProcessW() retval=00000001 ret=7ec638ad 000b:Call KERNEL32.CloseHandle(00000028) ret=7ec63926 000b:Ret KERNEL32.CloseHandle() retval=00000001 ret=7ec63926 000b:Call KERNEL32.CloseHandle(00000024) ret=7ec63934 000b:Ret KERNEL32.CloseHandle() retval=00000001 ret=7ec63934 000b:Call ntdll.RtlFreeHeap(00110000,00000000,001190d8) ret=7ec634bd 000b:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec634bd 000b:Call ntdll.RtlFreeHeap(00110000,00000000,001190a0) ret=7ec634e3 000b:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec634e3 000b:Call advapi32.RegCloseKey(00000020) ret=7ec634f5 000b:Ret advapi32.RegCloseKey() retval=00000000 ret=7ec634f5 000b:Call KERNEL32.GetSystemDirectoryW(0033ef7c,000000f7) ret=7ec64179 000b:Ret KERNEL32.GetSystemDirectoryW() retval=00000013 ret=7ec64179 000b:Call KERNEL32.CreateProcessW(0033ef7c L"C:\\windows\\system32\\services.exe",0033ef7c L"C:\\windows\\system32\\services.exe",00000000,00000000,00000001,00000000,00000000,00000000,0033fb8c,0033f984) ret=7ec6423c 000f:trace:relay:load_list L"RelayExclude" = L"ntdll.RtlEnterCriticalSection;ntdll.RtlLeaveCriticalSection;kernel32.94;kernel32.95;kernel32.96;kernel32.97;kernel32.98" 000f:trace:relay:load_list L"RelayFromExclude" = L"winex11.drv;user32;gdi32;advapi32;kernel32" 000f:Call KERNEL32.__wine_kernel_init() ret=7ef9c638 000b:Ret KERNEL32.CreateProcessW() retval=00000001 ret=7ec6423c 000b:Call KERNEL32.CloseHandle(00000024) ret=7ec64d55 000b:Ret KERNEL32.CloseHandle() retval=00000001 ret=7ec64d55 000b:Call KERNEL32.CreateEventW(00000000,00000001,00000000,7ec664a0 L"__wine_SvcctlStarted") ret=7ec64d7e 000b:Ret KERNEL32.CreateEventW() retval=0000001c ret=7ec64d7e 000b:Call KERNEL32.WaitForMultipleObjects(00000002,0033f77c,00000000,ffffffff) ret=7ec64db9 000d:Call PE DLL (proc=0x7efd1850,module=0x7ef60000 L"ntdll.dll",reason=PROCESS_ATTACH,res=0x1) 000d:Ret PE DLL (proc=0x7efd1850,module=0x7ef60000 L"ntdll.dll",reason=PROCESS_ATTACH,res=0x1) retval=1 000d:Call PE DLL (proc=0x7ee72a90,module=0x7edf0000 L"KERNEL32.dll",reason=PROCESS_ATTACH,res=0x1) 000f:Call PE DLL (proc=0x7efd1850,module=0x7ef60000 L"ntdll.dll",reason=PROCESS_ATTACH,res=0x1) 000f:Ret PE DLL (proc=0x7efd1850,module=0x7ef60000 L"ntdll.dll",reason=PROCESS_ATTACH,res=0x1) retval=1 000f:Call PE DLL (proc=0x7ee72a90,module=0x7edf0000 L"KERNEL32.dll",reason=PROCESS_ATTACH,res=0x1) 000d:Ret PE DLL (proc=0x7ee72a90,module=0x7edf0000 L"KERNEL32.dll",reason=PROCESS_ATTACH,res=0x1) retval=1 000d:Call PE DLL (proc=0x7e8644e0,module=0x7e830000 L"advapi32.dll",reason=PROCESS_ATTACH,res=0x1) 000d:Ret PE DLL (proc=0x7e8644e0,module=0x7e830000 L"advapi32.dll",reason=PROCESS_ATTACH,res=0x1) retval=1 000d:Call PE DLL (proc=0x7e8ea2a0,module=0x7e880000 L"gdi32.dll",reason=PROCESS_ATTACH,res=0x1) 000f:Ret PE DLL (proc=0x7ee72a90,module=0x7edf0000 L"KERNEL32.dll",reason=PROCESS_ATTACH,res=0x1) retval=1 000f:Call PE DLL (proc=0x7ebc84e0,module=0x7eb90000 L"advapi32.dll",reason=PROCESS_ATTACH,res=0x1) 000f:Ret PE DLL (proc=0x7ebc84e0,module=0x7eb90000 L"advapi32.dll",reason=PROCESS_ATTACH,res=0x1) retval=1 000f:Call PE DLL (proc=0x7ec2ce70,module=0x7ebe0000 L"rpcrt4.dll",reason=PROCESS_ATTACH,res=0x1) 000f:Ret PE DLL (proc=0x7ec2ce70,module=0x7ebe0000 L"rpcrt4.dll",reason=PROCESS_ATTACH,res=0x1) retval=1 000f:Starting process L"C:\\windows\\system32\\services.exe" (entryproc=0x7ec60cd0) 000f:Call KERNEL32.CreateEventW(00000000,00000001,00000000,7ec61a60 L"__wine_SvcctlStarted") ret=7ec59198 000f:Ret KERNEL32.CreateEventW() retval=00000018 ret=7ec59198 000f:Call ntdll.RtlAllocateHeap(00110000,00000000,00000028) ret=7ec591c4 000f:Ret ntdll.RtlAllocateHeap() retval=00114f78 ret=7ec591c4 000f:Call KERNEL32.InitializeCriticalSection(00114f88) ret=7ec59201 000f:Ret KERNEL32.InitializeCriticalSection() retval=00000001 ret=7ec59201 000f:Call advapi32.RegCreateKeyExW(80000002,7ec61aa0 L"System\\CurrentControlSet\\Services",00000000,00000000,00000000,000f003f,00000000,00114f78,00000000) ret=7ec59256 000f:Ret advapi32.RegCreateKeyExW() retval=00000000 ret=7ec59256 000f:Call advapi32.RegEnumKeyW(00000020,00000000,0033fcb8,00000104) ret=7ec592ca 000f:Ret advapi32.RegEnumKeyW() retval=00000000 ret=7ec592ca 000f:Call ntdll.RtlAllocateHeap(00110000,00000008,00000074) ret=7ec581ee 000f:Ret ntdll.RtlAllocateHeap() retval=0011a0e0 ret=7ec581ee 000f:Call ntdll.RtlAllocateHeap(00110000,00000000,0000000a) ret=7ec59da2 000f:Ret ntdll.RtlAllocateHeap() retval=0011a160 ret=7ec59da2 000f:Call advapi32.RegOpenKeyExW(00000020,0033fcb8 L"BITS",00000000,0002001f,0033fec0) ret=7ec59329 000f:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ec59329 000f:Call advapi32.RegQueryValueExW(00000024,7ec61afe L"ImagePath",00000000,0033fc34,00000000,0033fc38) ret=7ec5a000 000f:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ec5a000 000f:Call ntdll.RtlAllocateHeap(00110000,00000000,00000030) ret=7ec5a0db 000f:Ret ntdll.RtlAllocateHeap() retval=0011a178 ret=7ec5a0db 000f:Call advapi32.RegQueryValueExW(00000024,7ec61afe L"ImagePath",00000000,0033fc34,0011a178,0033fc38) ret=7ec5a109 000f:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ec5a109 000f:Call advapi32.RegQueryValueExW(00000024,7ec61b12 L"Group",00000000,0033fc34,00000000,0033fc38) ret=7ec5a000 000f:Ret advapi32.RegQueryValueExW() retval=00000002 ret=7ec5a000 000f:Call advapi32.RegQueryValueExW(00000024,7ec61b1e L"ObjectName",00000000,0033fc34,00000000,0033fc38) ret=7ec5a000 000f:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ec5a000 000f:Call ntdll.RtlAllocateHeap(00110000,00000000,0000001a) ret=7ec5a0db 000f:Ret ntdll.RtlAllocateHeap() retval=0011a1b0 ret=7ec5a0db 000f:Call advapi32.RegQueryValueExW(00000024,7ec61b1e L"ObjectName",00000000,0033fc34,0011a1b0,0033fc38) ret=7ec5a109 000f:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ec5a109 000f:Call advapi32.RegQueryValueExW(00000024,7ec61b34 L"DisplayName",00000000,0033fc34,00000000,0033fc38) ret=7ec5a000 000f:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ec5a000 000f:Call ntdll.RtlAllocateHeap(00110000,00000000,0000000c) ret=7ec5a0db 000f:Ret ntdll.RtlAllocateHeap() retval=0011a1d8 ret=7ec5a0db 000f:Call advapi32.RegQueryValueExW(00000024,7ec61b34 L"DisplayName",00000000,0033fc34,0011a1d8,0033fc38) ret=7ec5a109 000f:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ec5a109 000f:Call advapi32.RegQueryValueExW(00000024,7ec61b4c L"Description",00000000,0033fc34,00000000,0033fc38) ret=7ec5a000 000f:Ret advapi32.RegQueryValueExW() retval=00000002 ret=7ec5a000 000f:Call advapi32.RegQueryValueExW(00000024,7ec61b80 L"DependOnService",00000000,0033fc34,00000000,0033fc38) ret=7ec59e20 000f:Ret advapi32.RegQueryValueExW() retval=00000002 ret=7ec59e20 000f:Call ntdll.RtlAllocateHeap(00110000,00000008,00000002) ret=7ec59f94 000f:Ret ntdll.RtlAllocateHeap() retval=0011a1f0 ret=7ec59f94 000f:Call advapi32.RegQueryValueExW(00000024,7ec61ba0 L"DependOnGroup",00000000,0033fc34,00000000,0033fc38) ret=7ec59e20 000f:Ret advapi32.RegQueryValueExW() retval=00000002 ret=7ec59e20 000f:Call ntdll.RtlAllocateHeap(00110000,00000008,00000002) ret=7ec59f94 000f:Ret ntdll.RtlAllocateHeap() retval=0011a208 ret=7ec59f94 000f:Call advapi32.RegQueryValueExW(00000024,7ec61bbc L"Type",00000000,0033fc34,0011a118,0033fc38) ret=7ec5a226 000f:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ec5a226 000f:Call advapi32.RegQueryValueExW(00000024,7ec61bc6 L"Start",00000000,0033fc34,0011a11c,0033fc38) ret=7ec5a226 000f:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ec5a226 000f:Call advapi32.RegQueryValueExW(00000024,7ec61bd2 L"ErrorControl",00000000,0033fc34,0011a120,0033fc38) ret=7ec5a226 000f:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ec5a226 000f:Call advapi32.RegQueryValueExW(00000024,7ec61bec L"Tag",00000000,0033fc34,0011a12c,0033fc38) ret=7ec5a226 000f:Ret advapi32.RegQueryValueExW() retval=00000002 ret=7ec5a226 000f:Call advapi32.RegCloseKey(00000024) ret=7ec59a5a 000f:Ret advapi32.RegCloseKey() retval=00000000 ret=7ec59a5a 000f:Call advapi32.RegEnumKeyW(00000020,00000001,0033fcb8,00000104) ret=7ec592ca 000f:Ret advapi32.RegEnumKeyW() retval=00000000 ret=7ec592ca 000f:Call ntdll.RtlAllocateHeap(00110000,00000008,00000074) ret=7ec581ee 000f:Ret ntdll.RtlAllocateHeap() retval=0011a220 ret=7ec581ee 000f:Call ntdll.RtlAllocateHeap(00110000,00000000,00000012) ret=7ec59da2 000f:Ret ntdll.RtlAllocateHeap() retval=0011a2a0 ret=7ec59da2 000f:Call advapi32.RegOpenKeyExW(00000020,0033fcb8 L"MountMgr",00000000,0002001f,0033fec0) ret=7ec59329 000f:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ec59329 000f:Call advapi32.RegQueryValueExW(00000024,7ec61afe L"ImagePath",00000000,0033fc34,00000000,0033fc38) ret=7ec5a000 000f:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ec5a000 000f:Call ntdll.RtlAllocateHeap(00110000,00000000,00000054) ret=7ec5a0db 000f:Ret ntdll.RtlAllocateHeap() retval=0011a400 ret=7ec5a0db 000f:Call advapi32.RegQueryValueExW(00000024,7ec61afe L"ImagePath",00000000,0033fc34,0011a400,0033fc38) ret=7ec5a109 000f:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ec5a109 000f:Call advapi32.RegQueryValueExW(00000024,7ec61b12 L"Group",00000000,0033fc34,00000000,0033fc38) ret=7ec5a000 000f:Ret advapi32.RegQueryValueExW() retval=00000002 ret=7ec5a000 000f:Call advapi32.RegQueryValueExW(00000024,7ec61b1e L"ObjectName",00000000,0033fc34,00000000,0033fc38) ret=7ec5a000 000f:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ec5a000 000f:Call ntdll.RtlAllocateHeap(00110000,00000000,0000001a) ret=7ec5a0db 000f:Ret ntdll.RtlAllocateHeap() retval=0011a2c0 ret=7ec5a0db 000f:Call advapi32.RegQueryValueExW(00000024,7ec61b1e L"ObjectName",00000000,0033fc34,0011a2c0,0033fc38) ret=7ec5a109 000f:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ec5a109 000f:Call advapi32.RegQueryValueExW(00000024,7ec61b34 L"DisplayName",00000000,0033fc34,00000000,0033fc38) ret=7ec5a000 000f:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ec5a000 000f:Call ntdll.RtlAllocateHeap(00110000,00000000,0000001e) ret=7ec5a0db 000f:Ret ntdll.RtlAllocateHeap() retval=0011a460 ret=7ec5a0db 000f:Call advapi32.RegQueryValueExW(00000024,7ec61b34 L"DisplayName",00000000,0033fc34,0011a460,0033fc38) ret=7ec5a109 000f:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ec5a109 000f:Call advapi32.RegQueryValueExW(00000024,7ec61b4c L"Description",00000000,0033fc34,00000000,0033fc38) ret=7ec5a000 000f:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ec5a000 000f:Call ntdll.RtlAllocateHeap(00110000,00000000,00000032) ret=7ec5a0db 000f:Ret ntdll.RtlAllocateHeap() retval=0011a488 ret=7ec5a0db 000f:Call advapi32.RegQueryValueExW(00000024,7ec61b4c L"Description",00000000,0033fc34,0011a488,0033fc38) ret=7ec5a109 000f:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ec5a109 000f:Call advapi32.RegQueryValueExW(00000024,7ec61b80 L"DependOnService",00000000,0033fc34,00000000,0033fc38) ret=7ec59e20 000f:Ret advapi32.RegQueryValueExW() retval=00000002 ret=7ec59e20 000f:Call ntdll.RtlAllocateHeap(00110000,00000008,00000002) ret=7ec59f94 000f:Ret ntdll.RtlAllocateHeap() retval=0011a4c8 ret=7ec59f94 000f:Call advapi32.RegQueryValueExW(00000024,7ec61ba0 L"DependOnGroup",00000000,0033fc34,00000000,0033fc38) ret=7ec59e20 000f:Ret advapi32.RegQueryValueExW() retval=00000002 ret=7ec59e20 000f:Call ntdll.RtlAllocateHeap(00110000,00000008,00000002) ret=7ec59f94 000f:Ret ntdll.RtlAllocateHeap() retval=0011a4e0 ret=7ec59f94 000f:Call advapi32.RegQueryValueExW(00000024,7ec61bbc L"Type",00000000,0033fc34,0011a258,0033fc38) ret=7ec5a226 000f:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ec5a226 000f:Call advapi32.RegQueryValueExW(00000024,7ec61bc6 L"Start",00000000,0033fc34,0011a25c,0033fc38) ret=7ec5a226 000f:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ec5a226 000f:Call advapi32.RegQueryValueExW(00000024,7ec61bd2 L"ErrorControl",00000000,0033fc34,0011a260,0033fc38) ret=7ec5a226 000f:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ec5a226 000f:Call advapi32.RegQueryValueExW(00000024,7ec61bec L"Tag",00000000,0033fc34,0011a26c,0033fc38) ret=7ec5a226 000f:Ret advapi32.RegQueryValueExW() retval=00000002 ret=7ec5a226 000f:Call advapi32.RegCloseKey(00000024) ret=7ec59a5a 000f:Ret advapi32.RegCloseKey() retval=00000000 ret=7ec59a5a 000f:Call advapi32.RegEnumKeyW(00000020,00000002,0033fcb8,00000104) ret=7ec592ca 000f:Ret advapi32.RegEnumKeyW() retval=00000000 ret=7ec592ca 000f:Call ntdll.RtlAllocateHeap(00110000,00000008,00000074) ret=7ec581ee 000f:Ret ntdll.RtlAllocateHeap() retval=0011a4f8 ret=7ec581ee 000f:Call ntdll.RtlAllocateHeap(00110000,00000000,00000014) ret=7ec59da2 000f:Ret ntdll.RtlAllocateHeap() retval=0011a578 ret=7ec59da2 000f:Call advapi32.RegOpenKeyExW(00000020,0033fcb8 L"MSIServer",00000000,0002001f,0033fec0) ret=7ec59329 000f:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ec59329 000f:Call advapi32.RegQueryValueExW(00000024,7ec61afe L"ImagePath",00000000,0033fc34,00000000,0033fc38) ret=7ec5a000 000f:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ec5a000 000f:Call ntdll.RtlAllocateHeap(00110000,00000000,00000048) ret=7ec5a0db 000f:Ret ntdll.RtlAllocateHeap() retval=0011a598 ret=7ec5a0db 000f:Call advapi32.RegQueryValueExW(00000024,7ec61afe L"ImagePath",00000000,0033fc34,0011a598,0033fc38) ret=7ec5a109 000f:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ec5a109 000f:Call advapi32.RegQueryValueExW(00000024,7ec61b12 L"Group",00000000,0033fc34,00000000,0033fc38) ret=7ec5a000 000f:Ret advapi32.RegQueryValueExW() retval=00000002 ret=7ec5a000 000f:Call advapi32.RegQueryValueExW(00000024,7ec61b1e L"ObjectName",00000000,0033fc34,00000000,0033fc38) ret=7ec5a000 000f:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ec5a000 000f:Call ntdll.RtlAllocateHeap(00110000,00000000,0000001a) ret=7ec5a0db 000f:Ret ntdll.RtlAllocateHeap() retval=0011a5e8 ret=7ec5a0db 000f:Call advapi32.RegQueryValueExW(00000024,7ec61b1e L"ObjectName",00000000,0033fc34,0011a5e8,0033fc38) ret=7ec5a109 000f:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ec5a109 000f:Call advapi32.RegQueryValueExW(00000024,7ec61b34 L"DisplayName",00000000,0033fc34,00000000,0033fc38) ret=7ec5a000 000f:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ec5a000 000f:Call ntdll.RtlAllocateHeap(00110000,00000000,00000016) ret=7ec5a0db 000f:Ret ntdll.RtlAllocateHeap() retval=0011a610 ret=7ec5a0db 000f:Call advapi32.RegQueryValueExW(00000024,7ec61b34 L"DisplayName",00000000,0033fc34,0011a610,0033fc38) ret=7ec5a109 000f:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ec5a109 000f:Call advapi32.RegQueryValueExW(00000024,7ec61b4c L"Description",00000000,0033fc34,00000000,0033fc38) ret=7ec5a000 000f:Ret advapi32.RegQueryValueExW() retval=00000002 ret=7ec5a000 000f:Call advapi32.RegQueryValueExW(00000024,7ec61b80 L"DependOnService",00000000,0033fc34,00000000,0033fc38) ret=7ec59e20 000f:Ret advapi32.RegQueryValueExW() retval=00000002 ret=7ec59e20 000f:Call ntdll.RtlAllocateHeap(00110000,00000008,00000002) ret=7ec59f94 000f:Ret ntdll.RtlAllocateHeap() retval=0011a630 ret=7ec59f94 000f:Call advapi32.RegQueryValueExW(00000024,7ec61ba0 L"DependOnGroup",00000000,0033fc34,00000000,0033fc38) ret=7ec59e20 000f:Ret advapi32.RegQueryValueExW() retval=00000002 ret=7ec59e20 000f:Call ntdll.RtlAllocateHeap(00110000,00000008,00000002) ret=7ec59f94 000f:Ret ntdll.RtlAllocateHeap() retval=0011a648 ret=7ec59f94 000f:Call advapi32.RegQueryValueExW(00000024,7ec61bbc L"Type",00000000,0033fc34,0011a530,0033fc38) ret=7ec5a226 000f:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ec5a226 000f:Call advapi32.RegQueryValueExW(00000024,7ec61bc6 L"Start",00000000,0033fc34,0011a534,0033fc38) ret=7ec5a226 000f:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ec5a226 000f:Call advapi32.RegQueryValueExW(00000024,7ec61bd2 L"ErrorControl",00000000,0033fc34,0011a538,0033fc38) ret=7ec5a226 000f:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ec5a226 000f:Call advapi32.RegQueryValueExW(00000024,7ec61bec L"Tag",00000000,0033fc34,0011a544,0033fc38) ret=7ec5a226 000f:Ret advapi32.RegQueryValueExW() retval=00000002 ret=7ec5a226 000f:Call advapi32.RegCloseKey(00000024) ret=7ec59a5a 000f:Ret advapi32.RegCloseKey() retval=00000000 ret=7ec59a5a 000f:Call advapi32.RegEnumKeyW(00000020,00000003,0033fcb8,00000104) ret=7ec592ca 000f:Ret advapi32.RegEnumKeyW() retval=00000000 ret=7ec592ca 000f:Call ntdll.RtlAllocateHeap(00110000,00000008,00000074) ret=7ec581ee 000f:Ret ntdll.RtlAllocateHeap() retval=0011a660 ret=7ec581ee 000f:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec59da2 000f:Ret ntdll.RtlAllocateHeap() retval=0011a6e0 ret=7ec59da2 000f:Call advapi32.RegOpenKeyExW(00000020,0033fcb8 L"Spooler",00000000,0002001f,0033fec0) ret=7ec59329 000f:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ec59329 000f:Call advapi32.RegQueryValueExW(00000024,7ec61afe L"ImagePath",00000000,0033fc34,00000000,0033fc38) ret=7ec5a000 000f:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ec5a000 000f:Call ntdll.RtlAllocateHeap(00110000,00000000,00000042) ret=7ec5a0db 000f:Ret ntdll.RtlAllocateHeap() retval=0011a6f8 ret=7ec5a0db 000f:Call advapi32.RegQueryValueExW(00000024,7ec61afe L"ImagePath",00000000,0033fc34,0011a6f8,0033fc38) ret=7ec5a109 000f:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ec5a109 000f:Call advapi32.RegQueryValueExW(00000024,7ec61b12 L"Group",00000000,0033fc34,00000000,0033fc38) ret=7ec5a000 000f:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ec5a000 000f:Call ntdll.RtlAllocateHeap(00110000,00000000,0000001c) ret=7ec5a0db 000f:Ret ntdll.RtlAllocateHeap() retval=0011a748 ret=7ec5a0db 000f:Call advapi32.RegQueryValueExW(00000024,7ec61b12 L"Group",00000000,0033fc34,0011a748,0033fc38) ret=7ec5a109 000f:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ec5a109 000f:Call advapi32.RegQueryValueExW(00000024,7ec61b1e L"ObjectName",00000000,0033fc34,00000000,0033fc38) ret=7ec5a000 000f:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ec5a000 000f:Call ntdll.RtlAllocateHeap(00110000,00000000,0000001a) ret=7ec5a0db 000f:Ret ntdll.RtlAllocateHeap() retval=0011a770 ret=7ec5a0db 000f:Call advapi32.RegQueryValueExW(00000024,7ec61b1e L"ObjectName",00000000,0033fc34,0011a770,0033fc38) ret=7ec5a109 000f:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ec5a109 000f:Call advapi32.RegQueryValueExW(00000024,7ec61b34 L"DisplayName",00000000,0033fc34,00000000,0033fc38) ret=7ec5a000 000f:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ec5a000 000f:Call ntdll.RtlAllocateHeap(00110000,00000000,0000001e) ret=7ec5a0db 000f:Ret ntdll.RtlAllocateHeap() retval=0011a798 ret=7ec5a0db 000f:Call advapi32.RegQueryValueExW(00000024,7ec61b34 L"DisplayName",00000000,0033fc34,0011a798,0033fc38) ret=7ec5a109 000f:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ec5a109 000f:Call advapi32.RegQueryValueExW(00000024,7ec61b4c L"Description",00000000,0033fc34,00000000,0033fc38) ret=7ec5a000 000f:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ec5a000 000f:Call ntdll.RtlAllocateHeap(00110000,00000000,00000054) ret=7ec5a0db 000f:Ret ntdll.RtlAllocateHeap() retval=0011a7c0 ret=7ec5a0db 000f:Call advapi32.RegQueryValueExW(00000024,7ec61b4c L"Description",00000000,0033fc34,0011a7c0,0033fc38) ret=7ec5a109 000f:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ec5a109 000f:Call advapi32.RegQueryValueExW(00000024,7ec61b80 L"DependOnService",00000000,0033fc34,00000000,0033fc38) ret=7ec59e20 000f:Ret advapi32.RegQueryValueExW() retval=00000002 ret=7ec59e20 000f:Call ntdll.RtlAllocateHeap(00110000,00000008,00000002) ret=7ec59f94 000f:Ret ntdll.RtlAllocateHeap() retval=0011a820 ret=7ec59f94 000f:Call advapi32.RegQueryValueExW(00000024,7ec61ba0 L"DependOnGroup",00000000,0033fc34,00000000,0033fc38) ret=7ec59e20 000f:Ret advapi32.RegQueryValueExW() retval=00000002 ret=7ec59e20 000f:Call ntdll.RtlAllocateHeap(00110000,00000008,00000002) ret=7ec59f94 000f:Ret ntdll.RtlAllocateHeap() retval=0011a838 ret=7ec59f94 000f:Call advapi32.RegQueryValueExW(00000024,7ec61bbc L"Type",00000000,0033fc34,0011a698,0033fc38) ret=7ec5a226 000f:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ec5a226 000f:Call advapi32.RegQueryValueExW(00000024,7ec61bc6 L"Start",00000000,0033fc34,0011a69c,0033fc38) ret=7ec5a226 000f:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ec5a226 000f:Call advapi32.RegQueryValueExW(00000024,7ec61bd2 L"ErrorControl",00000000,0033fc34,0011a6a0,0033fc38) ret=7ec5a226 000f:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ec5a226 000f:Call advapi32.RegQueryValueExW(00000024,7ec61bec L"Tag",00000000,0033fc34,0011a6ac,0033fc38) ret=7ec5a226 000f:Ret advapi32.RegQueryValueExW() retval=00000002 ret=7ec5a226 000f:Call advapi32.RegCloseKey(00000024) ret=7ec59a5a 000f:Ret advapi32.RegCloseKey() retval=00000000 ret=7ec59a5a 000f:Call advapi32.RegEnumKeyW(00000020,00000004,0033fcb8,00000104) ret=7ec592ca 000f:Ret advapi32.RegEnumKeyW() retval=00000000 ret=7ec592ca 000f:Call ntdll.RtlAllocateHeap(00110000,00000008,00000074) ret=7ec581ee 000f:Ret ntdll.RtlAllocateHeap() retval=0011a850 ret=7ec581ee 000f:Call ntdll.RtlAllocateHeap(00110000,00000000,00000018) ret=7ec59da2 000f:Ret ntdll.RtlAllocateHeap() retval=0011a8d0 ret=7ec59da2 000f:Call advapi32.RegOpenKeyExW(00000020,0033fcb8 L"TermService",00000000,0002001f,0033fec0) ret=7ec59329 000f:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ec59329 000f:Call advapi32.RegQueryValueExW(00000024,7ec61afe L"ImagePath",00000000,0033fc34,00000000,0033fc38) ret=7ec5a000 000f:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ec5a000 000f:Call ntdll.RtlAllocateHeap(00110000,00000000,00000040) ret=7ec5a0db 000f:Ret ntdll.RtlAllocateHeap() retval=0011a8f0 ret=7ec5a0db 000f:Call advapi32.RegQueryValueExW(00000024,7ec61afe L"ImagePath",00000000,0033fc34,0011a8f0,0033fc38) ret=7ec5a109 000f:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ec5a109 000f:Call advapi32.RegQueryValueExW(00000024,7ec61b12 L"Group",00000000,0033fc34,00000000,0033fc38) ret=7ec5a000 000f:Ret advapi32.RegQueryValueExW() retval=00000002 ret=7ec5a000 000f:Call advapi32.RegQueryValueExW(00000024,7ec61b1e L"ObjectName",00000000,0033fc34,00000000,0033fc38) ret=7ec5a000 000f:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ec5a000 000f:Call ntdll.RtlAllocateHeap(00110000,00000000,0000001a) ret=7ec5a0db 000f:Ret ntdll.RtlAllocateHeap() retval=0011a938 ret=7ec5a0db 000f:Call advapi32.RegQueryValueExW(00000024,7ec61b1e L"ObjectName",00000000,0033fc34,0011a938,0033fc38) ret=7ec5a109 000f:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ec5a109 000f:Call advapi32.RegQueryValueExW(00000024,7ec61b34 L"DisplayName",00000000,0033fc34,00000000,0033fc38) ret=7ec5a000 000f:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ec5a000 000f:Call ntdll.RtlAllocateHeap(00110000,00000000,00000026) ret=7ec5a0db 000f:Ret ntdll.RtlAllocateHeap() retval=0011a960 ret=7ec5a0db 000f:Call advapi32.RegQueryValueExW(00000024,7ec61b34 L"DisplayName",00000000,0033fc34,0011a960,0033fc38) ret=7ec5a109 000f:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ec5a109 000f:Call advapi32.RegQueryValueExW(00000024,7ec61b4c L"Description",00000000,0033fc34,00000000,0033fc38) ret=7ec5a000 000f:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ec5a000 000f:Call ntdll.RtlAllocateHeap(00110000,00000000,0000002e) ret=7ec5a0db 000f:Ret ntdll.RtlAllocateHeap() retval=0011a990 ret=7ec5a0db 000f:Call advapi32.RegQueryValueExW(00000024,7ec61b4c L"Description",00000000,0033fc34,0011a990,0033fc38) ret=7ec5a109 000f:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ec5a109 000f:Call advapi32.RegQueryValueExW(00000024,7ec61b80 L"DependOnService",00000000,0033fc34,00000000,0033fc38) ret=7ec59e20 000f:Ret advapi32.RegQueryValueExW() retval=00000002 ret=7ec59e20 000f:Call ntdll.RtlAllocateHeap(00110000,00000008,00000002) ret=7ec59f94 000f:Ret ntdll.RtlAllocateHeap() retval=0011a9c8 ret=7ec59f94 000f:Call advapi32.RegQueryValueExW(00000024,7ec61ba0 L"DependOnGroup",00000000,0033fc34,00000000,0033fc38) ret=7ec59e20 000f:Ret advapi32.RegQueryValueExW() retval=00000002 ret=7ec59e20 000f:Call ntdll.RtlAllocateHeap(00110000,00000008,00000002) ret=7ec59f94 000f:Ret ntdll.RtlAllocateHeap() retval=0011a9e0 ret=7ec59f94 000f:Call advapi32.RegQueryValueExW(00000024,7ec61bbc L"Type",00000000,0033fc34,0011a888,0033fc38) ret=7ec5a226 000f:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ec5a226 000f:Call advapi32.RegQueryValueExW(00000024,7ec61bc6 L"Start",00000000,0033fc34,0011a88c,0033fc38) ret=7ec5a226 000f:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ec5a226 000f:Call advapi32.RegQueryValueExW(00000024,7ec61bd2 L"ErrorControl",00000000,0033fc34,0011a890,0033fc38) ret=7ec5a226 000f:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ec5a226 000f:Call advapi32.RegQueryValueExW(00000024,7ec61bec L"Tag",00000000,0033fc34,0011a89c,0033fc38) ret=7ec5a226 000f:Ret advapi32.RegQueryValueExW() retval=00000002 ret=7ec5a226 000f:Call advapi32.RegCloseKey(00000024) ret=7ec59a5a 000f:Ret advapi32.RegCloseKey() retval=00000000 ret=7ec59a5a 000f:Call advapi32.RegEnumKeyW(00000020,00000005,0033fcb8,00000104) ret=7ec592ca 000f:Ret advapi32.RegEnumKeyW() retval=00000000 ret=7ec592ca 000f:Call ntdll.RtlAllocateHeap(00110000,00000008,00000074) ret=7ec581ee 000f:Ret ntdll.RtlAllocateHeap() retval=0011a9f8 ret=7ec581ee 000f:Call ntdll.RtlAllocateHeap(00110000,00000000,00000008) ret=7ec59da2 000f:Ret ntdll.RtlAllocateHeap() retval=0011aa78 ret=7ec59da2 000f:Call advapi32.RegOpenKeyExW(00000020,0033fcb8 L"VxD",00000000,0002001f,0033fec0) ret=7ec59329 000f:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ec59329 000f:Call advapi32.RegQueryValueExW(00000024,7ec61afe L"ImagePath",00000000,0033fc34,00000000,0033fc38) ret=7ec5a000 000f:Ret advapi32.RegQueryValueExW() retval=00000002 ret=7ec5a000 000f:Call advapi32.RegQueryValueExW(00000024,7ec61b12 L"Group",00000000,0033fc34,00000000,0033fc38) ret=7ec5a000 000f:Ret advapi32.RegQueryValueExW() retval=00000002 ret=7ec5a000 000f:Call advapi32.RegQueryValueExW(00000024,7ec61b1e L"ObjectName",00000000,0033fc34,00000000,0033fc38) ret=7ec5a000 000f:Ret advapi32.RegQueryValueExW() retval=00000002 ret=7ec5a000 000f:Call advapi32.RegQueryValueExW(00000024,7ec61b34 L"DisplayName",00000000,0033fc34,00000000,0033fc38) ret=7ec5a000 000f:Ret advapi32.RegQueryValueExW() retval=00000002 ret=7ec5a000 000f:Call advapi32.RegQueryValueExW(00000024,7ec61b4c L"Description",00000000,0033fc34,00000000,0033fc38) ret=7ec5a000 000f:Ret advapi32.RegQueryValueExW() retval=00000002 ret=7ec5a000 000f:Call advapi32.RegQueryValueExW(00000024,7ec61b80 L"DependOnService",00000000,0033fc34,00000000,0033fc38) ret=7ec59e20 000f:Ret advapi32.RegQueryValueExW() retval=00000002 ret=7ec59e20 000f:Call ntdll.RtlAllocateHeap(00110000,00000008,00000002) ret=7ec59f94 000f:Ret ntdll.RtlAllocateHeap() retval=0011aa90 ret=7ec59f94 000f:Call advapi32.RegQueryValueExW(00000024,7ec61ba0 L"DependOnGroup",00000000,0033fc34,00000000,0033fc38) ret=7ec59e20 000f:Ret advapi32.RegQueryValueExW() retval=00000002 ret=7ec59e20 000f:Call ntdll.RtlAllocateHeap(00110000,00000008,00000002) ret=7ec59f94 000f:Ret ntdll.RtlAllocateHeap() retval=0011aaa8 ret=7ec59f94 000f:Call advapi32.RegQueryValueExW(00000024,7ec61bbc L"Type",00000000,0033fc34,0011aa30,0033fc38) ret=7ec5a226 000f:Ret advapi32.RegQueryValueExW() retval=00000002 ret=7ec5a226 000f:Call advapi32.RegQueryValueExW(00000024,7ec61bc6 L"Start",00000000,0033fc34,0011aa34,0033fc38) ret=7ec5a226 000f:Ret advapi32.RegQueryValueExW() retval=00000002 ret=7ec5a226 000f:Call advapi32.RegQueryValueExW(00000024,7ec61bd2 L"ErrorControl",00000000,0033fc34,0011aa38,0033fc38) ret=7ec5a226 000f:Ret advapi32.RegQueryValueExW() retval=00000002 ret=7ec5a226 000f:Call advapi32.RegQueryValueExW(00000024,7ec61bec L"Tag",00000000,0033fc34,0011aa44,0033fc38) ret=7ec5a226 000f:Ret advapi32.RegQueryValueExW() retval=00000002 ret=7ec5a226 000f:Call advapi32.RegCloseKey(00000024) ret=7ec59a5a 000f:Ret advapi32.RegCloseKey() retval=00000000 ret=7ec59a5a 000f:Call ntdll.RtlFreeHeap(00110000,00000000,0011aa78) ret=7ec5829b 000f:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec5829b 000f:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec582bf 000f:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec582bf 000f:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec582e3 000f:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec582e3 000f:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec58307 000f:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec58307 000f:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec5832b 000f:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec5832b 000f:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec5834f 000f:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec5834f 000f:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec58373 000f:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec58373 000f:Call ntdll.RtlFreeHeap(00110000,00000000,0011aa90) ret=7ec58397 000f:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec58397 000f:Call ntdll.RtlFreeHeap(00110000,00000000,0011aaa8) ret=7ec583bb 000f:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec583bb 000f:Call KERNEL32.CloseHandle(00000000) ret=7ec583c9 000f:Ret KERNEL32.CloseHandle() retval=00000000 ret=7ec583c9 000f:Call KERNEL32.CloseHandle(ffffffff) ret=7ec583d7 000f:Ret KERNEL32.CloseHandle() retval=00000000 ret=7ec583d7 000f:Call KERNEL32.CloseHandle(00000000) ret=7ec583e5 000f:Ret KERNEL32.CloseHandle() retval=00000000 ret=7ec583e5 000f:Call ntdll.RtlFreeHeap(00110000,00000000,0011a9f8) ret=7ec58405 000f:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec58405 000f:Call advapi32.RegEnumKeyW(00000020,00000006,0033fcb8,00000104) ret=7ec592ca 000f:Ret advapi32.RegEnumKeyW() retval=00000103 ret=7ec592ca 000f:Call rpcrt4.RpcServerUseProtseqEpW(0033fc2e L"ncacn_np",00000000,0033fc14 L"\\pipe\\svcctl",00000000) ret=7ec55e49 000f:Call KERNEL32.WideCharToMultiByte(00000000,00000000,0033fc2e L"ncacn_np",ffffffff,00000000,00000000,00000000,00000000) ret=7ec16588 000f:Ret KERNEL32.WideCharToMultiByte() retval=00000009 ret=7ec16588 000f:Call ntdll.RtlAllocateHeap(00110000,00000000,00000009) ret=7ec165aa 000f:Ret ntdll.RtlAllocateHeap() retval=0011a9f8 ret=7ec165aa 000f:Call KERNEL32.WideCharToMultiByte(00000000,00000000,0033fc2e L"ncacn_np",ffffffff,0011a9f8,00000009,00000000,00000000) ret=7ec165ea 000f:Ret KERNEL32.WideCharToMultiByte() retval=00000009 ret=7ec165ea 000f:Call ntdll.RtlAllocateHeap(00110000,00000000,00000040) ret=7ec26698 000f:Ret ntdll.RtlAllocateHeap() retval=0011aa10 ret=7ec26698 000f:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7ec266c5 000f:Ret KERNEL32.CreateEventW() retval=00000024 ret=7ec266c5 000f:Call ntdll.RtlAllocateHeap(00110000,00000000,00000009) ret=7ec163db 000f:Ret ntdll.RtlAllocateHeap() retval=0011aa58 ret=7ec163db 000f:Call KERNEL32.InitializeCriticalSection(0011aa28) ret=7ec205a4 000f:Ret KERNEL32.InitializeCriticalSection() retval=00000001 ret=7ec205a4 000f:Call ntdll.RtlFreeHeap(00110000,00000000,0011a9f8) ret=7ec166d6 000f:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec166d6 000f:Call KERNEL32.WideCharToMultiByte(00000000,00000000,0033fc14 L"\\pipe\\svcctl",ffffffff,00000000,00000000,00000000,00000000) ret=7ec16588 000f:Ret KERNEL32.WideCharToMultiByte() retval=0000000d ret=7ec16588 000f:Call ntdll.RtlAllocateHeap(00110000,00000000,0000000d) ret=7ec165aa 000f:Ret ntdll.RtlAllocateHeap() retval=0011a9f8 ret=7ec165aa 000f:Call KERNEL32.WideCharToMultiByte(00000000,00000000,0033fc14 L"\\pipe\\svcctl",ffffffff,0011a9f8,0000000d,00000000,00000000) ret=7ec165ea 000f:Ret KERNEL32.WideCharToMultiByte() retval=0000000d ret=7ec165ea 000f:Call ntdll.RtlAllocateHeap(00110000,00000000,0000008c) ret=7ec26627 000f:Ret ntdll.RtlAllocateHeap() retval=0011aa98 ret=7ec26627 000f:Call ntdll.RtlAllocateHeap(00110000,00000000,0000000d) ret=7ec163db 000f:Ret ntdll.RtlAllocateHeap() retval=0011ab30 ret=7ec163db 000f:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec2b037 000f:Ret ntdll.RtlAllocateHeap() retval=0011ab48 ret=7ec2b037 000f:Call KERNEL32.CreateNamedPipeA(0011ab48 "\\\\.\\pipe\\svcctl",00000003,00000006,000000ff,000016d0,000016d0,00001388,00000000) ret=7ec25507 000f:Ret KERNEL32.CreateNamedPipeA() retval=00000028 ret=7ec25507 000f:Call KERNEL32.CreateEventW(00000000,00000001,00000000,00000000) ret=7ec25603 000f:Ret KERNEL32.CreateEventW() retval=0000002c ret=7ec25603 000f:Call ntdll.RtlFreeHeap(00110000,00000000,0011ab48) ret=7ec2b066 000f:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec2b066 000f:Call ntdll.RtlFreeHeap(00110000,00000000,0011a9f8) ret=7ec166d6 000f:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec166d6 000f:Ret rpcrt4.RpcServerUseProtseqEpW() retval=00000000 ret=7ec55e49 000f:Call rpcrt4.RpcServerRegisterIf(7ec63180,00000000,00000000) ret=7ec55ec0 000f:Call ntdll.RtlAllocateHeap(00110000,00000008,0000003c) ret=7ec2211f 000f:Ret ntdll.RtlAllocateHeap() retval=0011ab48 ret=7ec2211f 000f:Ret rpcrt4.RpcServerRegisterIf() retval=00000000 ret=7ec55ec0 000f:Call rpcrt4.RpcServerListen(00000001,000004d2,00000001) ret=7ec55efc 000f:Call KERNEL32.CreateMutexW(00000000,00000000,00000000) ret=7ec1fea7 000f:Ret KERNEL32.CreateMutexW() retval=00000030 ret=7ec1fea7 000f:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7ec1fed6 000f:Ret KERNEL32.CreateEventW() retval=00000034 ret=7ec1fed6 000f:Call KERNEL32.CreateThread(00000000,00000000,7ec20140,0011aa10,00000000,00000000) ret=7ec1fe52 0010:Call PE DLL (proc=0x7ee72a90,module=0x7edf0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) 0010:Ret PE DLL (proc=0x7ee72a90,module=0x7edf0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0010:Call PE DLL (proc=0x7ec2ce70,module=0x7ebe0000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) 0010:Ret PE DLL (proc=0x7ec2ce70,module=0x7ebe0000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0010:Starting thread proc 0x7ec20140 (arg=0x11aa10) 0010:Call KERNEL32.ConnectNamedPipe(00000028,0011ab0c) ret=7ec26795 0010:Ret KERNEL32.ConnectNamedPipe() retval=00000000 ret=7ec26795 0010:Call ntdll.RtlAllocateHeap(00110000,00000000,00000008) ret=7ec268bb 0010:Ret ntdll.RtlAllocateHeap() retval=0011a9f8 ret=7ec268bb 0010:Call KERNEL32.WaitForMultipleObjectsEx(00000002,0011a9f8,00000000,ffffffff,00000001) ret=7ec26376 000f:Ret KERNEL32.CreateThread() retval=00000038 ret=7ec1fe52 000f:Call KERNEL32.CloseHandle(00000038) ret=7ec1fe6b 000f:Ret KERNEL32.CloseHandle() retval=00000001 ret=7ec1fe6b 000f:Call KERNEL32.WaitForSingleObject(00000030,ffffffff) ret=7ec1fc2c 000f:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7ec1fc2c 000f:Call KERNEL32.SetEvent(00000024) ret=7ec23c04 0010:Ret KERNEL32.WaitForMultipleObjectsEx() retval=00000000 ret=7ec26376 0010:Call ntdll.RtlReAllocateHeap(00110000,00000000,0011a9f8,00000008) ret=7ec26807 0010:Ret ntdll.RtlReAllocateHeap() retval=0011a9f8 ret=7ec26807 0010:Call KERNEL32.SetEvent(00000034) ret=7ec201de 0010:Ret KERNEL32.SetEvent() retval=00000001 ret=7ec201de 0010:Call KERNEL32.WaitForMultipleObjectsEx(00000002,0011a9f8,00000000,ffffffff,00000001) ret=7ec26376 000f:Ret KERNEL32.SetEvent() retval=00000001 ret=7ec23c04 000f:Call KERNEL32.WaitForSingleObject(00000034,ffffffff) ret=7ec1fc4a 000f:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7ec1fc4a 000f:Call KERNEL32.ReleaseMutex(00000030) ret=7ec1fc58 000f:Ret KERNEL32.ReleaseMutex() retval=00000001 ret=7ec1fc58 000f:Ret rpcrt4.RpcServerListen() retval=00000000 ret=7ec55efc 000f:Call ntdll.RtlAllocateHeap(00110000,00000000,00000080) ret=7ec597f7 000f:Ret ntdll.RtlAllocateHeap() retval=0011abb0 ret=7ec597f7 000f:Call KERNEL32.CreateMutexW(00000000,00000001,00000000) ret=7ec58531 000f:Ret KERNEL32.CreateMutexW() retval=00000038 ret=7ec58531 000f:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7ec58db1 000f:Ret KERNEL32.CreateEventW() retval=0000003c ret=7ec58db1 000f:Call advapi32.RegCreateKeyExW(80000002,7ec61c20 L"SYSTEM\\CurrentControlSet\\Control\\ServiceCurrent",00000000,00000000,00000001,00000003,00000000,0033fc34,00000000) ret=7ec58596 000f:Ret advapi32.RegCreateKeyExW() retval=00000000 ret=7ec58596 000f:Call advapi32.RegQueryValueExW(00000040,00000000,00000000,0033fc30,0033fc2c,0033fc38) ret=7ec588f4 000f:Ret advapi32.RegQueryValueExW() retval=00000002 ret=7ec588f4 000f:Call advapi32.RegSetValueExW(00000040,00000000,00000000,00000004,0033fc2c,00000004) ret=7ec58ee7 000f:Ret advapi32.RegSetValueExW() retval=00000000 ret=7ec58ee7 000f:Call advapi32.RegCloseKey(00000040) ret=7ec58ef5 000f:Ret advapi32.RegCloseKey() retval=00000000 ret=7ec58ef5 000f:Call ntdll.RtlAllocateHeap(00110000,00000000,0000004e) ret=7ec58949 000f:Ret ntdll.RtlAllocateHeap() retval=0011ac38 ret=7ec58949 000f:Call KERNEL32.CreateNamedPipeW(0011ac38 L"\\\\.\\pipe\\net\\NtControlPipe0",00000003,00000000,00000001,00000100,00000100,00002710,00000000) ret=7ec585f1 000f:Ret KERNEL32.CreateNamedPipeW() retval=00000040 ret=7ec585f1 000f:Call ntdll.RtlFreeHeap(00110000,00000000,0011ac38) ret=7ec5861a 000f:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec5861a 000f:Call KERNEL32.GetSystemDirectoryW(00000000,00000000) ret=7ec58c64 000f:Ret KERNEL32.GetSystemDirectoryW() retval=00000014 ret=7ec58c64 000f:Call ntdll.RtlAllocateHeap(00110000,00000000,0000005a) ret=7ec58cb8 000f:Ret ntdll.RtlAllocateHeap() retval=0011ac38 ret=7ec58cb8 000f:Call KERNEL32.GetSystemDirectoryW(0011ac38,0000002d) ret=7ec58cdb 000f:Ret KERNEL32.GetSystemDirectoryW() retval=00000013 ret=7ec58cdb 000f:Call KERNEL32.lstrcatW(0011ac38 L"C:\\windows\\system32",7ec61cc0 L"\\winedevice.exe ") ret=7ec58cf6 000f:Ret KERNEL32.lstrcatW() retval=0011ac38 ret=7ec58cf6 000f:Call KERNEL32.lstrcatW(0011ac38 L"C:\\windows\\system32\\winedevice.exe ",0011a2a0 L"MountMgr") ret=7ec58d0e 000f:Ret KERNEL32.lstrcatW() retval=0011ac38 ret=7ec58d0e 000f:Call KERNEL32.CreateProcessW(00000000,0011ac38 L"C:\\windows\\system32\\winedevice.exe MountMgr",00000000,00000000,00000000,00000000,00000000,00000000,0033fbd8,0033fc1c) ret=7ec58753 0012:trace:relay:load_list L"RelayExclude" = L"ntdll.RtlEnterCriticalSection;ntdll.RtlLeaveCriticalSection;kernel32.94;kernel32.95;kernel32.96;kernel32.97;kernel32.98" 0012:trace:relay:load_list L"RelayFromExclude" = L"winex11.drv;user32;gdi32;advapi32;kernel32" 0012:Call KERNEL32.__wine_kernel_init() ret=7ef9c638 000f:Ret KERNEL32.CreateProcessW() retval=00000001 ret=7ec58753 000f:Call ntdll.RtlFreeHeap(00110000,00000000,0011ac38) ret=7ec5877f 000f:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec5877f 000f:Call KERNEL32.CloseHandle(0000004c) ret=7ec58999 000f:Ret KERNEL32.CloseHandle() retval=00000001 ret=7ec58999 000f:Call KERNEL32.ConnectNamedPipe(00000040,00000000) ret=7ec587e2 0012:Call PE DLL (proc=0x7efd1850,module=0x7ef60000 L"ntdll.dll",reason=PROCESS_ATTACH,res=0x1) 0012:Ret PE DLL (proc=0x7efd1850,module=0x7ef60000 L"ntdll.dll",reason=PROCESS_ATTACH,res=0x1) retval=1 0012:Call PE DLL (proc=0x7ee72a90,module=0x7edf0000 L"KERNEL32.dll",reason=PROCESS_ATTACH,res=0x1) 0012:Ret PE DLL (proc=0x7ee72a90,module=0x7edf0000 L"KERNEL32.dll",reason=PROCESS_ATTACH,res=0x1) retval=1 0012:Call PE DLL (proc=0x7ec554e0,module=0x7ec20000 L"advapi32.dll",reason=PROCESS_ATTACH,res=0x1) 0012:Ret PE DLL (proc=0x7ec554e0,module=0x7ec20000 L"advapi32.dll",reason=PROCESS_ATTACH,res=0x1) retval=1 0012:Call PE DLL (proc=0x7ebf61c0,module=0x7ebe0000 L"ntoskrnl.exe",reason=PROCESS_ATTACH,res=0x1) 0012:Call KERNEL32.DisableThreadLibraryCalls(7ebe0000) ret=7ebf4b36 0012:Ret KERNEL32.DisableThreadLibraryCalls() retval=00000001 ret=7ebf4b36 0012:Call ntdll.RtlAddVectoredExceptionHandler(00000001,7ebf3a90) ret=7ebf4b4f 0012:Ret ntdll.RtlAddVectoredExceptionHandler() retval=0011bed0 ret=7ebf4b4f 0012:Call ntdll.NtGetTickCount() ret=7ebf4ac0 0012:Ret ntdll.NtGetTickCount() retval=00000131 ret=7ebf4ac0 0012:Ret PE DLL (proc=0x7ebf61c0,module=0x7ebe0000 L"ntoskrnl.exe",reason=PROCESS_ATTACH,res=0x1) retval=1 0012:Starting process L"C:\\windows\\system32\\winedevice.exe" (entryproc=0x7ecad590) 0012:Call advapi32.StartServiceCtrlDispatcherW(0033fed4) ret=7ecac757 0013:Call PE DLL (proc=0x7ee72a90,module=0x7edf0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) 0013:Ret PE DLL (proc=0x7ee72a90,module=0x7edf0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0013:Starting thread proc 0x7ec4c930 (arg=(nil)) 0013:Call PE DLL (proc=0x7ebbfe70,module=0x7eb80000 L"rpcrt4.dll",reason=PROCESS_ATTACH,res=(nil)) 0013:Ret PE DLL (proc=0x7ebbfe70,module=0x7eb80000 L"rpcrt4.dll",reason=PROCESS_ATTACH,res=(nil)) retval=1 0013:Call rpcrt4.NdrClientInitializeNew(0054e910,0054e82c,7ec5e760,0000000f) ret=7ec53fce 0013:Ret rpcrt4.NdrClientInitializeNew() retval=7ec4afd0 ret=7ec53fce 0013:Call rpcrt4.RpcStringBindingComposeW(00000000,0054e722 L"ncacn_np",00000000,0054e708 L"\\pipe\\svcctl",00000000,0054e738) ret=7ec4adc8 0013:Call ntdll.RtlAllocateHeap(00110000,00000000,00000058) ret=7ebab5b8 0013:Ret ntdll.RtlAllocateHeap() retval=0011bf38 ret=7ebab5b8 0013:Ret rpcrt4.RpcStringBindingComposeW() retval=00000000 ret=7ec4adc8 0013:Call rpcrt4.RpcBindingFromStringBindingW(0011bf38 L"ncacn_np:[\\\\pipe\\\\svcctl]",0054e734) ret=7ec4ade1 0013:Call ntdll.RtlAllocateHeap(00110000,00000000,00000012) ret=7eba8bf2 0013:Ret ntdll.RtlAllocateHeap() retval=0011c028 ret=7eba8bf2 0013:Call ntdll.RtlAllocateHeap(00110000,00000000,00000002) ret=7eba8bf2 0013:Ret ntdll.RtlAllocateHeap() retval=0011bf98 ret=7eba8bf2 0013:Call ntdll.RtlAllocateHeap(00110000,00000000,0000001e) ret=7eba8bf2 0013:Ret ntdll.RtlAllocateHeap() retval=0011bfb0 ret=7eba8bf2 0013:Call ntdll.RtlAllocateHeap(00110000,00000008,00000044) ret=7eba8cb1 0013:Ret ntdll.RtlAllocateHeap() retval=0011d2c8 ret=7eba8cb1 0013:Call KERNEL32.WideCharToMultiByte(00000000,00000000,0011c028 L"ncacn_np",ffffffff,00000000,00000000,00000000,00000000) ret=7eba9588 0013:Ret KERNEL32.WideCharToMultiByte() retval=00000009 ret=7eba9588 0013:Call ntdll.RtlAllocateHeap(00110000,00000000,00000009) ret=7eba95aa 0013:Ret ntdll.RtlAllocateHeap() retval=0011bfd8 ret=7eba95aa 0013:Call KERNEL32.WideCharToMultiByte(00000000,00000000,0011c028 L"ncacn_np",ffffffff,0011bfd8,00000009,00000000,00000000) ret=7eba95ea 0013:Ret KERNEL32.WideCharToMultiByte() retval=00000009 ret=7eba95ea 0013:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7eba96d6 0013:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7eba96d6 0013:Call KERNEL32.WideCharToMultiByte(00000000,00000000,0011bf98 L"",ffffffff,00000000,00000000,00000000,00000000) ret=7eba9588 0013:Ret KERNEL32.WideCharToMultiByte() retval=00000001 ret=7eba9588 0013:Call ntdll.RtlAllocateHeap(00110000,00000000,00000001) ret=7eba95aa 0013:Ret ntdll.RtlAllocateHeap() retval=0011bff0 ret=7eba95aa 0013:Call KERNEL32.WideCharToMultiByte(00000000,00000000,0011bf98 L"",ffffffff,0011bff0,00000001,00000000,00000000) ret=7eba95ea 0013:Ret KERNEL32.WideCharToMultiByte() retval=00000001 ret=7eba95ea 0013:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7eba96d6 0013:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7eba96d6 0013:Call KERNEL32.WideCharToMultiByte(00000000,00000000,0011bfb0 L"\\pipe\\svcctl",ffffffff,00000000,00000000,00000000,00000000) ret=7eba9588 0013:Ret KERNEL32.WideCharToMultiByte() retval=0000000d ret=7eba9588 0013:Call ntdll.RtlAllocateHeap(00110000,00000000,0000000d) ret=7eba95aa 0013:Ret ntdll.RtlAllocateHeap() retval=0011d318 ret=7eba95aa 0013:Call KERNEL32.WideCharToMultiByte(00000000,00000000,0011bfb0 L"\\pipe\\svcctl",ffffffff,0011d318,0000000d,00000000,00000000) ret=7eba95ea 0013:Ret KERNEL32.WideCharToMultiByte() retval=0000000d ret=7eba95ea 0013:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ebacba2 0013:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ebacba2 0013:Call ntdll.RtlAllocateHeap(00110000,00000000,00000058) ret=7eba6fdd 0013:Ret ntdll.RtlAllocateHeap() retval=0011d330 ret=7eba6fdd 0013:Call KERNEL32.InitializeCriticalSection(0011d360) ret=7eba7013 0013:Ret KERNEL32.InitializeCriticalSection() retval=00000001 ret=7eba7013 0013:Call ntdll.RtlAllocateHeap(00110000,00000000,00000009) ret=7eba93db 0013:Ret ntdll.RtlAllocateHeap() retval=0011d3b8 ret=7eba93db 0013:Call ntdll.RtlAllocateHeap(00110000,00000000,00000001) ret=7eba93db 0013:Ret ntdll.RtlAllocateHeap() retval=0011d3d0 ret=7eba93db 0013:Call ntdll.RtlAllocateHeap(00110000,00000000,0000000d) ret=7eba93db 0013:Ret ntdll.RtlAllocateHeap() retval=0011d3e8 ret=7eba93db 0013:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ebbdf29 0013:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ebbdf29 0013:Call ntdll.RtlFreeHeap(00110000,00000000,0011bfb0) ret=7ebbdf29 0013:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ebbdf29 0013:Call ntdll.RtlFreeHeap(00110000,00000000,0011bf98) ret=7ebbdf29 0013:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ebbdf29 0013:Call ntdll.RtlFreeHeap(00110000,00000000,0011c028) ret=7ebbdf29 0013:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ebbdf29 0013:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ebbdf29 0013:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ebbdf29 0013:Ret rpcrt4.RpcBindingFromStringBindingW() retval=00000000 ret=7ec4ade1 0013:Call rpcrt4.RpcStringFreeW(0054e738) ret=7ec4adee 0013:Call ntdll.RtlFreeHeap(00110000,00000000,0011bf38) ret=7ebbdf29 0013:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ebbdf29 0013:Ret rpcrt4.RpcStringFreeW() retval=00000000 ret=7ec4adee 0013:Call rpcrt4.NdrPointerBufferSize(0054e82c,00000000,7ec5cf50) ret=7ec53fff 0013:Ret rpcrt4.NdrPointerBufferSize() retval=00000000 ret=7ec53fff 0013:Call rpcrt4.NdrPointerBufferSize(0054e82c,00000000,7ec5cfe6) ret=7ec54021 0013:Ret rpcrt4.NdrPointerBufferSize() retval=00000000 ret=7ec54021 0013:Call rpcrt4.NdrGetBuffer(0054e82c,00000010,0011d2c8) ret=7ec5403d 0013:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ebbe037 0013:Ret ntdll.RtlAllocateHeap() retval=0011c028 ret=7ebbe037 0013:Call ntdll.RtlAllocateHeap(00110000,00000000,0000008c) ret=7ebb9627 0013:Ret ntdll.RtlAllocateHeap() retval=0011bf38 ret=7ebb9627 0013:Call ntdll.RtlAllocateHeap(00110000,00000000,00000001) ret=7eba93db 0013:Ret ntdll.RtlAllocateHeap() retval=0011d400 ret=7eba93db 0013:Call ntdll.RtlAllocateHeap(00110000,00000000,0000000d) ret=7eba93db 0013:Ret ntdll.RtlAllocateHeap() retval=0011d418 ret=7eba93db 0013:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ebbe037 0013:Ret ntdll.RtlAllocateHeap() retval=0011d430 ret=7ebbe037 0013:Call KERNEL32.CreateFileA(0011d430 "\\\\.\\pipe\\svcctl",c0000000,00000000,00000000,00000003,00000000,00000000) ret=7ebb87d4 0010:Ret KERNEL32.WaitForMultipleObjectsEx() retval=00000001 ret=7ec26376 0010:Call ntdll.RtlAllocateHeap(00110000,00000000,0000008c) ret=7ec26627 0010:Ret ntdll.RtlAllocateHeap() retval=0011ac58 ret=7ec26627 0010:Call ntdll.RtlAllocateHeap(00110000,00000000,0000000d) ret=7ec163db 0010:Ret ntdll.RtlAllocateHeap() retval=0011acf0 ret=7ec163db 0010:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec2b037 0010:Ret ntdll.RtlAllocateHeap() retval=0011ad08 ret=7ec2b037 0010:Call KERNEL32.CreateNamedPipeA(0011ad08 "\\\\.\\pipe\\svcctl",00000003,00000006,000000ff,000016d0,000016d0,00001388,00000000) ret=7ec25507 0010:Ret KERNEL32.CreateNamedPipeA() retval=0000004c ret=7ec25507 0010:Call KERNEL32.CreateEventW(00000000,00000001,00000000,00000000) ret=7ec25603 0010:Ret KERNEL32.CreateEventW() retval=00000050 ret=7ec25603 0010:Call ntdll.RtlFreeHeap(00110000,00000000,0011ad08) ret=7ec2b066 0010:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec2b066 0010:Call KERNEL32.CreateThread(00000000,00000000,7ec20790,0011ac58,00000000,00000000) ret=7ec2071f 0013:Ret KERNEL32.CreateFileA() retval=00000024 ret=7ebb87d4 0013:Call KERNEL32.SetNamedPipeHandleState(00000024,0054e4f8,00000000,00000000) ret=7ebb8935 0013:Ret KERNEL32.SetNamedPipeHandleState() retval=00000000 ret=7ebb8935 0013:Call KERNEL32.CreateEventW(00000000,00000001,00000000,00000000) ret=7ebb895c 0013:Ret KERNEL32.CreateEventW() retval=00000028 ret=7ebb895c 0013:Call ntdll.RtlFreeHeap(00110000,00000000,0011d430) ret=7ebbe066 0013:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ebbe066 0013:Call ntdll.RtlAllocateHeap(00110000,00000008,00000048) ret=7ebb0d9a 0013:Ret ntdll.RtlAllocateHeap() retval=0011d430 ret=7ebb0d9a 0013:Call ntdll.RtlAllocateHeap(00110000,00000008,00000030) ret=7ebbd65d 0013:Ret ntdll.RtlAllocateHeap() retval=0011d480 ret=7ebbd65d 0013:Call KERNEL32.InitializeCriticalSection(0011d488) ret=7ebbd671 0013:Ret KERNEL32.InitializeCriticalSection() retval=00000001 ret=7ebbd671 0013:Call ntdll.RtlAllocateHeap(00110000,00000008,00000048) ret=7ebb0685 0013:Ret ntdll.RtlAllocateHeap() retval=0011d4e0 ret=7ebb0685 0013:Call KERNEL32.WriteFile(00000024,0011d4e0,00000048,0054e4bc,00000000) ret=7ebb8bb2 0013:Ret KERNEL32.WriteFile() retval=00000001 ret=7ebb8bb2 0013:Call ntdll.RtlFreeHeap(00110000,00000000,0011d4e0) ret=7ebb078f 0013:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ebb078f 0013:Call ntdll.RtlFreeHeap(00110000,00000000,0011d430) ret=7ebb1246 0013:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ebb1246 0013:Call KERNEL32.ReadFile(00000024,0054e4cc,00000010,0054e47c,00000000) ret=7ebb92f2 0014:Call PE DLL (proc=0x7ee72a90,module=0x7edf0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) 0014:Ret PE DLL (proc=0x7ee72a90,module=0x7edf0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0014:Call PE DLL (proc=0x7ec2ce70,module=0x7ebe0000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) 0014:Ret PE DLL (proc=0x7ec2ce70,module=0x7ebe0000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0014:Starting thread proc 0x7ec20790 (arg=0x11ac58) 0014:Call ntdll.RtlAllocateHeap(00110000,00000008,0000002c) ret=7ec207e1 0014:Ret ntdll.RtlAllocateHeap() retval=0011ad08 ret=7ec207e1 0014:Call ntdll.RtlAllocateHeap(00110000,00000008,00000030) ret=7ec2a65d 0014:Ret ntdll.RtlAllocateHeap() retval=0011ad40 ret=7ec2a65d 0014:Call KERNEL32.InitializeCriticalSection(0011ad48) ret=7ec2a671 0014:Ret KERNEL32.InitializeCriticalSection() retval=00000001 ret=7ec2a671 0014:Call KERNEL32.ReadFile(00000028,0064e9cc,00000010,0064e97c,00000000) ret=7ec262f2 0014:Ret KERNEL32.ReadFile() retval=00000001 ret=7ec262f2 0014:Call ntdll.RtlAllocateHeap(00110000,00000000,00000048) ret=7ec1e43a 0014:Ret ntdll.RtlAllocateHeap() retval=0011ada0 ret=7ec1e43a 0014:Call KERNEL32.ReadFile(00000028,0011adb0,00000038,0064e97c,00000000) ret=7ec262f2 0014:Ret KERNEL32.ReadFile() retval=00000001 ret=7ec262f2 0014:Call ntdll.RtlAllocateHeap(00110000,00000000,00000000) ret=7ec2b037 0014:Ret ntdll.RtlAllocateHeap() retval=0011adf0 ret=7ec2b037 0014:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec1ed28 0014:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec1ed28 0014:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec1ed4b 0014:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec1ed4b 0014:Call ntdll.RtlAllocateHeap(00110000,00000000,0000000c) ret=7ec20825 0014:Ret ntdll.RtlAllocateHeap() retval=0011ae08 ret=7ec20825 0014:Call KERNEL32.QueueUserWorkItem(7ec21b40,0011ae08,00000010) ret=7ec20857 0015:Call PE DLL (proc=0x7ee72a90,module=0x7edf0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) 0015:Ret PE DLL (proc=0x7ee72a90,module=0x7edf0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0015:Call PE DLL (proc=0x7ec2ce70,module=0x7ebe0000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) 0015:Ret PE DLL (proc=0x7ec2ce70,module=0x7ebe0000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0015:Starting thread proc 0x7efc68f0 (arg=(nil)) 0015:Call ntdll.RtlAllocateHeap(00110000,00000008,00000044) ret=7ec15cb1 0015:Ret ntdll.RtlAllocateHeap() retval=0011ae20 ret=7ec15cb1 0015:Call ntdll.RtlAllocateHeap(00110000,00000000,00000009) ret=7ec163db 0015:Ret ntdll.RtlAllocateHeap() retval=0011ae70 ret=7ec163db 0015:Call ntdll.RtlAllocateHeap(00110000,00000000,0000000d) ret=7ec163db 0015:Ret ntdll.RtlAllocateHeap() retval=0011ae88 ret=7ec163db 0015:Call ntdll.RtlAllocateHeap(00110000,00000000,00000058) ret=7ec13fdd 0015:Ret ntdll.RtlAllocateHeap() retval=0011aea0 ret=7ec13fdd 0015:Call KERNEL32.InitializeCriticalSection(0011aed0) ret=7ec14013 0015:Ret KERNEL32.InitializeCriticalSection() retval=00000001 ret=7ec14013 0015:Call ntdll.RtlAllocateHeap(00110000,00000000,00000009) ret=7ec163db 0015:Ret ntdll.RtlAllocateHeap() retval=0011af28 ret=7ec163db 0015:Call ntdll.RtlAllocateHeap(00110000,00000000,0000000d) ret=7ec163db 0015:Ret ntdll.RtlAllocateHeap() retval=0011af40 ret=7ec163db 0015:Call ntdll.RtlAllocateHeap(00110000,00000008,00000044) ret=7ec1deef 0015:Ret ntdll.RtlAllocateHeap() retval=0011af58 ret=7ec1deef 0015:Call ntdll.RtlAllocateHeap(00110000,00000008,00000030) ret=7ec2a65d 0015:Ret ntdll.RtlAllocateHeap() retval=0011afa8 ret=7ec2a65d 0015:Call KERNEL32.InitializeCriticalSection(0011afb0) ret=7ec2a671 0015:Ret KERNEL32.InitializeCriticalSection() retval=00000001 ret=7ec2a671 0015:Call ntdll.RtlAllocateHeap(00110000,00000008,00000044) ret=7ec1d685 0015:Ret ntdll.RtlAllocateHeap() retval=0011b008 ret=7ec1d685 0015:Call KERNEL32.WriteFile(00000028,0011b008,00000044,0074e95c,00000000) ret=7ec25bb2 0015:Ret KERNEL32.WriteFile() retval=00000001 ret=7ec25bb2 0015:Call ntdll.RtlFreeHeap(00110000,00000000,0011b008) ret=7ec1d78f 0015:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec1d78f 0015:Call ntdll.RtlFreeHeap(00110000,00000000,0011af58) ret=7ec1e246 0015:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec1e246 0015:Call ntdll.RtlFreeHeap(00110000,00000000,0011adf0) ret=7ec2b066 0015:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec2b066 0015:Call ntdll.RtlFreeHeap(00110000,00000000,0011ada0) ret=7ec1e246 0015:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec1e246 0015:Call ntdll.RtlFreeHeap(00110000,00000000,0011ad08) ret=7ec21bcf 0015:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec21bcf 0015:Call ntdll.RtlFreeHeap(00110000,00000000,0011ae08) ret=7ec21bf2 0015:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec21bf2 0013:Ret KERNEL32.ReadFile() retval=00000001 ret=7ebb92f2 0013:Call ntdll.RtlAllocateHeap(00110000,00000000,00000018) ret=7ebb143a 0013:Ret ntdll.RtlAllocateHeap() retval=0011d430 ret=7ebb143a 0013:Call KERNEL32.ReadFile(00000024,0011d440,00000008,0054e47c,00000000) ret=7ebb92f2 0013:Ret KERNEL32.ReadFile() retval=00000001 ret=7ebb92f2 0013:Call ntdll.RtlAllocateHeap(00110000,00000000,0000002c) ret=7ebb14f0 0013:Ret ntdll.RtlAllocateHeap() retval=0011d4e0 ret=7ebb14f0 0013:Call KERNEL32.ReadFile(00000024,0011d4e0,0000002c,0054e47c,00000000) ret=7ebb92f2 0013:Ret KERNEL32.ReadFile() retval=00000001 ret=7ebb92f2 0013:Call ntdll.RtlAllocateHeap(00110000,00000000,0000002c) ret=7ebbe037 0013:Ret ntdll.RtlAllocateHeap() retval=0011d518 ret=7ebbe037 0013:Call ntdll.RtlFreeHeap(00110000,00000000,0011d4e0) ret=7ebb1d4b 0013:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ebb1d4b 0013:Call ntdll.RtlFreeHeap(00110000,00000000,0011d518) ret=7ebbe066 0013:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ebbe066 0013:Call ntdll.RtlFreeHeap(00110000,00000000,0011d430) ret=7ebb1246 0013:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ebb1246 0013:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7eba7c88 0013:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7eba7c88 0013:Ret rpcrt4.NdrGetBuffer() retval=0011c028 ret=7ec5403d 0013:Call rpcrt4.NdrPointerMarshall(0054e82c,00000000,7ec5cf50) ret=7ec54053 0013:Ret rpcrt4.NdrPointerMarshall() retval=00000000 ret=7ec54053 0013:Call rpcrt4.NdrPointerMarshall(0054e82c,00000000,7ec5cfe6) ret=7ec5406f 0013:Ret rpcrt4.NdrPointerMarshall() retval=00000000 ret=7ec5406f 0013:Call rpcrt4.NdrSendReceive(0054e82c,0011c034) ret=7ec540c5 0013:Call ntdll.RtlAllocateHeap(00110000,00000008,00000018) ret=7ebb1819 0013:Ret ntdll.RtlAllocateHeap() retval=0011d430 ret=7ebb1819 0013:Call ntdll.RtlAllocateHeap(00110000,00000008,00000024) ret=7ebb0685 0013:Ret ntdll.RtlAllocateHeap() retval=0011d450 ret=7ebb0685 0013:Call KERNEL32.WriteFile(00000024,0011d450,00000024,0054e56c,00000000) ret=7ebb8bb2 0013:Ret KERNEL32.WriteFile() retval=00000001 ret=7ebb8bb2 0013:Call ntdll.RtlFreeHeap(00110000,00000000,0011d450) ret=7ebb078f 0013:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ebb078f 0013:Call ntdll.RtlFreeHeap(00110000,00000000,0011d430) ret=7ebb1246 0013:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ebb1246 0013:Call KERNEL32.ReadFile(00000024,0054e57c,00000010,0054e52c,00000000) ret=7ebb92f2 0010:Ret KERNEL32.CreateThread() retval=00000054 ret=7ec2071f 0010:Call KERNEL32.CloseHandle(00000054) ret=7ec20730 0010:Ret KERNEL32.CloseHandle() retval=00000001 ret=7ec20730 0010:Call KERNEL32.ConnectNamedPipe(0000004c,0011ab0c) ret=7ec26795 0010:Ret KERNEL32.ConnectNamedPipe() retval=00000000 ret=7ec26795 0010:Call ntdll.RtlReAllocateHeap(00110000,00000000,0011a9f8,00000008) ret=7ec26807 0010:Ret ntdll.RtlReAllocateHeap() retval=0011a9f8 ret=7ec26807 0010:Call KERNEL32.WaitForMultipleObjectsEx(00000002,0011a9f8,00000000,ffffffff,00000001) ret=7ec26376 0010:Ret KERNEL32.WaitForMultipleObjectsEx() retval=000000c0 ret=7ec26376 0010:Call KERNEL32.WaitForMultipleObjectsEx(00000002,0011a9f8,00000000,ffffffff,00000001) ret=7ec26376 0014:Ret KERNEL32.QueueUserWorkItem() retval=00000001 ret=7ec20857 0014:Call ntdll.RtlAllocateHeap(00110000,00000008,0000002c) ret=7ec207e1 0014:Ret ntdll.RtlAllocateHeap() retval=0011af58 ret=7ec207e1 0014:Call KERNEL32.ReadFile(00000028,0064e9cc,00000010,0064e97c,00000000) ret=7ec262f2 0014:Ret KERNEL32.ReadFile() retval=00000001 ret=7ec262f2 0014:Call ntdll.RtlAllocateHeap(00110000,00000000,00000018) ret=7ec1e43a 0014:Ret ntdll.RtlAllocateHeap() retval=0011ab90 ret=7ec1e43a 0014:Call KERNEL32.ReadFile(00000028,0011aba0,00000008,0064e97c,00000000) ret=7ec262f2 0014:Ret KERNEL32.ReadFile() retval=00000001 ret=7ec262f2 0014:Call ntdll.RtlAllocateHeap(00110000,00000000,0000000c) ret=7ec1e4f0 0014:Ret ntdll.RtlAllocateHeap() retval=0011ada0 ret=7ec1e4f0 0014:Call KERNEL32.ReadFile(00000028,0011ada0,0000000c,0064e97c,00000000) ret=7ec262f2 0014:Ret KERNEL32.ReadFile() retval=00000001 ret=7ec262f2 0014:Call ntdll.RtlAllocateHeap(00110000,00000000,0000000c) ret=7ec2b037 0014:Ret ntdll.RtlAllocateHeap() retval=0011adb8 ret=7ec2b037 0014:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec1ed28 0014:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec1ed28 0014:Call ntdll.RtlFreeHeap(00110000,00000000,0011ada0) ret=7ec1ed4b 0014:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec1ed4b 0014:Call ntdll.RtlAllocateHeap(00110000,00000000,0000000c) ret=7ec20825 0014:Ret ntdll.RtlAllocateHeap() retval=0011ada0 ret=7ec20825 0014:Call KERNEL32.QueueUserWorkItem(7ec21b40,0011ada0,00000010) ret=7ec20857 0015:Call rpcrt4.NdrServerInitializeNew(0011af58,0074e7cc,7ec631e0) ret=7ec5f38c 0015:Ret rpcrt4.NdrServerInitializeNew() retval=00000000 ret=7ec5f38c 0015:Call rpcrt4.NdrPointerUnmarshall(0074e7cc,0074e8ac,7ec61fd0,00000000) ret=7ec5f47e 0015:Ret rpcrt4.NdrPointerUnmarshall() retval=00000000 ret=7ec5f47e 0015:Call rpcrt4.NdrPointerUnmarshall(0074e7cc,0074e8b0,7ec62066,00000000) ret=7ec5f4a2 0015:Ret rpcrt4.NdrPointerUnmarshall() retval=00000000 ret=7ec5f4a2 0015:Call rpcrt4.NdrContextHandleInitialize(0074e7cc,7ec61fd8) ret=7ec5f4fa 0015:Call ntdll.RtlAllocateHeap(00110000,00000008,00000060) ret=7ec13f19 0015:Ret ntdll.RtlAllocateHeap() retval=0011b008 ret=7ec13f19 0015:Call ntdll.RtlInitializeResource(0011b02c) ret=7ec13f38 0015:Ret ntdll.RtlInitializeResource() retval=00000000 ret=7ec13f38 0015:Call ntdll.RtlAcquireResourceExclusive(0011b02c,00000001) ret=7ec13f52 0015:Ret ntdll.RtlAcquireResourceExclusive() retval=00000001 ret=7ec13f52 0015:Call ntdll.RtlAllocateHeap(00110000,00000000,00000008) ret=7ec2b0a3 0015:Ret ntdll.RtlAllocateHeap() retval=0011adf8 ret=7ec2b0a3 0015:Ret rpcrt4.NdrContextHandleInitialize() retval=0011b008 ret=7ec5f4fa 0015:Call ntdll.RtlAllocateHeap(00110000,00000000,0000000c) ret=7ec5705d 0015:Ret ntdll.RtlAllocateHeap() retval=0011b070 ret=7ec5705d 0015:Call ntdll.RtlMapGenericMask(0011b074,7ec616c8) ret=7ec57095 0015:Ret ntdll.RtlMapGenericMask() retval=00000001 ret=7ec57095 0015:Call rpcrt4.I_RpcGetBuffer(0011af58) ret=7ec5f53f 0015:Call ntdll.RtlAllocateHeap(00110000,00000000,00000020) ret=7ec2b037 0015:Ret ntdll.RtlAllocateHeap() retval=0011b088 ret=7ec2b037 0015:Ret rpcrt4.I_RpcGetBuffer() retval=00000000 ret=7ec5f53f 0015:Call rpcrt4.NdrServerContextNewMarshall(0074e7cc,0011b008,7ec55be0,7ec61fd8) ret=7ec5f579 0015:Call advapi32.SystemFunction036(0011b01c,00000010) ret=7ec2b2f6 0015:Ret advapi32.SystemFunction036() retval=00000001 ret=7ec2b2f6 0015:Call ntdll.RtlFreeHeap(00110000,00000000,0011adf8) ret=7ec2b118 0015:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec2b118 0015:Call ntdll.RtlReleaseResource(0011b02c) ret=7ec14552 0015:Ret ntdll.RtlReleaseResource() retval=00000000 ret=7ec14552 0015:Ret rpcrt4.NdrServerContextNewMarshall() retval=00000001 ret=7ec5f579 0015:Call rpcrt4.NdrPointerFree(0074e7cc,00000000,7ec61fd0) ret=7ec5a89b 0015:Ret rpcrt4.NdrPointerFree() retval=00000000 ret=7ec5a89b 0015:Call rpcrt4.NdrPointerFree(0074e7cc,00000000,7ec62066) ret=7ec5a8b7 0015:Ret rpcrt4.NdrPointerFree() retval=00000000 ret=7ec5a8b7 0015:Call ntdll.RtlAllocateHeap(00110000,00000008,00000018) ret=7ec1dcca 0015:Ret ntdll.RtlAllocateHeap() retval=0011adf8 ret=7ec1dcca 0015:Call ntdll.RtlAllocateHeap(00110000,00000008,00000030) ret=7ec1d685 0015:Ret ntdll.RtlAllocateHeap() retval=0011b0b0 ret=7ec1d685 0015:Call KERNEL32.WriteFile(00000028,0011b0b0,00000030,0074e82c,00000000) ret=7ec25bb2 0015:Ret KERNEL32.WriteFile() retval=00000001 ret=7ec25bb2 0015:Call ntdll.RtlFreeHeap(00110000,00000000,0011b0b0) ret=7ec1d78f 0015:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec1d78f 0015:Call ntdll.RtlFreeHeap(00110000,00000000,0011adf8) ret=7ec1e246 0015:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec1e246 0015:Call ntdll.RtlFreeHeap(00110000,00000000,0011adb8) ret=7ec2b066 0015:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec2b066 0015:Call ntdll.RtlFreeHeap(00110000,00000000,0011b088) ret=7ec2b066 0015:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec2b066 0015:Call ntdll.RtlFreeHeap(00110000,00000000,0011ab90) ret=7ec1e246 0015:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec1e246 0015:Call ntdll.RtlFreeHeap(00110000,00000000,0011af58) ret=7ec21bcf 0015:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec21bcf 0015:Call ntdll.RtlFreeHeap(00110000,00000000,0011ada0) ret=7ec21bf2 0015:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec21bf2 0013:Ret KERNEL32.ReadFile() retval=00000001 ret=7ebb92f2 0013:Call ntdll.RtlAllocateHeap(00110000,00000000,00000018) ret=7ebb143a 0013:Ret ntdll.RtlAllocateHeap() retval=0011d430 ret=7ebb143a 0013:Call KERNEL32.ReadFile(00000024,0011d440,00000008,0054e52c,00000000) ret=7ebb92f2 0013:Ret KERNEL32.ReadFile() retval=00000001 ret=7ebb92f2 0013:Call ntdll.RtlAllocateHeap(00110000,00000000,00000018) ret=7ebb14f0 0013:Ret ntdll.RtlAllocateHeap() retval=0011d450 ret=7ebb14f0 0013:Call KERNEL32.ReadFile(00000024,0011d450,00000018,0054e52c,00000000) ret=7ebb92f2 0013:Ret KERNEL32.ReadFile() retval=00000001 ret=7ebb92f2 0013:Call ntdll.RtlAllocateHeap(00110000,00000000,00000018) ret=7ebbe037 0013:Ret ntdll.RtlAllocateHeap() retval=0011d4e0 ret=7ebbe037 0013:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ebb1d28 0013:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ebb1d28 0013:Call ntdll.RtlFreeHeap(00110000,00000000,0011d450) ret=7ebb1d4b 0013:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ebb1d4b 0013:Call ntdll.RtlFreeHeap(00110000,00000000,0011d430) ret=7ebb1246 0013:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ebb1246 0013:Call ntdll.RtlFreeHeap(00110000,00000000,0011c028) ret=7ebbe066 0013:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ebbe066 0013:Ret rpcrt4.NdrSendReceive() retval=00000000 ret=7ec540c5 0013:Call rpcrt4.NdrClientContextUnmarshall(0054e82c,0054ea2c,0011d2c8) ret=7ec54115 0013:Call ntdll.RtlAllocateHeap(00110000,00000000,00000024) ret=7eb8bf85 0013:Ret ntdll.RtlAllocateHeap() retval=0011c028 ret=7eb8bf85 0013:Call ntdll.RtlAllocateHeap(00110000,00000008,00000044) ret=7eba8cb1 0013:Ret ntdll.RtlAllocateHeap() retval=0011d430 ret=7eba8cb1 0013:Call ntdll.RtlAllocateHeap(00110000,00000000,00000009) ret=7eba93db 0013:Ret ntdll.RtlAllocateHeap() retval=0011d500 ret=7eba93db 0013:Call ntdll.RtlAllocateHeap(00110000,00000000,00000001) ret=7eba93db 0013:Ret ntdll.RtlAllocateHeap() retval=0011d518 ret=7eba93db 0013:Call ntdll.RtlAllocateHeap(00110000,00000000,0000000d) ret=7eba93db 0013:Ret ntdll.RtlAllocateHeap() retval=0011d530 ret=7eba93db 0013:Ret rpcrt4.NdrClientContextUnmarshall() retval=00000000 ret=7ec54115 0013:Call rpcrt4.NdrFreeBuffer(0054e82c) ret=7ec504b8 0013:Call ntdll.RtlFreeHeap(00110000,00000000,0011d4e0) ret=7ebbe066 0013:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ebbe066 0013:Ret rpcrt4.NdrFreeBuffer() retval=00000000 ret=7ec504b8 0013:Call rpcrt4.RpcBindingFree(0054e734) ret=7ec4aced 0013:Call ntdll.RtlFreeHeap(00110000,00000000,0011d318) ret=7eba96d6 0013:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7eba96d6 0013:Call ntdll.RtlFreeHeap(00110000,00000000,0011bff0) ret=7eba96d6 0013:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7eba96d6 0013:Call ntdll.RtlFreeHeap(00110000,00000000,0011bfd8) ret=7eba96d6 0013:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7eba96d6 0013:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7eba9bb6 0013:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7eba9bb6 0013:Call ntdll.RtlFreeHeap(00110000,00000000,0011d2c8) ret=7eba9bf4 0013:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7eba9bf4 0013:Ret rpcrt4.RpcBindingFree() retval=00000000 ret=7ec4aced 000f:Ret KERNEL32.ConnectNamedPipe() retval=00000001 ret=7ec587e2 000f:Call ntdll.RtlAllocateHeap(00110000,00000000,00000036) ret=7ec58a37 000f:Ret ntdll.RtlAllocateHeap() retval=0011af58 ret=7ec58a37 000f:Call KERNEL32.WriteFile(00000040,0011af58,00000036,0033fc30,00000000) ret=7ec58b4a 000f:Ret KERNEL32.WriteFile() retval=00000001 ret=7ec58b4a 000f:Call KERNEL32.ReadFile(00000040,0033fc2c,00000004,0033fc30,00000000) ret=7ec58e3c 0013:Call rpcrt4.NdrClientInitializeNew(0054e910,0054e830,7ec5e760,00000010) ret=7ec53d4f 0013:Ret rpcrt4.NdrClientInitializeNew() retval=7ec4afd0 ret=7ec53d4f 0013:Call rpcrt4.NDRCContextBinding(0011c028) ret=7ec53d6e 0013:Ret rpcrt4.NDRCContextBinding() retval=0011d430 ret=7ec53d6e 0013:Call rpcrt4.NdrConformantStringBufferSize(0054e830,0011bfd8,7ec5cf62) ret=7ec53d91 0013:Ret rpcrt4.NdrConformantStringBufferSize() retval=00000012 ret=7ec53d91 0013:Call rpcrt4.NdrGetBuffer(0054e830,0000003e,0011d430) ret=7ec53dad 0013:Call ntdll.RtlAllocateHeap(00110000,00000000,0000003e) ret=7ebbe037 0013:Ret ntdll.RtlAllocateHeap() retval=0011d2c8 ret=7ebbe037 0013:Ret rpcrt4.NdrGetBuffer() retval=0011d2c8 ret=7ec53dad 0013:Call rpcrt4.NdrClientContextMarshall(0054e830,0011c028,00000000) ret=7ec53dc7 0013:Ret rpcrt4.NdrClientContextMarshall() retval=00000000 ret=7ec53dc7 0013:Call rpcrt4.NdrConformantStringMarshall(0054e830,0011bfd8,7ec5cf62) ret=7ec53ddd 0013:Ret rpcrt4.NdrConformantStringMarshall() retval=00000000 ret=7ec53ddd 0013:Call rpcrt4.NdrSendReceive(0054e830,0011d300) ret=7ec53e33 0013:Call ntdll.RtlAllocateHeap(00110000,00000008,00000018) ret=7ebb1819 0013:Ret ntdll.RtlAllocateHeap() retval=0011d310 ret=7ebb1819 0013:Call ntdll.RtlAllocateHeap(00110000,00000008,00000050) ret=7ebb0685 0013:Ret ntdll.RtlAllocateHeap() retval=0011d548 ret=7ebb0685 0013:Call KERNEL32.WriteFile(00000024,0011d548,00000050,0054e57c,00000000) ret=7ebb8bb2 0013:Ret KERNEL32.WriteFile() retval=00000001 ret=7ebb8bb2 0013:Call ntdll.RtlFreeHeap(00110000,00000000,0011d548) ret=7ebb078f 0013:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ebb078f 0013:Call ntdll.RtlFreeHeap(00110000,00000000,0011d310) ret=7ebb1246 0013:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ebb1246 0013:Call KERNEL32.ReadFile(00000024,0054e58c,00000010,0054e53c,00000000) ret=7ebb92f2 0014:Ret KERNEL32.QueueUserWorkItem() retval=00000001 ret=7ec20857 0014:Call ntdll.RtlAllocateHeap(00110000,00000008,0000002c) ret=7ec207e1 0014:Ret ntdll.RtlAllocateHeap() retval=0011b088 ret=7ec207e1 0014:Call KERNEL32.ReadFile(00000028,0064e9cc,00000010,0064e97c,00000000) ret=7ec262f2 0014:Ret KERNEL32.ReadFile() retval=00000001 ret=7ec262f2 0014:Call ntdll.RtlAllocateHeap(00110000,00000000,00000018) ret=7ec1e43a 0014:Ret ntdll.RtlAllocateHeap() retval=0011ac38 ret=7ec1e43a 0014:Call KERNEL32.ReadFile(00000028,0011ac48,00000008,0064e97c,00000000) ret=7ec262f2 0014:Ret KERNEL32.ReadFile() retval=00000001 ret=7ec262f2 0014:Call ntdll.RtlAllocateHeap(00110000,00000000,00000038) ret=7ec1e4f0 0014:Ret ntdll.RtlAllocateHeap() retval=0011b0c0 ret=7ec1e4f0 0014:Call KERNEL32.ReadFile(00000028,0011b0c0,00000038,0064e97c,00000000) ret=7ec262f2 0014:Ret KERNEL32.ReadFile() retval=00000001 ret=7ec262f2 0014:Call ntdll.RtlAllocateHeap(00110000,00000000,00000038) ret=7ec2b037 0014:Ret ntdll.RtlAllocateHeap() retval=0011b100 ret=7ec2b037 0014:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec1ed28 0014:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec1ed28 0014:Call ntdll.RtlFreeHeap(00110000,00000000,0011b0c0) ret=7ec1ed4b 0014:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec1ed4b 0014:Call ntdll.RtlAllocateHeap(00110000,00000000,0000000c) ret=7ec20825 0014:Ret ntdll.RtlAllocateHeap() retval=0011ab90 ret=7ec20825 0014:Call KERNEL32.QueueUserWorkItem(7ec21b40,0011ab90,00000010) ret=7ec20857 0015:Call rpcrt4.NdrServerInitializeNew(0011b088,0074e7cc,7ec631e0) ret=7ec5f09c 0015:Ret rpcrt4.NdrServerInitializeNew() retval=00000000 ret=7ec5f09c 0015:Call rpcrt4.NdrServerContextNewUnmarshall(0074e7cc,7ec61fdc) ret=7ec5f17f 0015:Call ntdll.RtlAcquireResourceExclusive(0011b02c,00000001) ret=7ec1521f 0015:Ret ntdll.RtlAcquireResourceExclusive() retval=00000001 ret=7ec1521f 0015:Call ntdll.RtlAllocateHeap(00110000,00000000,00000008) ret=7ec2b0a3 0015:Ret ntdll.RtlAllocateHeap() retval=0011ada0 ret=7ec2b0a3 0015:Ret rpcrt4.NdrServerContextNewUnmarshall() retval=0011b008 ret=7ec5f17f 0015:Call rpcrt4.NdrConformantStringUnmarshall(0074e7cc,0074e8b0,7ec61fe2,00000000) ret=7ec5f1a3 0015:Ret rpcrt4.NdrConformantStringUnmarshall() retval=00000000 ret=7ec5f1a3 0015:Call rpcrt4.NdrContextHandleInitialize(0074e7cc,7ec61fe4) ret=7ec5f1fb 0015:Call ntdll.RtlAllocateHeap(00110000,00000008,00000060) ret=7ec13f19 0015:Ret ntdll.RtlAllocateHeap() retval=0011b140 ret=7ec13f19 0015:Call ntdll.RtlInitializeResource(0011b164) ret=7ec13f38 0015:Ret ntdll.RtlInitializeResource() retval=00000000 ret=7ec13f38 0015:Call ntdll.RtlAcquireResourceExclusive(0011b164,00000001) ret=7ec13f52 0015:Ret ntdll.RtlAcquireResourceExclusive() retval=00000001 ret=7ec13f52 0015:Call ntdll.RtlAllocateHeap(00110000,00000000,00000008) ret=7ec2b0a3 0015:Ret ntdll.RtlAllocateHeap() retval=0011b0c0 ret=7ec2b0a3 0015:Ret rpcrt4.NdrContextHandleInitialize() retval=0011b140 ret=7ec5f1fb 0015:Call ntdll.RtlAllocateHeap(00110000,00000000,0000000c) ret=7ec56a23 0015:Ret ntdll.RtlAllocateHeap() retval=0011b0d8 ret=7ec56a23 0015:Call ntdll.RtlMapGenericMask(0011b0dc,7ec6166c) ret=7ec56a67 0015:Ret ntdll.RtlMapGenericMask() retval=00008000 ret=7ec56a67 0015:Call rpcrt4.I_RpcGetBuffer(0011b088) ret=7ec5f243 0015:Call ntdll.RtlAllocateHeap(00110000,00000000,00000020) ret=7ec2b037 0015:Ret ntdll.RtlAllocateHeap() retval=0011b1a8 ret=7ec2b037 0015:Ret rpcrt4.I_RpcGetBuffer() retval=00000000 ret=7ec5f243 0015:Call rpcrt4.NdrServerContextNewMarshall(0074e7cc,0011b140,7ec55be0,7ec61fe4) ret=7ec5f27d 0015:Call advapi32.SystemFunction036(0011b154,00000010) ret=7ec2b2f6 0015:Ret advapi32.SystemFunction036() retval=00000001 ret=7ec2b2f6 0015:Call ntdll.RtlFreeHeap(00110000,00000000,0011b0c0) ret=7ec2b118 0015:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec2b118 0015:Call ntdll.RtlReleaseResource(0011b164) ret=7ec14552 0015:Ret ntdll.RtlReleaseResource() retval=00000000 ret=7ec14552 0015:Ret rpcrt4.NdrServerContextNewMarshall() retval=00000001 ret=7ec5f27d 0015:Call rpcrt4.NdrPointerFree(0074e7cc,0011b120,7ec61fe0) ret=7ec5a846 0015:Ret rpcrt4.NdrPointerFree() retval=0011b120 ret=7ec5a846 0015:Call ntdll.RtlFreeHeap(00110000,00000000,0011ada0) ret=7ec2a71c 0015:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec2a71c 0015:Call ntdll.RtlReleaseResource(0011b02c) ret=7ec14552 0015:Ret ntdll.RtlReleaseResource() retval=00000000 ret=7ec14552 0015:Call ntdll.RtlAllocateHeap(00110000,00000008,00000018) ret=7ec1dcca 0015:Ret ntdll.RtlAllocateHeap() retval=0011ada0 ret=7ec1dcca 0015:Call ntdll.RtlAllocateHeap(00110000,00000008,00000030) ret=7ec1d685 0015:Ret ntdll.RtlAllocateHeap() retval=0011b1d0 ret=7ec1d685 0015:Call KERNEL32.WriteFile(00000028,0011b1d0,00000030,0074e82c,00000000) ret=7ec25bb2 0015:Ret KERNEL32.WriteFile() retval=00000001 ret=7ec25bb2 0015:Call ntdll.RtlFreeHeap(00110000,00000000,0011b1d0) ret=7ec1d78f 0015:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec1d78f 0015:Call ntdll.RtlFreeHeap(00110000,00000000,0011ada0) ret=7ec1e246 0015:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec1e246 0015:Call ntdll.RtlFreeHeap(00110000,00000000,0011b100) ret=7ec2b066 0015:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec2b066 0015:Call ntdll.RtlFreeHeap(00110000,00000000,0011b1a8) ret=7ec2b066 0015:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec2b066 0015:Call ntdll.RtlFreeHeap(00110000,00000000,0011ac38) ret=7ec1e246 0015:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec1e246 0015:Call ntdll.RtlFreeHeap(00110000,00000000,0011b088) ret=7ec21bcf 0015:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec21bcf 0015:Call ntdll.RtlFreeHeap(00110000,00000000,0011ab90) ret=7ec21bf2 0015:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec21bf2 0013:Ret KERNEL32.ReadFile() retval=00000001 ret=7ebb92f2 0013:Call ntdll.RtlAllocateHeap(00110000,00000000,00000018) ret=7ebb143a 0013:Ret ntdll.RtlAllocateHeap() retval=0011d310 ret=7ebb143a 0013:Call KERNEL32.ReadFile(00000024,0011d320,00000008,0054e53c,00000000) ret=7ebb92f2 0013:Ret KERNEL32.ReadFile() retval=00000001 ret=7ebb92f2 0013:Call ntdll.RtlAllocateHeap(00110000,00000000,00000018) ret=7ebb14f0 0013:Ret ntdll.RtlAllocateHeap() retval=0011d4e0 ret=7ebb14f0 0013:Call KERNEL32.ReadFile(00000024,0011d4e0,00000018,0054e53c,00000000) ret=7ebb92f2 0013:Ret KERNEL32.ReadFile() retval=00000001 ret=7ebb92f2 0013:Call ntdll.RtlAllocateHeap(00110000,00000000,00000018) ret=7ebbe037 0013:Ret ntdll.RtlAllocateHeap() retval=0011d548 ret=7ebbe037 0013:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ebb1d28 0013:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ebb1d28 0013:Call ntdll.RtlFreeHeap(00110000,00000000,0011d4e0) ret=7ebb1d4b 0013:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ebb1d4b 0013:Call ntdll.RtlFreeHeap(00110000,00000000,0011d310) ret=7ebb1246 0013:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ebb1246 0013:Call ntdll.RtlFreeHeap(00110000,00000000,0011d2c8) ret=7ebbe066 0013:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ebbe066 0013:Ret rpcrt4.NdrSendReceive() retval=00000000 ret=7ec53e33 0013:Call rpcrt4.NdrClientContextUnmarshall(0054e830,0054ea30,0011d430) ret=7ec53e83 0013:Call ntdll.RtlAllocateHeap(00110000,00000000,00000024) ret=7eb8bf85 0013:Ret ntdll.RtlAllocateHeap() retval=0011d2c8 ret=7eb8bf85 0013:Call ntdll.RtlAllocateHeap(00110000,00000008,00000044) ret=7eba8cb1 0013:Ret ntdll.RtlAllocateHeap() retval=0011d568 ret=7eba8cb1 0013:Call ntdll.RtlAllocateHeap(00110000,00000000,00000009) ret=7eba93db 0013:Ret ntdll.RtlAllocateHeap() retval=0011d4e0 ret=7eba93db 0013:Call ntdll.RtlAllocateHeap(00110000,00000000,00000001) ret=7eba93db 0013:Ret ntdll.RtlAllocateHeap() retval=0011d2f8 ret=7eba93db 0013:Call ntdll.RtlAllocateHeap(00110000,00000000,0000000d) ret=7eba93db 0013:Ret ntdll.RtlAllocateHeap() retval=0011d310 ret=7eba93db 0013:Ret rpcrt4.NdrClientContextUnmarshall() retval=00000000 ret=7ec53e83 0013:Call rpcrt4.NdrFreeBuffer(0054e830) ret=7ec501b2 0013:Call ntdll.RtlFreeHeap(00110000,00000000,0011d548) ret=7ebbe066 0013:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ebbe066 0013:Ret rpcrt4.NdrFreeBuffer() retval=00000000 ret=7ec501b2 0014:Ret KERNEL32.QueueUserWorkItem() retval=00000001 ret=7ec20857 0014:Call ntdll.RtlAllocateHeap(00110000,00000008,0000002c) ret=7ec207e1 0014:Ret ntdll.RtlAllocateHeap() retval=0011b100 ret=7ec207e1 0014:Call KERNEL32.ReadFile(00000028,0064e9cc,00000010,0064e97c,00000000) ret=7ec262f2 0016:Call PE DLL (proc=0x7ee72a90,module=0x7edf0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) 0016:Ret PE DLL (proc=0x7ee72a90,module=0x7edf0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0016:Call PE DLL (proc=0x7ebbfe70,module=0x7eb80000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) 0016:Ret PE DLL (proc=0x7ebbfe70,module=0x7eb80000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0016:Starting thread proc 0x7ec4b260 (arg=0x11bf00) 0016:Call KERNEL32.CreateEventW(00000000,00000001,00000000,00000000) ret=7ecacbe8 0016:Ret KERNEL32.CreateEventW() retval=00000038 ret=7ecacbe8 0016:Call advapi32.RegisterServiceCtrlHandlerExW(00114cca L"MountMgr",7ecaca30,00000000) ret=7ecacc11 0016:Ret advapi32.RegisterServiceCtrlHandlerExW() retval=0011d2c8 ret=7ecacc11 0016:Call advapi32.SetServiceStatus(0011d2c8,0064ea30) ret=7ecacc68 0016:Call rpcrt4.NdrClientInitializeNew(0064e620,0064e540,7ec5e760,00000007) ret=7ec50607 0016:Ret rpcrt4.NdrClientInitializeNew() retval=7ec4afd0 ret=7ec50607 0016:Call rpcrt4.NDRCContextBinding(0011d2c8) ret=7ec5061a 0016:Ret rpcrt4.NDRCContextBinding() retval=0011d568 ret=7ec5061a 0016:Call rpcrt4.NdrGetBuffer(0064e540,00000038,0011d568) ret=7ec5063e 0016:Call ntdll.RtlAllocateHeap(00110000,00000000,00000038) ret=7ebbe037 0016:Ret ntdll.RtlAllocateHeap() retval=0011d5d0 ret=7ebbe037 0016:Ret rpcrt4.NdrGetBuffer() retval=0011d5d0 ret=7ec5063e 0016:Call rpcrt4.NdrClientContextMarshall(0064e540,0011d2c8,00000000) ret=7ec50655 0016:Ret rpcrt4.NdrClientContextMarshall() retval=00000000 ret=7ec50655 0016:Call rpcrt4.NdrSimpleStructMarshall(0064e540,0064ea30,7ec5cecc) ret=7ec50671 0016:Ret rpcrt4.NdrSimpleStructMarshall() retval=00000000 ret=7ec50671 0016:Call rpcrt4.NdrSendReceive(0064e540,0011d600) ret=7ec50686 0016:Call ntdll.RtlAllocateHeap(00110000,00000008,00000018) ret=7ebb1819 0016:Ret ntdll.RtlAllocateHeap() retval=0011d610 ret=7ebb1819 0016:Call ntdll.RtlAllocateHeap(00110000,00000008,00000030) ret=7ebbd65d 0016:Ret ntdll.RtlAllocateHeap() retval=0011d630 ret=7ebbd65d 0016:Call KERNEL32.InitializeCriticalSection(0011d638) ret=7ebbd671 0016:Ret KERNEL32.InitializeCriticalSection() retval=00000001 ret=7ebbd671 0016:Call ntdll.RtlAllocateHeap(00110000,00000008,00000048) ret=7ebb0685 0016:Ret ntdll.RtlAllocateHeap() retval=0011d690 ret=7ebb0685 0016:Call KERNEL32.WriteFile(00000024,0011d690,00000048,0064e28c,00000000) ret=7ebb8bb2 0016:Ret KERNEL32.WriteFile() retval=00000001 ret=7ebb8bb2 0016:Call ntdll.RtlFreeHeap(00110000,00000000,0011d690) ret=7ebb078f 0016:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ebb078f 0016:Call ntdll.RtlFreeHeap(00110000,00000000,0011d610) ret=7ebb1246 0016:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ebb1246 0016:Call KERNEL32.ReadFile(00000024,0064e29c,00000010,0064e24c,00000000) ret=7ebb92f2 0014:Ret KERNEL32.ReadFile() retval=00000001 ret=7ec262f2 0014:Call ntdll.RtlAllocateHeap(00110000,00000000,00000018) ret=7ec1e43a 0014:Ret ntdll.RtlAllocateHeap() retval=0011ab90 ret=7ec1e43a 0014:Call KERNEL32.ReadFile(00000028,0011aba0,00000008,0064e97c,00000000) ret=7ec262f2 0014:Ret KERNEL32.ReadFile() retval=00000001 ret=7ec262f2 0014:Call ntdll.RtlAllocateHeap(00110000,00000000,00000030) ret=7ec1e4f0 0014:Ret ntdll.RtlAllocateHeap() retval=0011b088 ret=7ec1e4f0 0014:Call KERNEL32.ReadFile(00000028,0011b088,00000030,0064e97c,00000000) ret=7ec262f2 0014:Ret KERNEL32.ReadFile() retval=00000001 ret=7ec262f2 0014:Call ntdll.RtlAllocateHeap(00110000,00000000,00000030) ret=7ec2b037 0014:Ret ntdll.RtlAllocateHeap() retval=0011b1a8 ret=7ec2b037 0014:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec1ed28 0014:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec1ed28 0014:Call ntdll.RtlFreeHeap(00110000,00000000,0011b088) ret=7ec1ed4b 0014:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec1ed4b 0014:Call ntdll.RtlAllocateHeap(00110000,00000000,0000000c) ret=7ec20825 0014:Ret ntdll.RtlAllocateHeap() retval=0011ac38 ret=7ec20825 0014:Call KERNEL32.QueueUserWorkItem(7ec21b40,0011ac38,00000010) ret=7ec20857 0015:Call rpcrt4.NdrServerInitializeNew(0011b100,0074e7d4,7ec631e0) ret=7ec60aac 0015:Ret rpcrt4.NdrServerInitializeNew() retval=00000000 ret=7ec60aac 0015:Call rpcrt4.NdrServerContextNewUnmarshall(0074e7d4,7ec61f48) ret=7ec60b8b 0015:Call ntdll.RtlAcquireResourceExclusive(0011b164,00000001) ret=7ec1521f 0015:Ret ntdll.RtlAcquireResourceExclusive() retval=00000001 ret=7ec1521f 0015:Call ntdll.RtlAllocateHeap(00110000,00000000,00000008) ret=7ec2b0a3 0015:Ret ntdll.RtlAllocateHeap() retval=0011ada0 ret=7ec2b0a3 0015:Ret rpcrt4.NdrServerContextNewUnmarshall() retval=0011b140 ret=7ec60b8b 0015:Call rpcrt4.NdrSimpleStructUnmarshall(0074e7d4,0074e8b8,7ec61f4c,00000000) ret=7ec60bac 0015:Ret rpcrt4.NdrSimpleStructUnmarshall() retval=00000000 ret=7ec60bac 0015:Call KERNEL32.SetEvent(0000003c) ret=7ec560e9 0015:Ret KERNEL32.SetEvent() retval=00000001 ret=7ec560e9 0015:Call rpcrt4.I_RpcGetBuffer(0011b100) ret=7ec60c09 0015:Call ntdll.RtlAllocateHeap(00110000,00000000,00000008) ret=7ec2b037 0015:Ret ntdll.RtlAllocateHeap() retval=0011b088 ret=7ec2b037 0015:Ret rpcrt4.I_RpcGetBuffer() retval=00000000 ret=7ec60c09 0015:Call ntdll.RtlFreeHeap(00110000,00000000,0011ada0) ret=7ec2a71c 0015:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec2a71c 0015:Call ntdll.RtlReleaseResource(0011b164) ret=7ec14552 0015:Ret ntdll.RtlReleaseResource() retval=00000000 ret=7ec14552 0015:Call ntdll.RtlAllocateHeap(00110000,00000008,00000018) ret=7ec1dcca 0015:Ret ntdll.RtlAllocateHeap() retval=0011ada0 ret=7ec1dcca 0015:Call ntdll.RtlAllocateHeap(00110000,00000008,0000001c) ret=7ec1d685 0015:Ret ntdll.RtlAllocateHeap() retval=0011b0a0 ret=7ec1d685 0015:Call KERNEL32.WriteFile(00000028,0011b0a0,0000001c,0074e82c,00000000) ret=7ec25bb2 0015:Ret KERNEL32.WriteFile() retval=00000001 ret=7ec25bb2 0015:Call ntdll.RtlFreeHeap(00110000,00000000,0011b0a0) ret=7ec1d78f 0015:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec1d78f 0015:Call ntdll.RtlFreeHeap(00110000,00000000,0011ada0) ret=7ec1e246 0015:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec1e246 0015:Call ntdll.RtlFreeHeap(00110000,00000000,0011b1a8) ret=7ec2b066 0015:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec2b066 0015:Call ntdll.RtlFreeHeap(00110000,00000000,0011b088) ret=7ec2b066 0015:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec2b066 0015:Call ntdll.RtlFreeHeap(00110000,00000000,0011ab90) ret=7ec1e246 0015:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec1e246 0015:Call ntdll.RtlFreeHeap(00110000,00000000,0011b100) ret=7ec21bcf 0015:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec21bcf 0015:Call ntdll.RtlFreeHeap(00110000,00000000,0011ac38) ret=7ec21bf2 0015:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec21bf2 0016:Ret KERNEL32.ReadFile() retval=00000001 ret=7ebb92f2 0016:Call ntdll.RtlAllocateHeap(00110000,00000000,00000018) ret=7ebb143a 0016:Ret ntdll.RtlAllocateHeap() retval=0011d610 ret=7ebb143a 0016:Call KERNEL32.ReadFile(00000024,0011d620,00000008,0064e24c,00000000) ret=7ebb92f2 0016:Ret KERNEL32.ReadFile() retval=00000001 ret=7ebb92f2 0016:Call ntdll.RtlAllocateHeap(00110000,00000000,00000004) ret=7ebb14f0 0016:Ret ntdll.RtlAllocateHeap() retval=0011d690 ret=7ebb14f0 0016:Call KERNEL32.ReadFile(00000024,0011d690,00000004,0064e24c,00000000) ret=7ebb92f2 0016:Ret KERNEL32.ReadFile() retval=00000001 ret=7ebb92f2 0016:Call ntdll.RtlAllocateHeap(00110000,00000000,00000004) ret=7ebbe037 0016:Ret ntdll.RtlAllocateHeap() retval=0011d6a8 ret=7ebbe037 0016:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ebb1d28 0016:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ebb1d28 0016:Call ntdll.RtlFreeHeap(00110000,00000000,0011d690) ret=7ebb1d4b 0016:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ebb1d4b 0016:Call ntdll.RtlFreeHeap(00110000,00000000,0011d610) ret=7ebb1246 0016:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ebb1246 0016:Call ntdll.RtlFreeHeap(00110000,00000000,0011d5d0) ret=7ebbe066 0016:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ebbe066 0016:Ret rpcrt4.NdrSendReceive() retval=00000000 ret=7ec50686 0016:Call rpcrt4.NdrFreeBuffer(0064e540) ret=7ec50332 0016:Call ntdll.RtlFreeHeap(00110000,00000000,0011d6a8) ret=7ebbe066 0016:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ebbe066 0016:Ret rpcrt4.NdrFreeBuffer() retval=00000000 ret=7ec50332 0016:Ret advapi32.SetServiceStatus() retval=00000001 ret=7ecacc68 0016:Call ntdll.RtlAllocateHeap(00110000,00000000,0000007a) ret=7ecaccae 0016:Ret ntdll.RtlAllocateHeap() retval=0011d690 ret=7ecaccae 0016:Call KERNEL32.lstrcpyW(0011d690,7ecad920 L"\\Registry\\Machine\\System\\CurrentControlSet\\Services\\") ret=7ecaccc5 0016:Ret KERNEL32.lstrcpyW() retval=0011d690 ret=7ecaccc5 0016:Call KERNEL32.lstrcatW(0011d690 L"\\Registry\\Machine\\System\\CurrentControlSet\\Services\\",00114cca L"MountMgr") ret=7ecaccda 0016:Ret KERNEL32.lstrcatW() retval=0011d690 ret=7ecaccda 0016:Call advapi32.RegOpenKeyW(80000002,0011d6b4 L"System\\CurrentControlSet\\Services\\MountMgr",7ecae5a8) ret=7ecaccfa 0016:Ret advapi32.RegOpenKeyW() retval=00000000 ret=7ecaccfa 0016:Call ntdll.RtlInitUnicodeString(0064ea4c,0011d690 L"\\Registry\\Machine\\System\\CurrentControlSet\\Services\\MountMgr") ret=7ecace2d 0016:Ret ntdll.RtlInitUnicodeString() retval=00000078 ret=7ecace2d 0016:Call advapi32.RegQueryValueExW(0000003c,7ecad98a L"ImagePath",00000000,0064ea58,00000000,0064ea54) ret=7ecace73 0016:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ecace73 0016:Call ntdll.RtlAllocateHeap(00110000,00000000,00000052) ret=7ecace9f 0016:Ret ntdll.RtlAllocateHeap() retval=0011d5d0 ret=7ecace9f 0016:Call advapi32.RegQueryValueExW(0000003c,7ecad98a L"ImagePath",00000000,0064ea58,0011d5d0,0064ea54) ret=7ecaced6 0016:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ecaced6 0016:Call KERNEL32.ExpandEnvironmentStringsW(0011d5d0 L"C:\\windows\\system32\\drivers\\mountmgr.sys",00000000,00000000) ret=7ecad536 0016:Ret KERNEL32.ExpandEnvironmentStringsW() retval=00000029 ret=7ecad536 0016:Call ntdll.RtlAllocateHeap(00110000,00000000,00000052) ret=7ecad55c 0016:Ret ntdll.RtlAllocateHeap() retval=0011d718 ret=7ecad55c 0016:Call KERNEL32.ExpandEnvironmentStringsW(0011d5d0 L"C:\\windows\\system32\\drivers\\mountmgr.sys",0011d718,00000029) ret=7ecad57e 0016:Ret KERNEL32.ExpandEnvironmentStringsW() retval=00000029 ret=7ecad57e 0016:Call ntdll.RtlFreeHeap(00110000,00000000,0011d5d0) ret=7ecacf08 0016:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ecacf08 0016:Call KERNEL32.LoadLibraryW(0011d718 L"C:\\windows\\system32\\drivers\\mountmgr.sys") ret=7ecac7c1 0016:Ret KERNEL32.LoadLibraryW() retval=7eb60000 ret=7ecac7c1 0016:Call ntdll.RtlImageNtHeader(7eb60000) ret=7ecac7d7 0016:Ret ntdll.RtlImageNtHeader() retval=7eb60040 ret=7ecac7d7 0016:Call ntdll.RtlFreeHeap(00110000,00000000,0011d718) ret=7ecacfa0 0016:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ecacfa0 0016:Call ntdll.RtlImageNtHeader(7eb60000) ret=7ecacfb3 0016:Ret ntdll.RtlImageNtHeader() retval=7eb60040 ret=7ecacfb3 0016:Call driver init 0x7eb68230 (obj=0x7ecae5c0,str=L"\\Registry\\Machine\\System\\CurrentControlSet\\Services\\MountMgr") 0016:Call ntdll.RtlInitUnicodeString(0064e790,7eb68c60 L"\\Device\\MountPointManager") ret=7eb67122 0016:Ret ntdll.RtlInitUnicodeString() retval=00000032 ret=7eb67122 0016:Call ntdll.RtlInitUnicodeString(0064e788,7eb68c20 L"\\??\\MountPointManager") ret=7eb6713d 0016:Ret ntdll.RtlInitUnicodeString() retval=0000002a ret=7eb6713d 0016:Call ntoskrnl.exe.IoCreateDevice(7ecae5c0,00000000,0064e790,00000000,00000000,00000000,0064e798) ret=7eb67173 0016:Call ntdll.RtlAllocateHeap(00110000,00000008,000000b8) ret=7ebf601c 0016:Ret ntdll.RtlAllocateHeap() retval=0011d718 ret=7ebf601c 0016:Ret ntoskrnl.exe.IoCreateDevice() retval=00000000 ret=7eb67173 0016:Call ntoskrnl.exe.IoCreateSymbolicLink(0064e788,0064e790) ret=7eb671df 0016:Call ntdll.NtCreateSymbolicLinkObject(0064e6b8,000f0001,0064e6a0,0064e790) ret=7ebf5f2c 0016:Ret ntdll.NtCreateSymbolicLinkObject() retval=00000000 ret=7ebf5f2c 0016:Ret ntoskrnl.exe.IoCreateSymbolicLink() retval=00000000 ret=7eb671df 0016:Call advapi32.RegCreateKeyExW(80000002,7eb68ca0 L"System\\MountedDevices",00000000,00000000,00000001,000f003f,00000000,7eb696f0,00000000) ret=7eb67238 0016:Ret advapi32.RegCreateKeyExW() retval=00000000 ret=7eb67238 0016:Call ntdll.RtlInitUnicodeString(0064e790,7eb68be0 L"\\Driver\\Harddisk") ret=7eb6724d 0016:Ret ntdll.RtlInitUnicodeString() retval=00000020 ret=7eb6724d 0016:Call ntoskrnl.exe.IoCreateDriver(0064e790,7eb655d0) ret=7eb67262 0016:Call ntdll.RtlAllocateHeap(00110000,00000008,000000bc) ret=7ebf4ede 0016:Ret ntdll.RtlAllocateHeap() retval=0011d950 ret=7ebf4ede 0016:Call ntdll.RtlDuplicateUnicodeString(00000001,0064e790,0011d96c) ret=7ebf4f04 0016:Ret ntdll.RtlDuplicateUnicodeString() retval=00000000 ret=7ebf4f04 0016:Call ntdll.RtlAllocateHeap(00110000,00000000,00000038) ret=7eb64f9e 0016:Ret ntdll.RtlAllocateHeap() retval=0011d5d0 ret=7eb64f9e 0016:Call ntoskrnl.exe.IoCreateDevice(0011d950,00000044,0064e5e0,00000000,00000000,00000000,0064e5e8) ret=7eb65033 0016:Call ntdll.RtlAllocateHeap(00110000,00000008,000000fc) ret=7ebf601c 0016:Ret ntdll.RtlAllocateHeap() retval=0011da18 ret=7ebf601c 0016:Ret ntoskrnl.exe.IoCreateDevice() retval=00000000 ret=7eb65033 0016:Call ntdll.RtlAllocateHeap(00110000,00000000,00000016) ret=7eb650f5 0016:Ret ntdll.RtlAllocateHeap() retval=0011d610 ret=7eb650f5 0016:Call ntdll.RtlAllocateHeap(00110000,00000000,0000003c) ret=7eb652ad 0016:Ret ntdll.RtlAllocateHeap() retval=0011d7d8 ret=7eb652ad 0016:Call ntoskrnl.exe.IoCreateSymbolicLink(0064e5d8,0064e5e0) ret=7eb65302 0016:Call ntdll.NtCreateSymbolicLinkObject(0064e4f8,000f0001,0064e4e0,0064e5e0) ret=7ebf5f2c 0016:Ret ntdll.NtCreateSymbolicLinkObject() retval=00000000 ret=7ebf5f2c 0016:Ret ntoskrnl.exe.IoCreateSymbolicLink() retval=00000000 ret=7eb65302 0016:Call ntdll.RtlAllocateHeap(00110000,00000000,00000021) ret=7eb653b2 0016:Ret ntdll.RtlAllocateHeap() retval=0011d820 ret=7eb653b2 0016:Call advapi32.RegOpenKeyW(80000002,7eb685c0 L"Software\\Wine\\Drives",0064e68c) ret=7eb6564e 0016:Ret advapi32.RegOpenKeyW() retval=00000000 ret=7eb6564e 0016:Call ntdll.RtlAllocateHeap(00110000,00000000,00000080) ret=7eb65491 0016:Ret ntdll.RtlAllocateHeap() retval=0011db20 ret=7eb65491 0016:Call ntdll.RtlFreeHeap(00110000,00000000,0011db20) ret=7eb654cb 0016:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7eb654cb 0016:Call ntdll.RtlAllocateHeap(00110000,00000000,00000080) ret=7eb65491 0016:Ret ntdll.RtlAllocateHeap() retval=0011db20 ret=7eb65491 0016:Call ntdll.RtlFreeHeap(00110000,00000000,0011db20) ret=7eb654cb 0016:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7eb654cb 0016:Call ntdll.RtlAllocateHeap(00110000,00000000,00000080) ret=7eb65491 0016:Ret ntdll.RtlAllocateHeap() retval=0011db20 ret=7eb65491 0016:Call ntdll.RtlAllocateHeap(00110000,00000000,00000080) ret=7eb65491 0016:Ret ntdll.RtlAllocateHeap() retval=0011dba8 ret=7eb65491 0016:Call ntdll.RtlFreeHeap(00110000,00000000,0011dba8) ret=7eb654cb 0016:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7eb654cb 0016:Call advapi32.RegQueryValueExW(00000058,0064e67e L"c:",00000000,0064e688,0064e63e,0064e684) ret=7eb6571f 0016:Ret advapi32.RegQueryValueExW() retval=00000002 ret=7eb6571f 0016:Call ntdll.RtlAllocateHeap(00110000,00000000,00000044) ret=7eb64f9e 0016:Ret ntdll.RtlAllocateHeap() retval=0011dba8 ret=7eb64f9e 0016:Call ntoskrnl.exe.IoCreateDevice(0011d950,00000044,0064e5e0,00000000,00000000,00000000,0064e5e8) ret=7eb65033 0016:Call ntdll.RtlAllocateHeap(00110000,00000008,000000fc) ret=7ebf601c 0016:Ret ntdll.RtlAllocateHeap() retval=0011dbf8 ret=7ebf601c 0016:Ret ntoskrnl.exe.IoCreateDevice() retval=00000000 ret=7eb65033 0016:Call ntdll.RtlAllocateHeap(00110000,00000000,00000072) ret=7eb67d29 0016:Ret ntdll.RtlAllocateHeap() retval=0011dd00 ret=7eb67d29 0016:Call ntdll.RtlInitUnicodeString(0011dd14,0011dd24 L"\\DosDevices\\C:") ret=7eb67d6f 0016:Ret ntdll.RtlInitUnicodeString() retval=0000001c ret=7eb67d6f 0016:Call ntoskrnl.exe.IoCreateSymbolicLink(0011dd14,0011dcc8) ret=7eb67e12 0016:Call ntdll.NtCreateSymbolicLinkObject(0064e478,000f0001,0064e460,0011dcc8) ret=7ebf5f2c 0016:Ret ntdll.NtCreateSymbolicLinkObject() retval=00000000 ret=7ebf5f2c 0016:Ret ntoskrnl.exe.IoCreateSymbolicLink() retval=00000000 ret=7eb67e12 0016:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7eb67c20 0016:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7eb67c20 0016:Call ntdll.RtlAllocateHeap(00110000,00000008,0000000b) ret=7eb67c4f 0016:Ret ntdll.RtlAllocateHeap() retval=0011dd80 ret=7eb67c4f 0016:Call advapi32.RegSetValueExW(0000004c,0011dd24 L"\\DosDevices\\C:",00000000,00000003,0011dd80,0000000b) ret=7eb67c9f 0016:Ret advapi32.RegSetValueExW() retval=00000000 ret=7eb67c9f 0016:Call ntdll.RtlAllocateHeap(00110000,00000000,000000b6) ret=7eb67d29 0016:Ret ntdll.RtlAllocateHeap() retval=0011dd98 ret=7eb67d29 0016:Call ntdll.RtlInitUnicodeString(0011ddac,0011ddbc L"\\??\\Volume{00000000-0000-0000-0000-000000000043}") ret=7eb67d6f 0016:Ret ntdll.RtlInitUnicodeString() retval=00000060 ret=7eb67d6f 0016:Call ntoskrnl.exe.IoCreateSymbolicLink(0011ddac,0011dcc8) ret=7eb67e12 0016:Call ntdll.NtCreateSymbolicLinkObject(0064e378,000f0001,0064e360,0011dcc8) ret=7ebf5f2c 0016:Ret ntdll.NtCreateSymbolicLinkObject() retval=00000000 ret=7ebf5f2c 0016:Ret ntoskrnl.exe.IoCreateSymbolicLink() retval=00000000 ret=7eb67e12 0016:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7eb67c20 0016:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7eb67c20 0016:Call ntdll.RtlAllocateHeap(00110000,00000008,0000000b) ret=7eb67c4f 0016:Ret ntdll.RtlAllocateHeap() retval=0011de58 ret=7eb67c4f 0016:Call advapi32.RegSetValueExW(0000004c,0011ddbc L"\\??\\Volume{00000000-0000-0000-0000-000000000043}",00000000,00000003,0011de58,0000000b) ret=7eb67c9f 0016:Ret advapi32.RegSetValueExW() retval=00000000 ret=7eb67c9f 0016:Call ntdll.RtlAllocateHeap(00110000,00000000,00000080) ret=7eb65491 0016:Ret ntdll.RtlAllocateHeap() retval=0011de70 ret=7eb65491 0016:Call ntdll.RtlFreeHeap(00110000,00000000,0011de70) ret=7eb654cb 0016:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7eb654cb 0016:Call ntdll.RtlAllocateHeap(00110000,00000000,00000080) ret=7eb65491 0016:Ret ntdll.RtlAllocateHeap() retval=0011de70 ret=7eb65491 0016:Call ntdll.RtlFreeHeap(00110000,00000000,0011de70) ret=7eb654cb 0016:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7eb654cb 0016:Call ntdll.RtlAllocateHeap(00110000,00000000,00000080) ret=7eb65491 0016:Ret ntdll.RtlAllocateHeap() retval=0011de70 ret=7eb65491 0016:Call ntdll.RtlFreeHeap(00110000,00000000,0011de70) ret=7eb654cb 0016:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7eb654cb 0016:Call ntdll.RtlAllocateHeap(00110000,00000000,00000080) ret=7eb65491 0016:Ret ntdll.RtlAllocateHeap() retval=0011de70 ret=7eb65491 0016:Call ntdll.RtlFreeHeap(00110000,00000000,0011de70) ret=7eb654cb 0016:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7eb654cb 0016:Call ntdll.RtlAllocateHeap(00110000,00000000,00000080) ret=7eb65491 0016:Ret ntdll.RtlAllocateHeap() retval=0011de70 ret=7eb65491 0016:Call ntdll.RtlFreeHeap(00110000,00000000,0011de70) ret=7eb654cb 0016:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7eb654cb 0016:Call ntdll.RtlAllocateHeap(00110000,00000000,00000080) ret=7eb65491 0016:Ret ntdll.RtlAllocateHeap() retval=0011de70 ret=7eb65491 0016:Call ntdll.RtlFreeHeap(00110000,00000000,0011de70) ret=7eb654cb 0016:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7eb654cb 0016:Call ntdll.RtlAllocateHeap(00110000,00000000,00000080) ret=7eb65491 0016:Ret ntdll.RtlAllocateHeap() retval=0011de70 ret=7eb65491 0016:Call ntdll.RtlFreeHeap(00110000,00000000,0011de70) ret=7eb654cb 0016:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7eb654cb 0016:Call ntdll.RtlAllocateHeap(00110000,00000000,00000080) ret=7eb65491 0016:Ret ntdll.RtlAllocateHeap() retval=0011de70 ret=7eb65491 0016:Call ntdll.RtlFreeHeap(00110000,00000000,0011de70) ret=7eb654cb 0016:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7eb654cb 0016:Call ntdll.RtlAllocateHeap(00110000,00000000,00000080) ret=7eb65491 0016:Ret ntdll.RtlAllocateHeap() retval=0011de70 ret=7eb65491 0016:Call ntdll.RtlFreeHeap(00110000,00000000,0011de70) ret=7eb654cb 0016:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7eb654cb 0016:Call ntdll.RtlAllocateHeap(00110000,00000000,00000080) ret=7eb65491 0016:Ret ntdll.RtlAllocateHeap() retval=0011de70 ret=7eb65491 0016:Call ntdll.RtlFreeHeap(00110000,00000000,0011de70) ret=7eb654cb 0016:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7eb654cb 0016:Call ntdll.RtlAllocateHeap(00110000,00000000,00000080) ret=7eb65491 0016:Ret ntdll.RtlAllocateHeap() retval=0011de70 ret=7eb65491 0016:Call ntdll.RtlFreeHeap(00110000,00000000,0011de70) ret=7eb654cb 0016:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7eb654cb 0016:Call ntdll.RtlAllocateHeap(00110000,00000000,00000080) ret=7eb65491 0016:Ret ntdll.RtlAllocateHeap() retval=0011de70 ret=7eb65491 0016:Call ntdll.RtlFreeHeap(00110000,00000000,0011de70) ret=7eb654cb 0016:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7eb654cb 0016:Call ntdll.RtlAllocateHeap(00110000,00000000,00000080) ret=7eb65491 0016:Ret ntdll.RtlAllocateHeap() retval=0011de70 ret=7eb65491 0016:Call ntdll.RtlFreeHeap(00110000,00000000,0011de70) ret=7eb654cb 0016:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7eb654cb 0016:Call ntdll.RtlAllocateHeap(00110000,00000000,00000080) ret=7eb65491 0016:Ret ntdll.RtlAllocateHeap() retval=0011de70 ret=7eb65491 0016:Call ntdll.RtlFreeHeap(00110000,00000000,0011de70) ret=7eb654cb 0016:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7eb654cb 0016:Call ntdll.RtlAllocateHeap(00110000,00000000,00000080) ret=7eb65491 0016:Ret ntdll.RtlAllocateHeap() retval=0011de70 ret=7eb65491 0016:Call ntdll.RtlFreeHeap(00110000,00000000,0011de70) ret=7eb654cb 0016:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7eb654cb 0016:Call ntdll.RtlAllocateHeap(00110000,00000000,00000080) ret=7eb65491 0016:Ret ntdll.RtlAllocateHeap() retval=0011de70 ret=7eb65491 0016:Call ntdll.RtlFreeHeap(00110000,00000000,0011de70) ret=7eb654cb 0016:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7eb654cb 0016:Call ntdll.RtlAllocateHeap(00110000,00000000,00000080) ret=7eb65491 0016:Ret ntdll.RtlAllocateHeap() retval=0011de70 ret=7eb65491 0016:Call ntdll.RtlFreeHeap(00110000,00000000,0011de70) ret=7eb654cb 0016:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7eb654cb 0016:Call ntdll.RtlAllocateHeap(00110000,00000000,00000080) ret=7eb65491 0016:Ret ntdll.RtlAllocateHeap() retval=0011de70 ret=7eb65491 0016:Call ntdll.RtlFreeHeap(00110000,00000000,0011de70) ret=7eb654cb 0016:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7eb654cb 0016:Call ntdll.RtlAllocateHeap(00110000,00000000,00000080) ret=7eb65491 0016:Ret ntdll.RtlAllocateHeap() retval=0011de70 ret=7eb65491 0016:Call ntdll.RtlFreeHeap(00110000,00000000,0011de70) ret=7eb654cb 0016:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7eb654cb 0016:Call ntdll.RtlAllocateHeap(00110000,00000000,00000080) ret=7eb65491 0016:Ret ntdll.RtlAllocateHeap() retval=0011de70 ret=7eb65491 0016:Call ntdll.RtlFreeHeap(00110000,00000000,0011de70) ret=7eb654cb 0016:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7eb654cb 0016:Call ntdll.RtlAllocateHeap(00110000,00000000,00000080) ret=7eb65491 0016:Ret ntdll.RtlAllocateHeap() retval=0011de70 ret=7eb65491 0016:Call ntdll.RtlFreeHeap(00110000,00000000,0011de70) ret=7eb654cb 0016:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7eb654cb 0016:Call ntdll.RtlAllocateHeap(00110000,00000000,00000080) ret=7eb65491 0016:Ret ntdll.RtlAllocateHeap() retval=0011de70 ret=7eb65491 0016:Call ntdll.RtlFreeHeap(00110000,00000000,0011de70) ret=7eb654cb 0016:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7eb654cb 0016:Call ntdll.RtlAllocateHeap(00110000,00000000,00000080) ret=7eb65491 0016:Ret ntdll.RtlAllocateHeap() retval=0011de70 ret=7eb65491 0016:Call ntdll.RtlAllocateHeap(00110000,00000000,00000080) ret=7eb65491 0016:Ret ntdll.RtlAllocateHeap() retval=0011def8 ret=7eb65491 0016:Call ntdll.RtlFreeHeap(00110000,00000000,0011def8) ret=7eb654cb 0016:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7eb654cb 0016:Call advapi32.RegQueryValueExW(00000058,0064e67e L"z:",00000000,0064e688,0064e63e,0064e684) ret=7eb6571f 0016:Ret advapi32.RegQueryValueExW() retval=00000002 ret=7eb6571f 0016:Call ntdll.RtlAllocateHeap(00110000,00000000,00000044) ret=7eb64f9e 0016:Ret ntdll.RtlAllocateHeap() retval=0011def8 ret=7eb64f9e 0016:Call ntoskrnl.exe.IoCreateDevice(0011d950,00000044,0064e5e0,00000000,00000000,00000000,0064e5e8) ret=7eb65033 0016:Call ntdll.RtlAllocateHeap(00110000,00000008,000000fc) ret=7ebf601c 0016:Ret ntdll.RtlAllocateHeap() retval=0011df48 ret=7ebf601c 0016:Call ntdll.RtlFreeHeap(00110000,00000000,0011df48) ret=7ebf6112 0016:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ebf6112 0016:Ret ntoskrnl.exe.IoCreateDevice() retval=c0000035 ret=7eb65033 0016:Call ntoskrnl.exe.IoCreateDevice(0011d950,00000044,0064e5e0,00000000,00000000,00000000,0064e5e8) ret=7eb65033 0016:Call ntdll.RtlAllocateHeap(00110000,00000008,000000fc) ret=7ebf601c 0016:Ret ntdll.RtlAllocateHeap() retval=0011df48 ret=7ebf601c 0016:Ret ntoskrnl.exe.IoCreateDevice() retval=00000000 ret=7eb65033 0016:Call ntdll.RtlAllocateHeap(00110000,00000000,00000072) ret=7eb67d29 0016:Ret ntdll.RtlAllocateHeap() retval=0011e050 ret=7eb67d29 0016:Call ntdll.RtlInitUnicodeString(0011e064,0011e074 L"\\DosDevices\\Z:") ret=7eb67d6f 0016:Ret ntdll.RtlInitUnicodeString() retval=0000001c ret=7eb67d6f 0016:Call ntoskrnl.exe.IoCreateSymbolicLink(0011e064,0011e018) ret=7eb67e12 0016:Call ntdll.NtCreateSymbolicLinkObject(0064e478,000f0001,0064e460,0011e018) ret=7ebf5f2c 0016:Ret ntdll.NtCreateSymbolicLinkObject() retval=00000000 ret=7ebf5f2c 0016:Ret ntoskrnl.exe.IoCreateSymbolicLink() retval=00000000 ret=7eb67e12 0016:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7eb67c20 0016:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7eb67c20 0016:Call ntdll.RtlAllocateHeap(00110000,00000008,00000004) ret=7eb67c4f 0016:Ret ntdll.RtlAllocateHeap() retval=0011e0d0 ret=7eb67c4f 0016:Call advapi32.RegSetValueExW(0000004c,0011e074 L"\\DosDevices\\Z:",00000000,00000003,0011e0d0,00000004) ret=7eb67c9f 0016:Ret advapi32.RegSetValueExW() retval=00000000 ret=7eb67c9f 0016:Call ntdll.RtlAllocateHeap(00110000,00000000,000000b6) ret=7eb67d29 0016:Ret ntdll.RtlAllocateHeap() retval=0011e0e8 ret=7eb67d29 0016:Call ntdll.RtlInitUnicodeString(0011e0fc,0011e10c L"\\??\\Volume{00000000-0000-0000-0000-00000000005a}") ret=7eb67d6f 0016:Ret ntdll.RtlInitUnicodeString() retval=00000060 ret=7eb67d6f 0016:Call ntoskrnl.exe.IoCreateSymbolicLink(0011e0fc,0011e018) ret=7eb67e12 0016:Call ntdll.NtCreateSymbolicLinkObject(0064e378,000f0001,0064e360,0011e018) ret=7ebf5f2c 0016:Ret ntdll.NtCreateSymbolicLinkObject() retval=00000000 ret=7ebf5f2c 0016:Ret ntoskrnl.exe.IoCreateSymbolicLink() retval=00000000 ret=7eb67e12 0016:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7eb67c20 0016:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7eb67c20 0016:Call ntdll.RtlAllocateHeap(00110000,00000008,00000004) ret=7eb67c4f 0016:Ret ntdll.RtlAllocateHeap() retval=0011e1a8 ret=7eb67c4f 0016:Call advapi32.RegSetValueExW(0000004c,0011e10c L"\\??\\Volume{00000000-0000-0000-0000-00000000005a}",00000000,00000003,0011e1a8,00000004) ret=7eb67c9f 0016:Ret advapi32.RegSetValueExW() retval=00000000 ret=7eb67c9f 0016:Call advapi32.RegCloseKey(00000058) ret=7eb657a1 0016:Ret advapi32.RegCloseKey() retval=00000000 ret=7eb657a1 0016:Call ntdll.RtlFreeHeap(00110000,00000000,0011d820) ret=7eb657c4 0016:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7eb657c4 0016:Ret ntoskrnl.exe.IoCreateDriver() retval=00000000 ret=7eb67262 0016:Call KERNEL32.CreateThread(00000000,00000000,7eb66ce0,00000000,00000000,00000000) ret=7eb669bc 0014:Ret KERNEL32.QueueUserWorkItem() retval=00000001 ret=7ec20857 0014:Call ntdll.RtlAllocateHeap(00110000,00000008,0000002c) ret=7ec207e1 0014:Ret ntdll.RtlAllocateHeap() retval=0011b100 ret=7ec207e1 0014:Call KERNEL32.ReadFile(00000028,0064e9cc,00000010,0064e97c,00000000) ret=7ec262f2 000f:Ret KERNEL32.ReadFile() retval=00000001 ret=7ec58e3c 000f:Call ntdll.RtlFreeHeap(00110000,00000000,0011af58) ret=7ec58b7e 000f:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec58b7e 000f:Call KERNEL32.WaitForMultipleObjects(00000002,0033fc1c,00000000,00004e20) ret=7ec58be2 000f:Ret KERNEL32.WaitForMultipleObjects() retval=00000000 ret=7ec58be2 000f:Call KERNEL32.WaitForMultipleObjects(00000002,0033fc1c,00000000,00004e20) ret=7ec58be2 0017:Call PE DLL (proc=0x7ee72a90,module=0x7edf0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) 0017:Ret PE DLL (proc=0x7ee72a90,module=0x7edf0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0017:Call PE DLL (proc=0x7ebbfe70,module=0x7eb80000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) 0017:Ret PE DLL (proc=0x7ebbfe70,module=0x7eb80000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0017:Starting thread proc 0x7eb66ce0 (arg=(nil)) 0016:Ret KERNEL32.CreateThread() retval=00000058 ret=7eb669bc 0016:Call KERNEL32.CloseHandle(00000058) ret=7eb669cb 0016:Ret KERNEL32.CloseHandle() retval=00000001 ret=7eb669cb 0016:Ret driver init 0x7eb68230 (obj=0x7ecae5c0,str=L"\\Registry\\Machine\\System\\CurrentControlSet\\Services\\MountMgr") retval=00000000 0016:Call advapi32.SetServiceStatus(0011d2c8,0064ea30) ret=7ecad2fd 0016:Call rpcrt4.NdrClientInitializeNew(0064e620,0064e540,7ec5e760,00000007) ret=7ec50607 0016:Ret rpcrt4.NdrClientInitializeNew() retval=7ec4afd0 ret=7ec50607 0016:Call rpcrt4.NDRCContextBinding(0011d2c8) ret=7ec5061a 0016:Ret rpcrt4.NDRCContextBinding() retval=0011d568 ret=7ec5061a 0016:Call rpcrt4.NdrGetBuffer(0064e540,00000038,0011d568) ret=7ec5063e 0016:Call ntdll.RtlAllocateHeap(00110000,00000000,00000038) ret=7ebbe037 0016:Ret ntdll.RtlAllocateHeap() retval=0011e1c0 ret=7ebbe037 0016:Ret rpcrt4.NdrGetBuffer() retval=0011e1c0 ret=7ec5063e 0016:Call rpcrt4.NdrClientContextMarshall(0064e540,0011d2c8,00000000) ret=7ec50655 0016:Ret rpcrt4.NdrClientContextMarshall() retval=00000000 ret=7ec50655 0016:Call rpcrt4.NdrSimpleStructMarshall(0064e540,0064ea30,7ec5cecc) ret=7ec50671 0016:Ret rpcrt4.NdrSimpleStructMarshall() retval=00000000 ret=7ec50671 0016:Call rpcrt4.NdrSendReceive(0064e540,0011e1f0) ret=7ec50686 0016:Call ntdll.RtlAllocateHeap(00110000,00000008,00000018) ret=7ebb1819 0016:Ret ntdll.RtlAllocateHeap() retval=0011d820 ret=7ebb1819 0016:Call ntdll.RtlAllocateHeap(00110000,00000008,00000048) ret=7ebb0685 0016:Ret ntdll.RtlAllocateHeap() retval=0011e200 ret=7ebb0685 0016:Call KERNEL32.WriteFile(00000024,0011e200,00000048,0064e28c,00000000) ret=7ebb8bb2 0016:Ret KERNEL32.WriteFile() retval=00000001 ret=7ebb8bb2 0016:Call ntdll.RtlFreeHeap(00110000,00000000,0011e200) ret=7ebb078f 0016:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ebb078f 0016:Call ntdll.RtlFreeHeap(00110000,00000000,0011d820) ret=7ebb1246 0016:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ebb1246 0016:Call KERNEL32.ReadFile(00000024,0064e29c,00000010,0064e24c,00000000) ret=7ebb92f2 0014:Ret KERNEL32.ReadFile() retval=00000001 ret=7ec262f2 0014:Call ntdll.RtlAllocateHeap(00110000,00000000,00000018) ret=7ec1e43a 0014:Ret ntdll.RtlAllocateHeap() retval=0011ac38 ret=7ec1e43a 0014:Call KERNEL32.ReadFile(00000028,0011ac48,00000008,0064e97c,00000000) ret=7ec262f2 0014:Ret KERNEL32.ReadFile() retval=00000001 ret=7ec262f2 0014:Call ntdll.RtlAllocateHeap(00110000,00000000,00000030) ret=7ec1e4f0 0014:Ret ntdll.RtlAllocateHeap() retval=0011af58 ret=7ec1e4f0 0014:Call KERNEL32.ReadFile(00000028,0011af58,00000030,0064e97c,00000000) ret=7ec262f2 0014:Ret KERNEL32.ReadFile() retval=00000001 ret=7ec262f2 0014:Call ntdll.RtlAllocateHeap(00110000,00000000,00000030) ret=7ec2b037 0014:Ret ntdll.RtlAllocateHeap() retval=0011b088 ret=7ec2b037 0014:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec1ed28 0014:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec1ed28 0014:Call ntdll.RtlFreeHeap(00110000,00000000,0011af58) ret=7ec1ed4b 0014:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec1ed4b 0014:Call ntdll.RtlAllocateHeap(00110000,00000000,0000000c) ret=7ec20825 0014:Ret ntdll.RtlAllocateHeap() retval=0011ab90 ret=7ec20825 0014:Call KERNEL32.QueueUserWorkItem(7ec21b40,0011ab90,00000010) ret=7ec20857 0015:Call rpcrt4.NdrServerInitializeNew(0011b100,0074e7d4,7ec631e0) ret=7ec60aac 0015:Ret rpcrt4.NdrServerInitializeNew() retval=00000000 ret=7ec60aac 0015:Call rpcrt4.NdrServerContextNewUnmarshall(0074e7d4,7ec61f48) ret=7ec60b8b 0015:Call ntdll.RtlAcquireResourceExclusive(0011b164,00000001) ret=7ec1521f 0015:Ret ntdll.RtlAcquireResourceExclusive() retval=00000001 ret=7ec1521f 0015:Call ntdll.RtlAllocateHeap(00110000,00000000,00000008) ret=7ec2b0a3 0015:Ret ntdll.RtlAllocateHeap() retval=0011ada0 ret=7ec2b0a3 0015:Ret rpcrt4.NdrServerContextNewUnmarshall() retval=0011b140 ret=7ec60b8b 0015:Call rpcrt4.NdrSimpleStructUnmarshall(0074e7d4,0074e8b8,7ec61f4c,00000000) ret=7ec60bac 0015:Ret rpcrt4.NdrSimpleStructUnmarshall() retval=00000000 ret=7ec60bac 0015:Call KERNEL32.SetEvent(0000003c) ret=7ec560e9 000f:Ret KERNEL32.WaitForMultipleObjects() retval=00000000 ret=7ec58be2 000f:Call KERNEL32.CloseHandle(00000048) ret=7ec58828 000f:Ret KERNEL32.CloseHandle() retval=00000001 ret=7ec58828 000f:Call KERNEL32.ReleaseMutex(00000038) ret=7ec5883f 000f:Ret KERNEL32.ReleaseMutex() retval=00000001 ret=7ec5883f 000f:Call ntdll.RtlFreeHeap(00110000,00000000,0011abb0) ret=7ec598fd 000f:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec598fd 000f:Call ntdll.__wine_make_process_system() ret=7ec55c89 000f:Ret ntdll.__wine_make_process_system() retval=00000048 ret=7ec55c89 000f:Call KERNEL32.SetEvent(00000018) ret=7ec55c9b 000b:Ret KERNEL32.WaitForMultipleObjects() retval=00000000 ret=7ec64db9 000b:Call KERNEL32.CloseHandle(00000020) ret=7ec64dd3 000b:Ret KERNEL32.CloseHandle() retval=00000001 ret=7ec64dd3 000b:Call KERNEL32.CloseHandle(0000001c) ret=7ec64de4 000b:Ret KERNEL32.CloseHandle() retval=00000001 ret=7ec64de4 000b:Call ntdll.RtlAllocateHeap(00110000,00000000,00000039) ret=7ec63149 000b:Ret ntdll.RtlAllocateHeap() retval=001190a0 ret=7ec63149 000b:Call ntdll.RtlAllocateHeap(00110000,00000000,00000024) ret=7ec62ded 000b:Ret ntdll.RtlAllocateHeap() retval=001190e8 ret=7ec62ded 000b:Call ntdll.RtlFreeHeap(00110000,00000000,001190e8) ret=7ec62eeb 000b:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec62eeb 000b:Call ntdll.RtlFreeHeap(00110000,00000000,001190a0) ret=7ec63093 000b:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec63093 000b:Call advapi32.RegOpenKeyExW(80000002,7ec66540 L"Software\\Microsoft\\Windows\\CurrentVersion",00000000,00020019,0033eeb8) ret=7ec63395 000f:Ret KERNEL32.SetEvent() retval=00000001 ret=7ec55c9b 000f:Call KERNEL32.WaitForSingleObjectEx(00000048,ffffffff,00000001) ret=7ec55cd2 0015:Ret KERNEL32.SetEvent() retval=00000001 ret=7ec560e9 0015:Call rpcrt4.I_RpcGetBuffer(0011b100) ret=7ec60c09 0015:Call ntdll.RtlAllocateHeap(00110000,00000000,00000008) ret=7ec2b037 0015:Ret ntdll.RtlAllocateHeap() retval=0011af58 ret=7ec2b037 0015:Ret rpcrt4.I_RpcGetBuffer() retval=00000000 ret=7ec60c09 0015:Call ntdll.RtlFreeHeap(00110000,00000000,0011ada0) ret=7ec2a71c 0015:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec2a71c 0015:Call ntdll.RtlReleaseResource(0011b164) ret=7ec14552 0015:Ret ntdll.RtlReleaseResource() retval=00000000 ret=7ec14552 0015:Call ntdll.RtlAllocateHeap(00110000,00000008,00000018) ret=7ec1dcca 0015:Ret ntdll.RtlAllocateHeap() retval=0011ada0 ret=7ec1dcca 0015:Call ntdll.RtlAllocateHeap(00110000,00000008,0000001c) ret=7ec1d685 0015:Ret ntdll.RtlAllocateHeap() retval=0011af70 ret=7ec1d685 0015:Call KERNEL32.WriteFile(00000028,0011af70,0000001c,0074e82c,00000000) ret=7ec25bb2 0015:Ret KERNEL32.WriteFile() retval=00000001 ret=7ec25bb2 0015:Call ntdll.RtlFreeHeap(00110000,00000000,0011af70) ret=7ec1d78f 0015:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec1d78f 0015:Call ntdll.RtlFreeHeap(00110000,00000000,0011ada0) ret=7ec1e246 0015:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec1e246 0015:Call ntdll.RtlFreeHeap(00110000,00000000,0011b088) ret=7ec2b066 0015:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec2b066 0015:Call ntdll.RtlFreeHeap(00110000,00000000,0011af58) ret=7ec2b066 0015:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec2b066 0015:Call ntdll.RtlFreeHeap(00110000,00000000,0011ac38) ret=7ec1e246 0015:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec1e246 0015:Call ntdll.RtlFreeHeap(00110000,00000000,0011b100) ret=7ec21bcf 0015:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec21bcf 0015:Call ntdll.RtlFreeHeap(00110000,00000000,0011ab90) ret=7ec21bf2 0015:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec21bf2 000b:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ec63395 000b:Call advapi32.RegOpenKeyExW(0000001c,7ec6619c L"RunOnce",00000000,000f003f,0033eeb4) ret=7ec633d1 000b:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ec633d1 000b:Call advapi32.RegCloseKey(0000001c) ret=7ec633e3 000b:Ret advapi32.RegCloseKey() retval=00000000 ret=7ec633e3 000b:Call KERNEL32.SetEvent(00000014) ret=7ec642ac 000b:Ret KERNEL32.SetEvent() retval=00000001 ret=7ec642ac 000b:Call KERNEL32.ExitProcess(00000000) ret=7ec65546 000b:Call PE DLL (proc=0x7ec414e0,module=0x7ec10000 L"advapi32.dll",reason=PROCESS_DETACH,res=0x1) 000b:Ret PE DLL (proc=0x7ec414e0,module=0x7ec10000 L"advapi32.dll",reason=PROCESS_DETACH,res=0x1) retval=1 000b:Call PE DLL (proc=0x7ee72a90,module=0x7edf0000 L"KERNEL32.dll",reason=PROCESS_DETACH,res=0x1) 000b:Ret PE DLL (proc=0x7ee72a90,module=0x7edf0000 L"KERNEL32.dll",reason=PROCESS_DETACH,res=0x1) retval=1 000b:Call PE DLL (proc=0x7efd1850,module=0x7ef60000 L"ntdll.dll",reason=PROCESS_DETACH,res=0x1) 000b:Ret PE DLL (proc=0x7efd1850,module=0x7ef60000 L"ntdll.dll",reason=PROCESS_DETACH,res=0x1) retval=1 0014:Ret KERNEL32.QueueUserWorkItem() retval=00000001 ret=7ec20857 0014:Call ntdll.RtlAllocateHeap(00110000,00000008,0000002c) ret=7ec207e1 0014:Ret ntdll.RtlAllocateHeap() retval=0011b100 ret=7ec207e1 0014:Call KERNEL32.ReadFile(00000028,0064e9cc,00000010,0064e97c,00000000) ret=7ec262f2 0016:Ret KERNEL32.ReadFile() retval=00000001 ret=7ebb92f2 0016:Call ntdll.RtlAllocateHeap(00110000,00000000,00000018) ret=7ebb143a 0016:Ret ntdll.RtlAllocateHeap() retval=0011d820 ret=7ebb143a 0016:Call KERNEL32.ReadFile(00000024,0011d830,00000008,0064e24c,00000000) ret=7ebb92f2 0016:Ret KERNEL32.ReadFile() retval=00000001 ret=7ebb92f2 0016:Call ntdll.RtlAllocateHeap(00110000,00000000,00000004) ret=7ebb14f0 0016:Ret ntdll.RtlAllocateHeap() retval=0011bfd8 ret=7ebb14f0 0016:Call KERNEL32.ReadFile(00000024,0011bfd8,00000004,0064e24c,00000000) ret=7ebb92f2 0016:Ret KERNEL32.ReadFile() retval=00000001 ret=7ebb92f2 0016:Call ntdll.RtlAllocateHeap(00110000,00000000,00000004) ret=7ebbe037 0016:Ret ntdll.RtlAllocateHeap() retval=0011bff0 ret=7ebbe037 0016:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ebb1d28 0016:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ebb1d28 0016:Call ntdll.RtlFreeHeap(00110000,00000000,0011bfd8) ret=7ebb1d4b 0016:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ebb1d4b 0016:Call ntdll.RtlFreeHeap(00110000,00000000,0011d820) ret=7ebb1246 0016:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ebb1246 0016:Call ntdll.RtlFreeHeap(00110000,00000000,0011e1c0) ret=7ebbe066 0016:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ebbe066 0016:Ret rpcrt4.NdrSendReceive() retval=00000000 ret=7ec50686 0016:Call rpcrt4.NdrFreeBuffer(0064e540) ret=7ec50332 0016:Call ntdll.RtlFreeHeap(00110000,00000000,0011bff0) ret=7ebbe066 0016:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ebbe066 0016:Ret rpcrt4.NdrFreeBuffer() retval=00000000 ret=7ec50332 0016:Ret advapi32.SetServiceStatus() retval=00000001 ret=7ecad2fd 0016:Call ntoskrnl.exe.wine_ntoskrnl_main_loop(00000038) ret=7ecad30e 0016:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ebf5603 0016:Ret ntdll.RtlAllocateHeap() retval=0011e1c0 ret=7ebf5603 0016:Call KERNEL32.WaitForMultipleObjects(00000002,0064e730,00000000,ffffffff) ret=7ebf599e 0009:Call PE DLL (proc=0x7ec724e0,module=0x7ec40000 L"advapi32.dll",reason=WINE_PREATTACH,res=(nil)) 0009:Ret PE DLL (proc=0x7ec724e0,module=0x7ec40000 L"advapi32.dll",reason=WINE_PREATTACH,res=(nil)) retval=1 0009:Call PE DLL (proc=0x7ec042a0,module=0x7eba0000 L"gdi32.dll",reason=WINE_PREATTACH,res=(nil)) 0009:Ret PE DLL (proc=0x7ec042a0,module=0x7eba0000 L"gdi32.dll",reason=WINE_PREATTACH,res=(nil)) retval=1 0009:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=WINE_PREATTACH,res=(nil)) 0009:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=WINE_PREATTACH,res=(nil)) retval=1 0009:Call PE DLL (proc=0x7e8a5350,module=0x7e870000 L"shlwapi.dll",reason=WINE_PREATTACH,res=(nil)) 0009:Ret PE DLL (proc=0x7e8a5350,module=0x7e870000 L"shlwapi.dll",reason=WINE_PREATTACH,res=(nil)) retval=1 0009:Call PE DLL (proc=0x7e9349a0,module=0x7e8d0000 L"shell32.dll",reason=WINE_PREATTACH,res=(nil)) 0009:Ret PE DLL (proc=0x7e9349a0,module=0x7e8d0000 L"shell32.dll",reason=WINE_PREATTACH,res=(nil)) retval=1 000d:Ret PE DLL (proc=0x7e8ea2a0,module=0x7e880000 L"gdi32.dll",reason=PROCESS_ATTACH,res=0x1) retval=1 000d:Call PE DLL (proc=0x7e9e3790,module=0x7e930000 L"user32.dll",reason=PROCESS_ATTACH,res=0x1) 000d:Call PE DLL (proc=0x7e303a50,module=0x7e2f0000 L"imm32.dll",reason=PROCESS_ATTACH,res=(nil)) 000d:Call user32.RegisterWindowMessageA(7e3046bb "MSIMEService") ret=7e301243 000d:Ret user32.RegisterWindowMessageA() retval=0000c000 ret=7e301243 000d:Call user32.RegisterWindowMessageA(7e3046c8 "MSIMEReconvertOptions") ret=7e30125a 000d:Ret user32.RegisterWindowMessageA() retval=0000c001 ret=7e30125a 000d:Call user32.RegisterWindowMessageA(7e3046de "MSIMEMouseOperation") ret=7e301271 000d:Ret user32.RegisterWindowMessageA() retval=0000c002 ret=7e301271 000d:Call user32.RegisterWindowMessageA(7e3046f2 "MSIMEReconvertRequest") ret=7e301288 000d:Ret user32.RegisterWindowMessageA() retval=0000c003 ret=7e301288 000d:Call user32.RegisterWindowMessageA(7e304708 "MSIMEReconvert") ret=7e30129f 000d:Ret user32.RegisterWindowMessageA() retval=0000c004 ret=7e30129f 000d:Call user32.RegisterWindowMessageA(7e304717 "MSIMEQueryPosition") ret=7e3012b6 000d:Ret user32.RegisterWindowMessageA() retval=0000c005 ret=7e3012b6 000d:Call user32.RegisterWindowMessageA(7e30472a "MSIMEDocumentFeed") ret=7e3012cd 000d:Ret user32.RegisterWindowMessageA() retval=0000c006 ret=7e3012cd 000d:Call KERNEL32.TlsAlloc() ret=7e3012db 000d:Ret KERNEL32.TlsAlloc() retval=00000000 ret=7e3012db 000d:Ret PE DLL (proc=0x7e303a50,module=0x7e2f0000 L"imm32.dll",reason=PROCESS_ATTACH,res=(nil)) retval=1 000d:Call PE DLL (proc=0x7e4c4f50,module=0x7e460000 L"winex11.drv",reason=PROCESS_ATTACH,res=(nil)) 0009:Call PE DLL (proc=0x7e73d5a0,module=0x7e710000 L"winmm.dll",reason=WINE_PREATTACH,res=(nil)) 0009:Ret PE DLL (proc=0x7e73d5a0,module=0x7e710000 L"winmm.dll",reason=WINE_PREATTACH,res=(nil)) retval=1 0009:Call PE DLL (proc=0x7efd1850,module=0x7ef60000 L"ntdll.dll",reason=PROCESS_ATTACH,res=0x1) 0009:Ret PE DLL (proc=0x7efd1850,module=0x7ef60000 L"ntdll.dll",reason=PROCESS_ATTACH,res=0x1) retval=1 0009:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=PROCESS_ATTACH,res=0x1) 0009:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=PROCESS_ATTACH,res=0x1) retval=1 0009:Call PE DLL (proc=0x7ec724e0,module=0x7ec40000 L"advapi32.dll",reason=PROCESS_ATTACH,res=0x1) 0009:Ret PE DLL (proc=0x7ec724e0,module=0x7ec40000 L"advapi32.dll",reason=PROCESS_ATTACH,res=0x1) retval=1 0009:Call PE DLL (proc=0x7ec042a0,module=0x7eba0000 L"gdi32.dll",reason=PROCESS_ATTACH,res=0x1) 0009:Ret PE DLL (proc=0x7ec042a0,module=0x7eba0000 L"gdi32.dll",reason=PROCESS_ATTACH,res=0x1) retval=1 0009:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=PROCESS_ATTACH,res=0x1) 0009:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=WINE_PREATTACH,res=(nil)) 0009:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=WINE_PREATTACH,res=(nil)) retval=1 0009:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=PROCESS_ATTACH,res=(nil)) 0009:Call user32.RegisterWindowMessageA(7e3f76bb "MSIMEService") ret=7e3f4243 0009:Ret user32.RegisterWindowMessageA() retval=0000c000 ret=7e3f4243 0009:Call user32.RegisterWindowMessageA(7e3f76c8 "MSIMEReconvertOptions") ret=7e3f425a 0009:Ret user32.RegisterWindowMessageA() retval=0000c001 ret=7e3f425a 0009:Call user32.RegisterWindowMessageA(7e3f76de "MSIMEMouseOperation") ret=7e3f4271 0009:Ret user32.RegisterWindowMessageA() retval=0000c002 ret=7e3f4271 0009:Call user32.RegisterWindowMessageA(7e3f76f2 "MSIMEReconvertRequest") ret=7e3f4288 0009:Ret user32.RegisterWindowMessageA() retval=0000c003 ret=7e3f4288 0009:Call user32.RegisterWindowMessageA(7e3f7708 "MSIMEReconvert") ret=7e3f429f 0009:Ret user32.RegisterWindowMessageA() retval=0000c004 ret=7e3f429f 0009:Call user32.RegisterWindowMessageA(7e3f7717 "MSIMEQueryPosition") ret=7e3f42b6 0009:Ret user32.RegisterWindowMessageA() retval=0000c005 ret=7e3f42b6 0009:Call user32.RegisterWindowMessageA(7e3f772a "MSIMEDocumentFeed") ret=7e3f42cd 0009:Ret user32.RegisterWindowMessageA() retval=0000c006 ret=7e3f42cd 0009:Call KERNEL32.TlsAlloc() ret=7e3f42db 0009:Ret KERNEL32.TlsAlloc() retval=00000000 ret=7e3f42db 0009:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=PROCESS_ATTACH,res=(nil)) retval=1 0009:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=PROCESS_ATTACH,res=(nil)) 000d:Ret PE DLL (proc=0x7e4c4f50,module=0x7e460000 L"winex11.drv",reason=PROCESS_ATTACH,res=(nil)) retval=1 000d:Ret PE DLL (proc=0x7e9e3790,module=0x7e930000 L"user32.dll",reason=PROCESS_ATTACH,res=0x1) retval=1 000d:Call PE DLL (proc=0x7ea9f350,module=0x7ea70000 L"shlwapi.dll",reason=PROCESS_ATTACH,res=0x1) 000d:Call KERNEL32.DisableThreadLibraryCalls(7ea70000) ret=7ea931e1 000d:Ret KERNEL32.DisableThreadLibraryCalls() retval=00000001 ret=7ea931e1 000d:Call KERNEL32.TlsAlloc() ret=7ea931f4 000d:Ret KERNEL32.TlsAlloc() retval=00000002 ret=7ea931f4 000d:Ret PE DLL (proc=0x7ea9f350,module=0x7ea70000 L"shlwapi.dll",reason=PROCESS_ATTACH,res=0x1) retval=1 000d:Call PE DLL (proc=0x7e7f9d20,module=0x7e760000 L"comctl32.dll",reason=PROCESS_ATTACH,res=0x1) 000d:Call KERNEL32.DisableThreadLibraryCalls(7e760000) ret=7e77dc80 000d:Ret KERNEL32.DisableThreadLibraryCalls() retval=00000001 ret=7e77dc80 000d:Call KERNEL32.GlobalAddAtomW(7e7fcca0 L"CC32SubclassInfo") ret=7e77dc9c 000d:Ret KERNEL32.GlobalAddAtomW() retval=0000c015 ret=7e77dc9c 000d:Call gdi32.CreateBitmap(00000008,00000008,00000001,00000001,7e7fccc2) ret=7e77dce3 000d:Ret gdi32.CreateBitmap() retval=000001b4 ret=7e77dce3 000d:Call gdi32.CreatePatternBrush(000001b4) ret=7e77dcf4 000d:Ret gdi32.CreatePatternBrush() retval=000001bc ret=7e77dcf4 000d:Call user32.GetSysColor(00000014) ret=7e77be3f 000d:Ret user32.GetSysColor() retval=00ffffff ret=7e77be3f 000d:Call user32.GetSysColor(00000010) ret=7e77be56 000d:Ret user32.GetSysColor() retval=00808080 ret=7e77be56 000d:Call user32.GetSysColor(00000012) ret=7e77be68 000d:Ret user32.GetSysColor() retval=00000000 ret=7e77be68 000d:Call user32.GetSysColor(0000000f) ret=7e77be7a 000d:Ret user32.GetSysColor() retval=00c8d0d4 ret=7e77be7a 000d:Call user32.GetSysColor(0000000d) ret=7e77be8c 000d:Ret user32.GetSysColor() retval=006a240a ret=7e77be8c 000d:Call user32.GetSysColor(0000000e) ret=7e77be9e 000d:Ret user32.GetSysColor() retval=00ffffff ret=7e77be9e 000d:Call user32.GetSysColor(0000001a) ret=7e77beb0 000d:Ret user32.GetSysColor() retval=00800000 ret=7e77beb0 000d:Call user32.GetSysColor(00000014) ret=7e77bec2 000d:Ret user32.GetSysColor() retval=00ffffff ret=7e77bec2 000d:Call user32.GetSysColor(00000010) ret=7e77bed4 000d:Ret user32.GetSysColor() retval=00808080 ret=7e77bed4 000d:Call user32.GetSysColor(00000015) ret=7e77bee6 000d:Ret user32.GetSysColor() retval=00404040 ret=7e77bee6 000d:Call user32.GetSysColor(0000000f) ret=7e77bef8 000d:Ret user32.GetSysColor() retval=00c8d0d4 ret=7e77bef8 000d:Call user32.GetSysColor(00000005) ret=7e77bf0a 000d:Ret user32.GetSysColor() retval=00ffffff ret=7e77bf0a 000d:Call user32.GetSysColor(00000008) ret=7e77bf1c 000d:Ret user32.GetSysColor() retval=00000000 ret=7e77bf1c 000d:Call user32.GetSysColor(00000011) ret=7e77bf2e 000d:Ret user32.GetSysColor() retval=00808080 ret=7e77bf2e 000d:Call user32.GetSysColor(00000002) ret=7e77bf40 000d:Ret user32.GetSysColor() retval=006a240a ret=7e77bf40 000d:Call user32.GetSysColor(00000018) ret=7e77bf52 000d:Ret user32.GetSysColor() retval=00e1ffff ret=7e77bf52 000d:Call user32.GetSysColor(00000017) ret=7e77bf64 000d:Ret user32.GetSysColor() retval=00000000 ret=7e77bf64 000d:Call user32.LoadCursorW(00000000,00007f00) ret=7e77115b 000d:Ret user32.LoadCursorW() retval=000010de ret=7e77115b 000d:Call user32.RegisterClassW(0033fce8) ret=7e7711c4 000d:Ret user32.RegisterClassW() retval=0000c016 ret=7e7711c4 000d:Call user32.LoadCursorW(00000000,00007f00) ret=7e773c3b 000d:Ret user32.LoadCursorW() retval=000010de ret=7e773c3b 000d:Call user32.RegisterClassW(0033fce8) ret=7e773ca4 000d:Ret user32.RegisterClassW() retval=0000c017 ret=7e773ca4 000d:Call user32.LoadCursorW(00000000,00007f00) ret=7e77e42b 000d:Ret user32.LoadCursorW() retval=000010de ret=7e77e42b 000d:Call user32.RegisterClassW(0033fce0) ret=7e77e4b2 000d:Ret user32.RegisterClassW() retval=0000c018 ret=7e77e4b2 000d:Call user32.LoadCursorW(00000000,00007f00) ret=7e78408b 000d:Ret user32.LoadCursorW() retval=000010de ret=7e78408b 000d:Call user32.RegisterClassW(0033fce4) ret=7e784100 000d:Ret user32.RegisterClassW() retval=0000c019 ret=7e784100 000d:Call user32.LoadCursorW(00000000,00007f00) ret=7e78459b 000d:Ret user32.LoadCursorW() retval=000010de ret=7e78459b 000d:Call user32.RegisterClassW(0033fcec) ret=7e7845f7 000d:Ret user32.RegisterClassW() retval=0000c01a ret=7e7845f7 000d:Call user32.RegisterClassW(0033fce8) ret=7e788abc 000d:Ret user32.RegisterClassW() retval=0000c01b ret=7e788abc 000d:Call user32.LoadCursorW(00000000,00007f01) ret=7e78f8db 000d:Ret user32.LoadCursorW() retval=000010e6 ret=7e78f8db 000d:Call user32.RegisterClassW(0033fce4) ret=7e78f950 000d:Ret user32.RegisterClassW() retval=0000c01c ret=7e78f950 000d:Call user32.LoadCursorW(00000000,00007f00) ret=7e79146b 000d:Ret user32.LoadCursorW() retval=000010de ret=7e79146b 000d:Call user32.RegisterClassW(0033fce8) ret=7e7914da 000d:Ret user32.RegisterClassW() retval=0000c01d ret=7e7914da 000d:Call user32.LoadCursorW(00000000,00007f00) ret=7e7a9bbb 000d:Ret user32.LoadCursorW() retval=000010de ret=7e7a9bbb 000d:Call user32.RegisterClassW(0033fce8) ret=7e7a9c2a 000d:Ret user32.RegisterClassW() retval=0000c01e ret=7e7a9c2a 000d:Call user32.LoadCursorW(00000000,00007f00) ret=7e7af22b 000d:Ret user32.LoadCursorW() retval=000010de ret=7e7af22b 000d:Call user32.RegisterClassW(0033fce8) ret=7e7af29a 000d:Ret user32.RegisterClassW() retval=0000c01f ret=7e7af29a 000d:Call user32.LoadCursorW(00000000,00007f00) ret=7e7af59b 000d:Ret user32.LoadCursorW() retval=000010de ret=7e7af59b 000d:Call user32.RegisterClassW(0033fcf0) ret=7e7af5ec 000d:Ret user32.RegisterClassW() retval=0000c020 ret=7e7af5ec 000d:Call user32.LoadCursorW(00000000,00007f00) ret=7e7b264b 000d:Ret user32.LoadCursorW() retval=000010de ret=7e7b264b 000d:Call user32.RegisterClassW(0033fce0) ret=7e7b26cb 000d:Ret user32.RegisterClassW() retval=0000c021 ret=7e7b26cb 000d:Call user32.RegisterClassW(0033fcec) ret=7e7bb7a0 000d:Ret user32.RegisterClassW() retval=0000c022 ret=7e7bb7a0 000d:Call user32.GetSystemMetrics(00000044) ret=7e7bb7af 000d:Ret user32.GetSystemMetrics() retval=00000004 ret=7e7bb7af 000d:Call user32.GetSystemMetrics(00000045) ret=7e7bb7c4 000d:Ret user32.GetSystemMetrics() retval=00000004 ret=7e7bb7c4 000d:Call user32.LoadCursorW(00000000,00007f00) ret=7e7c3b45 000d:Ret user32.LoadCursorW() retval=000010de ret=7e7c3b45 000d:Call user32.RegisterClassW(0033fcdc) ret=7e7c3bd2 000d:Ret user32.RegisterClassW() retval=0000c023 ret=7e7c3bd2 000d:Call user32.LoadCursorW(00000000,00007f00) ret=7e7c8beb 000d:Ret user32.LoadCursorW() retval=000010de ret=7e7c8beb 000d:Call user32.RegisterClassW(0033fcf4) ret=7e7c8c2f 000d:Ret user32.RegisterClassW() retval=0000c024 ret=7e7c8c2f 000d:Call user32.LoadCursorW(00000000,00007f00) ret=7e7cb42b 000d:Ret user32.LoadCursorW() retval=000010de ret=7e7cb42b 000d:Call user32.RegisterClassW(0033fce4) ret=7e7cb4a6 000d:Ret user32.RegisterClassW() retval=0000c025 ret=7e7cb4a6 000d:Call user32.LoadCursorW(00000000,00007f00) ret=7e7d4bdb 000d:Ret user32.LoadCursorW() retval=000010de ret=7e7d4bdb 000d:Call user32.RegisterClassW(0033fce4) ret=7e7d4c56 000d:Ret user32.RegisterClassW() retval=0000c026 ret=7e7d4c56 000d:Call user32.LoadCursorW(00000000,00007f00) ret=7e7e3eb5 000d:Ret user32.LoadCursorW() retval=000010de ret=7e7e3eb5 000d:Call user32.RegisterClassW(0033fce0) ret=7e7e3f36 000d:Ret user32.RegisterClassW() retval=0000c027 ret=7e7e3f36 000d:Call user32.LoadImageW(7e760000,00000016,00000001,00000000,00000000,00000000) ret=7e7e3f7b 000d:Ret user32.LoadImageW() retval=000010ee ret=7e7e3f7b 000d:Call user32.LoadImageW(7e760000,00000019,00000001,00000000,00000000,00000000) ret=7e7e3fb6 000d:Ret user32.LoadImageW() retval=000010f6 ret=7e7e3fb6 000d:Call user32.LoadImageW(7e760000,0000001c,00000001,00000000,00000000,00000000) ret=7e7e3ff1 000d:Ret user32.LoadImageW() retval=000010fe ret=7e7e3ff1 000d:Call user32.LoadCursorW(00000000,00007f00) ret=7e7e957b 000d:Ret user32.LoadCursorW() retval=000010de ret=7e7e957b 000d:Call user32.RegisterClassW(0033fce0) ret=7e7e9602 000d:Ret user32.RegisterClassW() retval=0000c028 ret=7e7e9602 000d:Call user32.LoadCursorW(00000000,00007f00) ret=7e7ed848 000d:Ret user32.LoadCursorW() retval=000010de ret=7e7ed848 000d:Call user32.RegisterClassW(0033fce8) ret=7e7ed8b7 000d:Ret user32.RegisterClassW() retval=0000c029 ret=7e7ed8b7 000d:Call user32.LoadCursorW(00000000,00007f00) ret=7e7f784b 000d:Ret user32.LoadCursorW() retval=000010de ret=7e7f784b 000d:Call user32.RegisterClassW(0033fce4) ret=7e7f78c6 000d:Ret user32.RegisterClassW() retval=0000c02a ret=7e7f78c6 000d:Call KERNEL32.LoadLibraryA(7e80c6e6 "uxtheme.dll") ret=7e7f9ce0 000d:Call PE DLL (proc=0x7e2b3120,module=0x7e2a0000 L"uxtheme.dll",reason=PROCESS_ATTACH,res=(nil)) 000d:Call KERNEL32.DisableThreadLibraryCalls(7e2a0000) ret=7e2abf76 000d:Ret KERNEL32.DisableThreadLibraryCalls() retval=00000001 ret=7e2abf76 000d:Call KERNEL32.GlobalAddAtomW(7e2c1c7c L"ux_theme") ret=7e2b133d 000d:Ret KERNEL32.GlobalAddAtomW() retval=0000c02b ret=7e2b133d 000d:Call KERNEL32.GlobalAddAtomW(7e2c1c68 L"ux_subapp") ret=7e2b1355 000d:Ret KERNEL32.GlobalAddAtomW() retval=0000c02c ret=7e2b1355 000d:Call KERNEL32.GlobalAddAtomW(7e2c1c50 L"ux_subidlst") ret=7e2b136d 000d:Ret KERNEL32.GlobalAddAtomW() retval=0000c02d ret=7e2b136d 000d:Call KERNEL32.GlobalAddAtomW(7e2c1c32 L"ux_dialogtheme") ret=7e2b1385 000d:Ret KERNEL32.GlobalAddAtomW() retval=0000c02e ret=7e2b1385 000d:Call advapi32.RegOpenKeyW(80000001,7e2c19a0 L"Software\\Microsoft\\Windows\\CurrentVersion\\ThemeManager",0033f714) ret=7e2b13ae 000d:Ret advapi32.RegOpenKeyW() retval=00000002 ret=7e2b13ae 000d:Ret PE DLL (proc=0x7e2b3120,module=0x7e2a0000 L"uxtheme.dll",reason=PROCESS_ATTACH,res=(nil)) retval=1 000d:Ret KERNEL32.LoadLibraryA() retval=7e2a0000 ret=7e7f9ce0 000d:Call KERNEL32.GetProcAddress(7e2a0000,7e80c812 "IsThemeActive") ret=7e7f9cb5 000d:Ret KERNEL32.GetProcAddress() retval=7e2a48fc ret=7e7f9cb5 000d:Call uxtheme.IsThemeActive() ret=7e7d4789 000d:Ret uxtheme.IsThemeActive() retval=00000000 ret=7e7d4789 000d:Ret PE DLL (proc=0x7e7f9d20,module=0x7e760000 L"comctl32.dll",reason=PROCESS_ATTACH,res=0x1) retval=1 000d:Call PE DLL (proc=0x7eb2e9a0,module=0x7eac0000 L"shell32.dll",reason=PROCESS_ATTACH,res=0x1) 000d:Call KERNEL32.DisableThreadLibraryCalls(7eac0000) ret=7eaf0225 000d:Ret KERNEL32.DisableThreadLibraryCalls() retval=00000001 ret=7eaf0225 000d:Call KERNEL32.GetModuleFileNameW(7eac0000,7ec400e0,00000104) ret=7eaf0242 000d:Ret KERNEL32.GetModuleFileNameW() retval=0000001f ret=7eaf0242 000d:Call comctl32.InitCommonControlsEx(00000000) ret=7eaf025a 000d:Ret comctl32.InitCommonControlsEx() retval=00000000 ret=7eaf025a 000d:Call user32.GetSystemMetrics(00000031) ret=7eae6bf6 000d:Ret user32.GetSystemMetrics() retval=00000010 ret=7eae6bf6 000d:Call user32.GetSystemMetrics(00000032) ret=7eae6c08 000d:Ret user32.GetSystemMetrics() retval=00000010 ret=7eae6c08 000d:Call user32.GetSystemMetrics(0000000b) ret=7eae6c19 000d:Ret user32.GetSystemMetrics() retval=00000020 ret=7eae6c19 000d:Call user32.GetSystemMetrics(0000000c) ret=7eae6c2b 000d:Ret user32.GetSystemMetrics() retval=00000020 ret=7eae6c2b 000d:Call comctl32.328(00000010) ret=7eae6c9c 000d:Call KERNEL32.LocalAlloc(00000040,00000014) ret=7e77a409 000d:Ret KERNEL32.LocalAlloc() retval=00139878 ret=7e77a409 000d:Call ntdll.RtlAllocateHeap(00110000,00000008,00000080) ret=7e781bf7 000d:Ret ntdll.RtlAllocateHeap() retval=00139a08 ret=7e781bf7 000d:Ret comctl32.328() retval=00139878 ret=7eae6c9c 000d:Call comctl32.ImageList_Create(00000010,00000010,00000021,00000000,00000020) ret=7eae6cd4 000d:Call KERNEL32.LocalAlloc(00000040,00000084) ret=7e77a409 000d:Ret KERNEL32.LocalAlloc() retval=00139a90 ret=7e77a409 000d:Call gdi32.CreateCompatibleDC(00000000) ret=7e78b19c 000d:Ret gdi32.CreateCompatibleDC() retval=000001f4 ret=7e78b19c 000d:Call gdi32.CreateCompatibleDC(00000000) ret=7e78b375 000d:Ret gdi32.CreateCompatibleDC() retval=00000200 ret=7e78b375 000d:Call KERNEL32.LocalAlloc(00000040,00000028) ret=7e77a409 000d:Ret KERNEL32.LocalAlloc() retval=0013a080 ret=7e77a409 000d:Call gdi32.CreateDIBSection(000001f4,0013a080,00000000,0033fc68,00000000,00000000) ret=7e78a2c9 000d:Ret gdi32.CreateDIBSection() retval=0000020c ret=7e78a2c9 000d:Call KERNEL32.LocalFree(0013a080) ret=7e77a191 000d:Ret KERNEL32.LocalFree() retval=00000000 ret=7e77a191 000d:Call gdi32.SelectObject(000001f4,0000020c) ret=7e78b202 000d:Ret gdi32.SelectObject() retval=0000006c ret=7e78b202 000d:Call gdi32.CreateBitmap(00000040,00000010,00000001,00000001,00000000) ret=7e78b3d6 000d:Ret gdi32.CreateBitmap() retval=00000210 ret=7e78b3d6 000d:Call gdi32.SelectObject(00000200,00000210) ret=7e78b3ef 000d:Ret gdi32.SelectObject() retval=0000006c ret=7e78b3ef 000d:Call gdi32.CreateBitmap(00000008,00000008,00000001,00000001,7e7feaca) ret=7e78b24b 000d:Ret gdi32.CreateBitmap() retval=00000214 ret=7e78b24b 000d:Call gdi32.CreatePatternBrush(00000214) ret=7e78b258 000d:Ret gdi32.CreatePatternBrush() retval=0000021c ret=7e78b258 000d:Call gdi32.DeleteObject(00000214) ret=7e78b266 000d:Ret gdi32.DeleteObject() retval=00000001 ret=7e78b266 000d:Call gdi32.CreateBitmap(00000008,00000008,00000001,00000001,7e7feaba) ret=7e78b297 000d:Ret gdi32.CreateBitmap() retval=00000220 ret=7e78b297 000d:Call gdi32.CreatePatternBrush(00000220) ret=7e78b2a4 000d:Ret gdi32.CreatePatternBrush() retval=00000228 ret=7e78b2a4 000d:Call gdi32.DeleteObject(00000220) ret=7e78b2b2 000d:Ret gdi32.DeleteObject() retval=00000001 ret=7e78b2b2 000d:Ret comctl32.ImageList_Create() retval=00139a90 ret=7eae6cd4 000d:Call comctl32.ImageList_Create(00000020,00000020,00000021,00000000,00000020) ret=7eae6d06 000d:Call KERNEL32.LocalAlloc(00000040,00000084) ret=7e77a409 000d:Ret KERNEL32.LocalAlloc() retval=0013a438 ret=7e77a409 000d:Call gdi32.CreateCompatibleDC(00000000) ret=7e78b19c 000d:Ret gdi32.CreateCompatibleDC() retval=0000022c ret=7e78b19c 000d:Call gdi32.CreateCompatibleDC(00000000) ret=7e78b375 000d:Ret gdi32.CreateCompatibleDC() retval=00000238 ret=7e78b375 000d:Call KERNEL32.LocalAlloc(00000040,00000028) ret=7e77a409 000d:Ret KERNEL32.LocalAlloc() retval=0013aa50 ret=7e77a409 000d:Call gdi32.CreateDIBSection(0000022c,0013aa50,00000000,0033fc68,00000000,00000000) ret=7e78a2c9 000d:Ret gdi32.CreateDIBSection() retval=00000244 ret=7e78a2c9 000d:Call KERNEL32.LocalFree(0013aa50) ret=7e77a191 000d:Ret KERNEL32.LocalFree() retval=00000000 ret=7e77a191 000d:Call gdi32.SelectObject(0000022c,00000244) ret=7e78b202 000d:Ret gdi32.SelectObject() retval=0000006c ret=7e78b202 000d:Call gdi32.CreateBitmap(00000080,00000020,00000001,00000001,00000000) ret=7e78b3d6 000d:Ret gdi32.CreateBitmap() retval=00000248 ret=7e78b3d6 000d:Call gdi32.SelectObject(00000238,00000248) ret=7e78b3ef 000d:Ret gdi32.SelectObject() retval=0000006c ret=7e78b3ef 000d:Call gdi32.CreateBitmap(00000008,00000008,00000001,00000001,7e7feaca) ret=7e78b24b 000d:Ret gdi32.CreateBitmap() retval=0000024c ret=7e78b24b 000d:Call gdi32.CreatePatternBrush(0000024c) ret=7e78b258 000d:Ret gdi32.CreatePatternBrush() retval=00000254 ret=7e78b258 000d:Call gdi32.DeleteObject(0000024c) ret=7e78b266 000d:Ret gdi32.DeleteObject() retval=00000001 ret=7e78b266 000d:Call gdi32.CreateBitmap(00000008,00000008,00000001,00000001,7e7feaba) ret=7e78b297 000d:Ret gdi32.CreateBitmap() retval=00000258 ret=7e78b297 000d:Call gdi32.CreatePatternBrush(00000258) ret=7e78b2a4 000d:Ret gdi32.CreatePatternBrush() retval=00000260 ret=7e78b2a4 000d:Call gdi32.DeleteObject(00000258) ret=7e78b2b2 000d:Ret gdi32.DeleteObject() retval=00000001 ret=7e78b2b2 000d:Ret comctl32.ImageList_Create() retval=0013a438 ret=7eae6d06 000d:Call comctl32.ImageList_SetBkColor(00139a90,ffffffff) ret=7eae6d29 000d:Ret comctl32.ImageList_SetBkColor() retval=ffffffff ret=7eae6d29 000d:Call comctl32.ImageList_SetBkColor(0013a438,ffffffff) ret=7eae6d44 000d:Ret comctl32.ImageList_SetBkColor() retval=ffffffff ret=7eae6d44 000d:Call user32.LoadImageA(7eac0000,00000001,00000001,00000010,00000010,00008000) ret=7eae6d7a 000d:Ret user32.LoadImageA() retval=00001106 ret=7eae6d7a 000d:Call user32.LoadImageA(7eac0000,00000001,00000001,00000020,00000020,00008000) ret=7eae6dad 000d:Ret user32.LoadImageA() retval=0000110e ret=7eae6dad 000d:Call KERNEL32.LoadLibraryA(7eb508f0 "ole32.dll") ret=7eb2e960 000d:Call PE DLL (proc=0x7e64de70,module=0x7e600000 L"rpcrt4.dll",reason=PROCESS_ATTACH,res=(nil)) 000d:Ret PE DLL (proc=0x7e64de70,module=0x7e600000 L"rpcrt4.dll",reason=PROCESS_ATTACH,res=(nil)) retval=1 000d:Call PE DLL (proc=0x7e73c580,module=0x7e680000 L"ole32.dll",reason=PROCESS_ATTACH,res=(nil)) 000d:Call user32.RegisterClassW(0033f524) ret=7e69a83d 000d:Ret user32.RegisterClassW() retval=0000c02f ret=7e69a83d 000d:Ret PE DLL (proc=0x7e73c580,module=0x7e680000 L"ole32.dll",reason=PROCESS_ATTACH,res=(nil)) retval=1 000d:Ret KERNEL32.LoadLibraryA() retval=7e680000 ret=7eb2e960 000d:Call KERNEL32.GetProcAddress(7e680000,7eb50963 "CoTaskMemAlloc") ret=7eb2e935 000d:Ret KERNEL32.GetProcAddress() retval=7e688da8 ret=7eb2e935 000d:Call ole32.CoTaskMemAlloc(00000014) ret=7eafa5b5 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000014) ret=7e6b2e29 000d:Ret ntdll.RtlAllocateHeap() retval=0013adf0 ret=7e6b2e29 000d:Ret ole32.CoTaskMemAlloc() retval=0013adf0 ret=7eafa5b5 000d:Call KERNEL32.GetFullPathNameW(7ec400e0 L"C:\\windows\\system32\\shell32.dll",00000104,0033fb34,00000000) ret=7eae5f1f 000d:Ret KERNEL32.GetFullPathNameW() retval=0000001f ret=7eae5f1f 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000040) ret=7eae5f61 000d:Ret ntdll.RtlAllocateHeap() retval=0013ae10 ret=7eae5f61 000d:Call comctl32.334(00139878,00007fff,0013adf0) ret=7eae5fc1 000d:Ret comctl32.334() retval=00000000 ret=7eae5fc1 000d:Call comctl32.ImageList_ReplaceIcon(00139a90,ffffffff,00001106) ret=7eae5fef 000d:Call user32.CopyImage(00001106,00000001,00000010,00000010,00004000) ret=7e78b95f 000d:Ret user32.CopyImage() retval=00001116 ret=7e78b95f 000d:Call user32.GetIconInfo(00001116,0033fa48) ret=7e78b98a 000d:Ret user32.GetIconInfo() retval=00000001 ret=7e78b98a 000d:Call gdi32.GetObjectW(00000280,00000018,0033fa30) ret=7e78b9af 000d:Ret gdi32.GetObjectW() retval=00000018 ret=7e78b9af 000d:Call gdi32.CreateCompatibleDC(00000000) ret=7e78b9cf 000d:Ret gdi32.CreateCompatibleDC() retval=00000284 ret=7e78b9cf 000d:Call gdi32.SetTextColor(000001f4,00000000) ret=7e78ba1e 000d:Ret gdi32.SetTextColor() retval=00000000 ret=7e78ba1e 000d:Call gdi32.SetBkColor(000001f4,00ffffff) ret=7e78ba34 000d:Ret gdi32.SetBkColor() retval=00ffffff ret=7e78ba34 000d:Call gdi32.SelectObject(00000284,0000027c) ret=7e78ba51 000d:Ret gdi32.SelectObject() retval=0000006c ret=7e78ba51 000d:Call gdi32.StretchBlt(000001f4,00000000,00000000,00000010,00000010,00000284,00000000,00000000,00000010,00000010,00cc0020) ret=7e78baab 000d:Ret gdi32.StretchBlt() retval=00000001 ret=7e78baab 000d:Call gdi32.SelectObject(00000284,00000280) ret=7e78bac7 000d:Ret gdi32.SelectObject() retval=0000027c ret=7e78bac7 000d:Call gdi32.StretchBlt(00000200,00000000,00000000,00000010,00000010,00000284,00000000,00000000,00000010,00000010,00cc0020) ret=7e78bb1e 000d:Ret gdi32.StretchBlt() retval=00000001 ret=7e78bb1e 000d:Call gdi32.SelectObject(00000284,0000006c) ret=7e78bb33 000d:Ret gdi32.SelectObject() retval=00000280 ret=7e78bb33 000d:Call user32.DestroyIcon(00001116) ret=7e78bb41 000d:Ret user32.DestroyIcon() retval=00000001 ret=7e78bb41 000d:Call gdi32.DeleteDC(00000284) ret=7e78bb56 000d:Ret gdi32.DeleteDC() retval=00000001 ret=7e78bb56 000d:Call gdi32.DeleteObject(0000027c) ret=7e78bb68 000d:Ret gdi32.DeleteObject() retval=00000001 ret=7e78bb68 000d:Call gdi32.DeleteObject(00000280) ret=7e78bb7a 000d:Ret gdi32.DeleteObject() retval=00000001 ret=7e78bb7a 000d:Ret comctl32.ImageList_ReplaceIcon() retval=00000000 ret=7eae5fef 000d:Call comctl32.ImageList_ReplaceIcon(0013a438,ffffffff,0000110e) ret=7eae6013 000d:Call user32.CopyImage(0000110e,00000001,00000020,00000020,00004000) ret=7e78b95f 000d:Ret user32.CopyImage() retval=00001116 ret=7e78b95f 000d:Call user32.GetIconInfo(00001116,0033fa48) ret=7e78b98a 000d:Ret user32.GetIconInfo() retval=00000001 ret=7e78b98a 000d:Call gdi32.GetObjectW(0000029c,00000018,0033fa30) ret=7e78b9af 000d:Ret gdi32.GetObjectW() retval=00000018 ret=7e78b9af 000d:Call gdi32.CreateCompatibleDC(00000000) ret=7e78b9cf 000d:Ret gdi32.CreateCompatibleDC() retval=000002a0 ret=7e78b9cf 000d:Call gdi32.SetTextColor(0000022c,00000000) ret=7e78ba1e 000d:Ret gdi32.SetTextColor() retval=00000000 ret=7e78ba1e 000d:Call gdi32.SetBkColor(0000022c,00ffffff) ret=7e78ba34 000d:Ret gdi32.SetBkColor() retval=00ffffff ret=7e78ba34 000d:Call gdi32.SelectObject(000002a0,00000298) ret=7e78ba51 000d:Ret gdi32.SelectObject() retval=0000006c ret=7e78ba51 000d:Call gdi32.StretchBlt(0000022c,00000000,00000000,00000020,00000020,000002a0,00000000,00000000,00000020,00000020,00cc0020) ret=7e78baab 000d:Ret gdi32.StretchBlt() retval=00000001 ret=7e78baab 000d:Call gdi32.SelectObject(000002a0,0000029c) ret=7e78bac7 000d:Ret gdi32.SelectObject() retval=00000298 ret=7e78bac7 000d:Call gdi32.StretchBlt(00000238,00000000,00000000,00000020,00000020,000002a0,00000000,00000000,00000020,00000020,00cc0020) ret=7e78bb1e 000d:Ret gdi32.StretchBlt() retval=00000001 ret=7e78bb1e 000d:Call gdi32.SelectObject(000002a0,0000006c) ret=7e78bb33 000d:Ret gdi32.SelectObject() retval=0000029c ret=7e78bb33 000d:Call user32.DestroyIcon(00001116) ret=7e78bb41 000d:Ret user32.DestroyIcon() retval=00000001 ret=7e78bb41 000d:Call gdi32.DeleteDC(000002a0) ret=7e78bb56 000d:Ret gdi32.DeleteDC() retval=00000001 ret=7e78bb56 000d:Call gdi32.DeleteObject(00000298) ret=7e78bb68 000d:Ret gdi32.DeleteObject() retval=00000001 ret=7e78bb68 000d:Call gdi32.DeleteObject(0000029c) ret=7e78bb7a 000d:Ret gdi32.DeleteObject() retval=00000001 ret=7e78bb7a 000d:Ret comctl32.ImageList_ReplaceIcon() retval=00000000 ret=7eae6013 000d:Call ole32.CoTaskMemAlloc(00000014) ret=7eafa5b5 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000014) ret=7e6b2e29 000d:Ret ntdll.RtlAllocateHeap() retval=0013ae58 ret=7e6b2e29 000d:Ret ole32.CoTaskMemAlloc() retval=0013ae58 ret=7eafa5b5 000d:Call KERNEL32.GetFullPathNameW(7ec400e0 L"C:\\windows\\system32\\shell32.dll",00000104,0033fb34,00000000) ret=7eae5f1f 000d:Ret KERNEL32.GetFullPathNameW() retval=0000001f ret=7eae5f1f 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000040) ret=7eae5f61 000d:Ret ntdll.RtlAllocateHeap() retval=0013ae78 ret=7eae5f61 000d:Call comctl32.334(00139878,00007fff,0013ae58) ret=7eae5fc1 000d:Ret comctl32.334() retval=00000001 ret=7eae5fc1 000d:Call comctl32.ImageList_ReplaceIcon(00139a90,ffffffff,00001106) ret=7eae5fef 000d:Call user32.CopyImage(00001106,00000001,00000010,00000010,00004000) ret=7e78b95f 000d:Ret user32.CopyImage() retval=00001116 ret=7e78b95f 000d:Call user32.GetIconInfo(00001116,0033fa48) ret=7e78b98a 000d:Ret user32.GetIconInfo() retval=00000001 ret=7e78b98a 000d:Call gdi32.GetObjectW(000002b8,00000018,0033fa30) ret=7e78b9af 000d:Ret gdi32.GetObjectW() retval=00000018 ret=7e78b9af 000d:Call gdi32.CreateCompatibleDC(00000000) ret=7e78a3e7 000d:Ret gdi32.CreateCompatibleDC() retval=000002bc ret=7e78a3e7 000d:Call KERNEL32.LocalAlloc(00000040,00000028) ret=7e77a409 000d:Ret KERNEL32.LocalAlloc() retval=0013b8c0 ret=7e77a409 000d:Call gdi32.CreateDIBSection(000002bc,0013b8c0,00000000,0033f978,00000000,00000000) ret=7e78a2c9 000d:Ret gdi32.CreateDIBSection() retval=000002c8 ret=7e78a2c9 000d:Call KERNEL32.LocalFree(0013b8c0) ret=7e77a191 000d:Ret KERNEL32.LocalFree() retval=00000000 ret=7e77a191 000d:Call gdi32.SelectObject(000002bc,000002c8) ret=7e78a502 000d:Ret gdi32.SelectObject() retval=0000006c ret=7e78a502 000d:Call gdi32.BitBlt(000002bc,00000000,00000000,00000040,00000090,000001f4,00000000,00000000,00cc0020) ret=7e78a54f 000d:Ret gdi32.BitBlt() retval=00000001 ret=7e78a54f 000d:Call gdi32.SelectObject(000002bc,0000006c) ret=7e78a561 000d:Ret gdi32.SelectObject() retval=000002c8 ret=7e78a561 000d:Call gdi32.SelectObject(000001f4,000002c8) ret=7e78a422 000d:Ret gdi32.SelectObject() retval=0000020c ret=7e78a422 000d:Call gdi32.DeleteObject(0000020c) ret=7e78a430 000d:Ret gdi32.DeleteObject() retval=00000001 ret=7e78a430 000d:Call gdi32.CreateBitmap(00000040,00000090,00000001,00000001,00000000) ret=7e78a4a2 000d:Ret gdi32.CreateBitmap() retval=000002cc ret=7e78a4a2 000d:Call gdi32.SelectObject(000002bc,000002cc) ret=7e78a5c7 000d:Ret gdi32.SelectObject() retval=0000006c ret=7e78a5c7 000d:Call gdi32.BitBlt(000002bc,00000000,00000000,00000040,00000090,00000200,00000000,00000000,00cc0020) ret=7e78a614 000d:Ret gdi32.BitBlt() retval=00000001 ret=7e78a614 000d:Call gdi32.SelectObject(000002bc,0000006c) ret=7e78a626 000d:Ret gdi32.SelectObject() retval=000002cc ret=7e78a626 000d:Call gdi32.SelectObject(00000200,000002cc) ret=7e78a4cd 000d:Ret gdi32.SelectObject() retval=00000210 ret=7e78a4cd 000d:Call gdi32.DeleteObject(00000210) ret=7e78a4db 000d:Ret gdi32.DeleteObject() retval=00000001 ret=7e78a4db 000d:Call gdi32.DeleteDC(000002bc) ret=7e78a450 000d:Ret gdi32.DeleteDC() retval=00000001 ret=7e78a450 000d:Call gdi32.CreateCompatibleDC(00000000) ret=7e78b9cf 000d:Ret gdi32.CreateCompatibleDC() retval=000002d0 ret=7e78b9cf 000d:Call gdi32.SetTextColor(000001f4,00000000) ret=7e78ba1e 000d:Ret gdi32.SetTextColor() retval=00000000 ret=7e78ba1e 000d:Call gdi32.SetBkColor(000001f4,00ffffff) ret=7e78ba34 000d:Ret gdi32.SetBkColor() retval=00ffffff ret=7e78ba34 000d:Call gdi32.SelectObject(000002d0,000002b4) ret=7e78ba51 000d:Ret gdi32.SelectObject() retval=0000006c ret=7e78ba51 000d:Call gdi32.StretchBlt(000001f4,00000010,00000000,00000010,00000010,000002d0,00000000,00000000,00000010,00000010,00cc0020) ret=7e78baab 000d:Ret gdi32.StretchBlt() retval=00000001 ret=7e78baab 000d:Call gdi32.SelectObject(000002d0,000002b8) ret=7e78bac7 000d:Ret gdi32.SelectObject() retval=000002b4 ret=7e78bac7 000d:Call gdi32.StretchBlt(00000200,00000010,00000000,00000010,00000010,000002d0,00000000,00000000,00000010,00000010,00cc0020) ret=7e78bb1e 000d:Ret gdi32.StretchBlt() retval=00000001 ret=7e78bb1e 000d:Call gdi32.SelectObject(000002d0,0000006c) ret=7e78bb33 000d:Ret gdi32.SelectObject() retval=000002b8 ret=7e78bb33 000d:Call user32.DestroyIcon(00001116) ret=7e78bb41 000d:Ret user32.DestroyIcon() retval=00000001 ret=7e78bb41 000d:Call gdi32.DeleteDC(000002d0) ret=7e78bb56 000d:Ret gdi32.DeleteDC() retval=00000001 ret=7e78bb56 000d:Call gdi32.DeleteObject(000002b4) ret=7e78bb68 000d:Ret gdi32.DeleteObject() retval=00000001 ret=7e78bb68 000d:Call gdi32.DeleteObject(000002b8) ret=7e78bb7a 000d:Ret gdi32.DeleteObject() retval=00000001 ret=7e78bb7a 000d:Ret comctl32.ImageList_ReplaceIcon() retval=00000001 ret=7eae5fef 000d:Call comctl32.ImageList_ReplaceIcon(0013a438,ffffffff,0000110e) ret=7eae6013 000d:Call user32.CopyImage(0000110e,00000001,00000020,00000020,00004000) ret=7e78b95f 000d:Ret user32.CopyImage() retval=00001116 ret=7e78b95f 000d:Call user32.GetIconInfo(00001116,0033fa48) ret=7e78b98a 000d:Ret user32.GetIconInfo() retval=00000001 ret=7e78b98a 000d:Call gdi32.GetObjectW(000002e8,00000018,0033fa30) ret=7e78b9af 000d:Ret gdi32.GetObjectW() retval=00000018 ret=7e78b9af 000d:Call gdi32.CreateCompatibleDC(00000000) ret=7e78a3e7 000d:Ret gdi32.CreateCompatibleDC() retval=000002ec ret=7e78a3e7 000d:Call KERNEL32.LocalAlloc(00000040,00000028) ret=7e77a409 000d:Ret KERNEL32.LocalAlloc() retval=0013b3e0 ret=7e77a409 000d:Call gdi32.CreateDIBSection(000002ec,0013b3e0,00000000,0033f978,00000000,00000000) ret=7e78a2c9 000d:Ret gdi32.CreateDIBSection() retval=000002f8 ret=7e78a2c9 000d:Call KERNEL32.LocalFree(0013b3e0) ret=7e77a191 000d:Ret KERNEL32.LocalFree() retval=00000000 ret=7e77a191 000d:Call gdi32.SelectObject(000002ec,000002f8) ret=7e78a502 000d:Ret gdi32.SelectObject() retval=0000006c ret=7e78a502 000d:Call gdi32.BitBlt(000002ec,00000000,00000000,00000080,00000120,0000022c,00000000,00000000,00cc0020) ret=7e78a54f 000d:Ret gdi32.BitBlt() retval=00000001 ret=7e78a54f 000d:Call gdi32.SelectObject(000002ec,0000006c) ret=7e78a561 000d:Ret gdi32.SelectObject() retval=000002f8 ret=7e78a561 000d:Call gdi32.SelectObject(0000022c,000002f8) ret=7e78a422 000d:Ret gdi32.SelectObject() retval=00000244 ret=7e78a422 000d:Call gdi32.DeleteObject(00000244) ret=7e78a430 000d:Ret gdi32.DeleteObject() retval=00000001 ret=7e78a430 000d:Call gdi32.CreateBitmap(00000080,00000120,00000001,00000001,00000000) ret=7e78a4a2 000d:Ret gdi32.CreateBitmap() retval=000002fc ret=7e78a4a2 000d:Call gdi32.SelectObject(000002ec,000002fc) ret=7e78a5c7 000d:Ret gdi32.SelectObject() retval=0000006c ret=7e78a5c7 000d:Call gdi32.BitBlt(000002ec,00000000,00000000,00000080,00000120,00000238,00000000,00000000,00cc0020) ret=7e78a614 000d:Ret gdi32.BitBlt() retval=00000001 ret=7e78a614 000d:Call gdi32.SelectObject(000002ec,0000006c) ret=7e78a626 000d:Ret gdi32.SelectObject() retval=000002fc ret=7e78a626 000d:Call gdi32.SelectObject(00000238,000002fc) ret=7e78a4cd 000d:Ret gdi32.SelectObject() retval=00000248 ret=7e78a4cd 000d:Call gdi32.DeleteObject(00000248) ret=7e78a4db 000d:Ret gdi32.DeleteObject() retval=00000001 ret=7e78a4db 000d:Call gdi32.DeleteDC(000002ec) ret=7e78a450 000d:Ret gdi32.DeleteDC() retval=00000001 ret=7e78a450 000d:Call gdi32.CreateCompatibleDC(00000000) ret=7e78b9cf 000d:Ret gdi32.CreateCompatibleDC() retval=00000300 ret=7e78b9cf 000d:Call gdi32.SetTextColor(0000022c,00000000) ret=7e78ba1e 000d:Ret gdi32.SetTextColor() retval=00000000 ret=7e78ba1e 000d:Call gdi32.SetBkColor(0000022c,00ffffff) ret=7e78ba34 000d:Ret gdi32.SetBkColor() retval=00ffffff ret=7e78ba34 000d:Call gdi32.SelectObject(00000300,000002e4) ret=7e78ba51 000d:Ret gdi32.SelectObject() retval=0000006c ret=7e78ba51 000d:Call gdi32.StretchBlt(0000022c,00000020,00000000,00000020,00000020,00000300,00000000,00000000,00000020,00000020,00cc0020) ret=7e78baab 000d:Ret gdi32.StretchBlt() retval=00000001 ret=7e78baab 000d:Call gdi32.SelectObject(00000300,000002e8) ret=7e78bac7 000d:Ret gdi32.SelectObject() retval=000002e4 ret=7e78bac7 000d:Call gdi32.StretchBlt(00000238,00000020,00000000,00000020,00000020,00000300,00000000,00000000,00000020,00000020,00cc0020) ret=7e78bb1e 000d:Ret gdi32.StretchBlt() retval=00000001 ret=7e78bb1e 000d:Call gdi32.SelectObject(00000300,0000006c) ret=7e78bb33 000d:Ret gdi32.SelectObject() retval=000002e8 ret=7e78bb33 000d:Call user32.DestroyIcon(00001116) ret=7e78bb41 000d:Ret user32.DestroyIcon() retval=00000001 ret=7e78bb41 000d:Call gdi32.DeleteDC(00000300) ret=7e78bb56 000d:Ret gdi32.DeleteDC() retval=00000001 ret=7e78bb56 000d:Call gdi32.DeleteObject(000002e4) ret=7e78bb68 000d:Ret gdi32.DeleteObject() retval=00000001 ret=7e78bb68 000d:Call gdi32.DeleteObject(000002e8) ret=7e78bb7a 000d:Ret gdi32.DeleteObject() retval=00000001 ret=7e78bb7a 000d:Ret comctl32.ImageList_ReplaceIcon() retval=00000001 ret=7eae6013 000d:Ret PE DLL (proc=0x7eb2e9a0,module=0x7eac0000 L"shell32.dll",reason=PROCESS_ATTACH,res=0x1) retval=1 000d:Starting process L"C:\\windows\\system32\\winemenubuilder.exe" (entryproc=0x7ec5bcf0) 000d:Call KERNEL32.GetCommandLineA() ret=7ec5bda4 000d:Ret KERNEL32.GetCommandLineA() retval=001220f8 ret=7ec5bda4 000d:Call KERNEL32.GetStartupInfoA(0033fe84) ret=7ec5bdeb 000d:Ret KERNEL32.GetStartupInfoA() retval=0033fe84 ret=7ec5bdeb 000d:Call KERNEL32.GetModuleHandleA(00000000) ret=7ec5be0a 000d:Ret KERNEL32.GetModuleHandleA() retval=7ec50000 ret=7ec5be0a 000d:Call shell32.SHGetFolderPathW(00000000,00000000,00000000,00000000,0033fc3c) ret=7ec5a49b 000d:Call advapi32.RegCreateKeyW(80000001,7eb38420 L"Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Shell Folders",0033f3ac) ret=7eb00ac3 000d:Ret advapi32.RegCreateKeyW() retval=00000000 ret=7eb00ac3 000d:Call advapi32.RegCreateKeyW(80000001,7eb38380 L"Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders",0033f3b0) ret=7eb00ae7 000d:Ret advapi32.RegCreateKeyW() retval=00000000 ret=7eb00ae7 000d:Call advapi32.RegQueryValueExW(0000003c,7eb382dc L"Desktop",00000000,0033f3b8,0033f4b0,0033f3b4) ret=7eb00b24 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7eb00b24 000d:Call advapi32.RegCreateKeyExW(80000002,7eb38680 L"Software\\Microsoft\\Windows NT\\CurrentVersion\\ProfileList",00000000,00000000,00000000,000f003f,00000000,0033ed38,0033ed34) ret=7eb00514 000d:Ret advapi32.RegCreateKeyExW() retval=00000000 ret=7eb00514 000d:Call KERNEL32.GetSystemDirectoryW(0033e71c,00000104) ret=7eb00551 000d:Ret KERNEL32.GetSystemDirectoryW() retval=00000013 ret=7eb00551 000d:Call advapi32.RegQueryValueExW(00000040,7eb38560 L"ProfilesDirectory",00000000,0033e6b8,0033e924,0033e6b4) ret=7eb0011f 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7eb0011f 000d:Call advapi32.GetUserNameW(0033e71c,0033ed34) ret=7eb0076c 000d:Ret advapi32.GetUserNameW() retval=00000001 ret=7eb0076c 000d:Call shlwapi.PathAppendW(0033ed94 L"C:\\windows\\profiles",0033e71c L"david") ret=7eb0077b 000d:Ret shlwapi.PathAppendW() retval=00000001 ret=7eb0077b 000d:Call shlwapi.PathAppendW(0033ed94 L"C:\\windows\\profiles\\david",0033eb46 L"\\Desktop") ret=7eb007a8 000d:Ret shlwapi.PathAppendW() retval=00000001 ret=7eb007a8 000d:Call advapi32.RegCloseKey(00000040) ret=7eb003d1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7eb003d1 000d:Call advapi32.RegSetValueExW(00000034,7eb382dc L"Desktop",00000000,00000001,0033f4b0,00000044) ret=7eb00bdd 000d:Ret advapi32.RegSetValueExW() retval=00000000 ret=7eb00bdd 000d:Call advapi32.RegCloseKey(00000034) ret=7eb00b3b 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7eb00b3b 000d:Call advapi32.RegCloseKey(0000003c) ret=7eb00b49 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7eb00b49 000d:Call shlwapi.PathFileExistsW(0033f6b8 L"C:\\windows\\profiles\\david\\Desktop") ret=7eb01a0f 000d:Call KERNEL32.SetErrorMode(00000001) ret=7ea864a8 000d:Ret KERNEL32.SetErrorMode() retval=00000000 ret=7ea864a8 000d:Call KERNEL32.GetFileAttributesW(0033f6b8 L"C:\\windows\\profiles\\david\\Desktop") ret=7ea864b5 000d:Ret KERNEL32.GetFileAttributesW() retval=00000010 ret=7ea864b5 000d:Call KERNEL32.SetErrorMode(00000000) ret=7ea864c2 000d:Ret KERNEL32.SetErrorMode() retval=00000001 ret=7ea864c2 000d:Ret shlwapi.PathFileExistsW() retval=00000001 ret=7eb01a0f 000d:Ret shell32.SHGetFolderPathW() retval=00000000 ret=7ec5a49b 000d:Call KERNEL32.wine_get_unix_file_name(0033fc3c L"C:\\windows\\profiles\\david\\Desktop") ret=7ec5a4b0 000d:Ret KERNEL32.wine_get_unix_file_name() retval=0013b110 ret=7ec5a4b0 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0013ba30 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0013ca38 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0013da40 ret=7ec55c75 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013da40) ret=7ec5a5a1 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec5a5a1 000d:Call KERNEL32.lstrcmpA(00122108 "-a",7ec5e3c9 "-a") ret=7ec5a64f 000d:Ret KERNEL32.lstrcmpA() retval=00000000 ret=7ec5a64f 000d:Call KERNEL32.CreateSemaphoreA(00000000,00000001,00000001,7ec5e08b "winemenubuilder_semaphore") ret=7ec5a687 000d:Ret KERNEL32.CreateSemaphoreA() retval=00000034 ret=7ec5a687 000d:Call user32.MsgWaitForMultipleObjects(00000001,0033fe44,00000000,ffffffff,000004ff) ret=7ec5a6b8 000d:Ret user32.MsgWaitForMultipleObjects() retval=00000000 ret=7ec5a6b8 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0013da40 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0013ea48 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0013fa50 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000008) ret=7ec590ac 000d:Ret ntdll.RtlAllocateHeap() retval=0013ad40 ret=7ec590ac 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00141a60 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55dfb 000d:Ret ntdll.RtlAllocateHeap() retval=00142a68 ret=7ec55dfb 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0013adc0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00143a70 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00144a78 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0013a168 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00145a80 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00146a88 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0013a180 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00147a90 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00148a98 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0013a198 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00149aa0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0014aaa8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0013a1b0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0014bab0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0014cab8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0013a1c8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0014dac0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0014eac8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0013a208 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0014fad0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00150ad8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0013a220 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00151ae0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00152ae8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0013a238 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00153af0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00154af8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0013a250 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00155b00 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00156b08 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0013a268 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00157b10 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00158b18 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0013a280 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00159b20 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0015ab28 ret=7ec55c75 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142a68) ret=7ec55f3a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec55f3a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec55eb2 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec55eb2 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141a60) ret=7ec55ee0 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec55ee0 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00141a60 ret=7ec55c75 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141a60) ret=7ec55ee0 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec55ee0 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00141a60 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55dfb 000d:Ret ntdll.RtlAllocateHeap() retval=00142a68 ret=7ec55dfb 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0013a298 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0015bb30 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0015cb38 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0013b260 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0015db40 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0015eb48 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0013b278 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0015fb50 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00160b58 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0013b290 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00161b60 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00162b68 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0013b2a8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00163b70 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00164b78 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0013b2c0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00165b80 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00166b88 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0013b2d8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00167b90 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00168b98 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0013b2f0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00169ba0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0016aba8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0013b308 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0016bbb0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0016cbb8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0013b320 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0016dbc0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0016ebc8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0013b338 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0016fbd0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00170bd8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0013b350 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00171be0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00172be8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0013b368 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00173bf0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00174bf8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0013b380 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00175c00 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00176c08 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0013b398 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00177c10 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00178c18 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0013b3b0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00179c20 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0017ac28 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0013b3c8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0017bc30 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0017cc38 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0013b3e0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0017dc40 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0017ec48 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0013ab38 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0017fc50 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00180c58 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0013ab50 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00181c60 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00182c68 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0013ab68 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00183c70 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00184c78 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0013ab80 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00185c80 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00186c88 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0013ab98 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00187c90 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00188c98 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0013abb0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00189ca0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0018aca8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0013abc8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0018bcb0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0018ccb8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0013abe0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0018dcc0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0018ecc8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0013abf8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0018fcd0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00190cd8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0013ac10 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00191ce0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00192ce8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0013ac28 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00193cf0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00194cf8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0013ac40 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00195d00 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00196d08 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0013ac58 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00197d10 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00198d18 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0013b550 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00199d20 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0019ad28 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0013b568 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0019bd30 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0019cd38 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0013b580 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0019dd40 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0019ed48 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0013b598 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0019fd50 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=001a0d58 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0013b5b0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=001a1d60 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=001a2d68 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0013b5c8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=001a3d70 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=001a4d78 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0013b5e0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=001a5d80 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=001a6d88 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0013b5f8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=001a7d90 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=001a8d98 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0013b610 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=001a9da0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=001aada8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0013b628 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=001abdb0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=001acdb8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0013b640 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=001addc0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=001aedc8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0013b658 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=001afdd0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=001b0dd8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0013b670 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=001b1de0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=001b2de8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0013b688 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=001b3df0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=001b4df8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0013b6a0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=001b5e00 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=001b6e08 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0013b6b8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=001b7e10 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=001b8e18 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0013b6d0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=001b9e20 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=001bae28 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0013b6e8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=001bbe30 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=001bce38 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0013b700 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=001bde40 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=001bee48 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0013b718 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=001bfe50 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=001c0e58 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0013b730 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=001c1e60 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=001c2e68 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0013b748 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=001c3e70 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=001c4e78 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0013b760 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=001c5e80 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=001c6e88 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0013b778 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=001c7e90 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=001c8e98 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0013b790 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=001c9ea0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=001caea8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0013b7a8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=001cbeb0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=001cceb8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0013b7c0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=001cdec0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=001ceec8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0013b7d8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=001cfed0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=001d0ed8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0013b7f0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=001d1ee0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=001d2ee8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0013b808 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=001d3ef0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=001d4ef8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0013b820 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=001d5f00 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=001d6f08 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0013b838 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=001d7f10 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=001d8f18 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0013b850 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=001d9f20 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=001daf28 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0013b868 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=001dbf30 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=001dcf38 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0013b880 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=001ddf40 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=001def48 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0013b898 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=001dff50 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=001e0f58 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0013b8b0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=001e1f60 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=001e2f68 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0013b8c8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=001e3f70 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=001e4f78 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=001e5f80 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=001e5f98 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=001e6fa0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=001e7fa8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=001e7fc0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=001e8fc8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=001e9fd0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=001e9fe8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=001eaff0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=001ebff8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=001ec010 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=001ed018 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=001ee020 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=001ee038 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=001ef040 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=001f0048 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=001f0060 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=001f1068 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=001f2070 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=001f2088 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=001f3090 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=001f4098 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=001f40b0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=001f50b8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=001f60c0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=001f60d8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=001f70e0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=001f80e8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=001f8100 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=001f9108 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=001fa110 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=001fa128 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=001fb130 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=001fc138 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=001fc150 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=001fd158 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=001fe160 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=001fe178 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=001ff180 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=00200188 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=002001a0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=002011a8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=002021b0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=002021c8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=002031d0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=002041d8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=002041f0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=002051f8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=00206200 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00206218 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00207220 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=00208228 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00208240 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00209248 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0020a250 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0020a268 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0020b270 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0020c278 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0020c290 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0020d298 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0020e2a0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0020e2b8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0020f2c0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=002102c8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=002102e0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=002112e8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=002122f0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00212308 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00213310 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=00214318 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00214330 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00215338 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=00216340 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00216358 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00217360 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=00218368 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00218380 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00219388 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021a390 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0021a3a8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0021b3b0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021c3b8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0021c3d0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0021d3d8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021e3e0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0021e3f8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=004b0030 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021f400 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=004b1038 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=004b2040 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021f418 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=004b3048 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=004b4050 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021f430 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=004b5058 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=004b6060 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021f448 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=004b7068 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=004b8070 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021f460 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=004b9078 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=004ba080 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021f478 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=004bb088 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=004bc090 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021f490 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=004bd098 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=004be0a0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021f4a8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=004bf0a8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=004c00b0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021f4c0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=004c10b8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=004c20c0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021f4d8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=004c30c8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=004c40d0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021f4f0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=004c50d8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=004c60e0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021f508 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=004c70e8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=004c80f0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021f520 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=004c90f8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=004ca100 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021f538 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=004cb108 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=004cc110 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021f550 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=004cd118 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=004ce120 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021f568 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=004cf128 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=004d0130 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021f580 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=004d1138 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=004d2140 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021f598 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=004d3148 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=004d4150 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021f5b0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=004d5158 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=004d6160 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021f5c8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=004d7168 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=004d8170 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021f5e0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=004d9178 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=004da180 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021f5f8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=004db188 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=004dc190 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021f610 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=004dd198 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=004de1a0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021f628 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=004df1a8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=004e01b0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021f640 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=004e11b8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=004e21c0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021f658 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=004e31c8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=004e41d0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021f670 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=004e51d8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=004e61e0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021f688 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=004e71e8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=004e81f0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021f6a0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=004e91f8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=004ea200 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021f6b8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=004eb208 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=004ec210 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021f6d0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=004ed218 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=004ee220 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021f6e8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=004ef228 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=004f0230 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021f700 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=004f1238 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=004f2240 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021f718 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=004f3248 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=004f4250 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021f730 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=004f5258 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=004f6260 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021f748 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=004f7268 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=004f8270 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021f760 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=004f9278 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=004fa280 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021f778 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=004fb288 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=004fc290 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021f790 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=004fd298 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=004fe2a0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021f7a8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=004ff2a8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005002b0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021f7c0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005012b8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005022c0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021f7d8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005032c8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005042d0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021f7f0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005052d8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005062e0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021f808 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005072e8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005082f0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021f820 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005092f8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0050a300 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021f838 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0050b308 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0050c310 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021f850 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0050d318 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0050e320 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021f868 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0050f328 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00510330 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021f880 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00511338 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00512340 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021f898 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00513348 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00514350 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021f8b0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00515358 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00516360 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021f8c8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00517368 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00518370 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021f8e0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00519378 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0051a380 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021f8f8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0051b388 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0051c390 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021f910 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0051d398 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0051e3a0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021f928 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0051f3a8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005203b0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021f940 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005213b8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005223c0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021f958 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005233c8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005243d0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021f970 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005253d8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005263e0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021f988 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005273e8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005283f0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021f9a0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005293f8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0052a400 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021f9b8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0052b408 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0052c410 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021f9d0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0052d418 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0052e420 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021f9e8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0052f428 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00530430 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021fa00 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00531438 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00532440 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021fa18 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00533448 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00534450 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021fa30 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00535458 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00536460 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021fa48 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00537468 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00538470 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021fa60 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00539478 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0053a480 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021fa78 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0053b488 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0053c490 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021fa90 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0053d498 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0053e4a0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021faa8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0053f4a8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005404b0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021fac0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005414b8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005424c0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021fad8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005434c8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005444d0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021faf0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005454d8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005464e0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021fb08 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005474e8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005484f0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021fb20 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005494f8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0054a500 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021fb38 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0054b508 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0054c510 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021fb50 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0054d518 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0054e520 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021fb68 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0054f528 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00550530 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021fb80 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00551538 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00552540 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021fb98 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00553548 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00554550 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021fbb0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00555558 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00556560 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021fbc8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00557568 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00558570 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021fbe0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00559578 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0055a580 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021fbf8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0055b588 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0055c590 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021fc10 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0055d598 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0055e5a0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021fc28 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0055f5a8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005605b0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021fc40 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005615b8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005625c0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021fc58 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005635c8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005645d0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021fc70 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005655d8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005665e0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021fc88 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005675e8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005685f0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021fca0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005695f8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0056a600 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021fcb8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0056b608 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0056c610 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021fcd0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0056d618 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0056e620 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021fce8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0056f628 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00570630 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021fd00 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00571638 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00572640 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021fd18 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00573648 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00574650 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021fd30 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00575658 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00576660 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021fd48 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00577668 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00578670 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021fd60 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00579678 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0057a680 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021fd78 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0057b688 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0057c690 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021fd90 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0057d698 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0057e6a0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021fda8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0057f6a8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005806b0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021fdc0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005816b8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005826c0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021fdd8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005836c8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005846d0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021fdf0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005856d8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005866e0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021fe08 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005876e8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005886f0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021fe20 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005896f8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0058a700 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021fe38 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0058b708 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0058c710 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021fe50 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0058d718 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0058e720 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021fe68 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0058f728 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00590730 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021fe80 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00591738 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00592740 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021fe98 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00593748 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00594750 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021feb0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00595758 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00596760 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021fec8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00597768 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00598770 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021fee0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00599778 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0059a780 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021fef8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0059b788 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0059c790 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021ff10 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0059d798 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0059e7a0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021ff28 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0059f7a8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005a07b0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021ff40 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005a17b8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005a27c0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021ff58 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005a37c8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005a47d0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021ff70 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005a57d8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005a67e0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021ff88 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005a77e8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005a87f0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021ffa0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005a97f8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005aa800 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021ffb8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005ab808 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005ac810 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021ffd0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005ad818 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005ae820 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0021ffe8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005af828 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005b0830 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=005b1838 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005b1850 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005b2858 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=005b3860 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005b3878 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005b4880 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=005b5888 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005b58a0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005b68a8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=005b78b0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005b78c8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005b88d0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=005b98d8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005b98f0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005ba8f8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=005bb900 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005bb918 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005bc920 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=005bd928 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005bd940 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005be948 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=005bf950 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005c0030 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005c1038 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=005bf968 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005c2040 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005c3048 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=005bf980 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005c4050 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005c5058 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=005bf998 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005c6060 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005c7068 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=005bf9b0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005c8070 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005c9078 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=005bf9c8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005ca080 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005cb088 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=005bf9e0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005cc090 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005cd098 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=005bf9f8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005ce0a0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005cf0a8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=005bfa10 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005d00b0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005d10b8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=005bfa28 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005d20c0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005d30c8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=005bfa40 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005d40d0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005d50d8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=005bfa58 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005d60e0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005d70e8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=005bfa70 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005d80f0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005d90f8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=005bfa88 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005da100 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005db108 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=005bfaa0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005dc110 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005dd118 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=005bfab8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005de120 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005df128 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=005bfad0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005e0130 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005e1138 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=005bfae8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005e2140 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005e3148 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=005bfb00 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005e4150 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005e5158 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=005bfb18 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005e6160 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005e7168 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=005bfb30 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005e8170 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005e9178 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=005bfb48 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005ea180 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005eb188 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=005bfb60 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005ec190 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005ed198 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=005bfb78 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005ee1a0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005ef1a8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=005bfb90 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005f01b0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005f11b8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=005bfba8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005f21c0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005f31c8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=005bfbc0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005f41d0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005f51d8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=005bfbd8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005f61e0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005f71e8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=005bfbf0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005f81f0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005f91f8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=005bfc08 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005fa200 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005fb208 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=005bfc20 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005fc210 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005fd218 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=005bfc38 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005fe220 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=005ff228 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=005bfc50 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00600230 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00601238 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=005bfc68 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00602240 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00603248 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=005bfc80 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00604250 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00605258 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=005bfc98 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00606260 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00607268 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=005bfcb0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00608270 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00609278 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=005bfcc8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0060a280 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0060b288 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=005bfce0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0060c290 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0060d298 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=005bfcf8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0060e2a0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0060f2a8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=005bfd10 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006102b0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006112b8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=005bfd28 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006122c0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006132c8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=005bfd40 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006142d0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006152d8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=005bfd58 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006162e0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006172e8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=005bfd70 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006182f0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006192f8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=005bfd88 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0061a300 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0061b308 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=005bfda0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0061c310 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0061d318 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=005bfdb8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0061e320 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0061f328 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=005bfdd0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00620330 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00621338 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=005bfde8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00622340 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00623348 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=005bfe00 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00624350 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00625358 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=005bfe18 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00626360 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00627368 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=005bfe30 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00628370 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00629378 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=005bfe48 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0062a380 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0062b388 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=005bfe60 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0062c390 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0062d398 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=005bfe78 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0062e3a0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0062f3a8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=005bfe90 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006303b0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006313b8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=005bfea8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006323c0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006333c8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=005bfec0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006343d0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006353d8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=005bfed8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006363e0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006373e8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=005bfef0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006383f0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006393f8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=005bff08 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0063a400 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0063b408 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=005bff20 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0063c410 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0063d418 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=005bff38 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0063e420 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0063f428 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=005bff50 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00640430 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00641438 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=005bff68 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00642440 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00643448 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=005bff80 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00644450 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00645458 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=005bff98 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00646460 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00647468 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=005bffb0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00648470 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00649478 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=005bffc8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0064a480 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0064b488 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=005bffe0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0064c490 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0064d498 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0064e4a0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0064e4b8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0064f4c0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=006504c8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006504e0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006514e8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=006524f0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00652508 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00653510 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=00654518 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00654530 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00655538 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=00656540 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00656558 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00657560 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=00658568 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00658580 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00659588 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0065a590 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0065a5a8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0065b5b0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0065c5b8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0065c5d0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0065d5d8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0065e5e0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0065e5f8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0065f600 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=00660608 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00660620 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00661628 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=00662630 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00662648 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00663650 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=00664658 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00664670 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00665678 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=00666680 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00666698 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006676a0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=006686a8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006686c0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006696c8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0066a6d0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0066a6e8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0066b6f0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0066c6f8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0066c710 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0066d718 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0066e720 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0066e738 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0066f740 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=00670748 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00670760 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00671768 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=00672770 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00672788 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00673790 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=00674798 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006747b0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006757b8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=006767c0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006767d8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006777e0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=006787e8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00678800 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00679808 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0067a810 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0067a828 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0067b830 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0067c838 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0067c850 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0067d858 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0067e860 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0067e878 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0067f880 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=00680888 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006808a0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006818a8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=006828b0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006828c8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006838d0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=006848d8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006848f0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006858f8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=00686900 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00686918 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00687920 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=00688928 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00688940 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00689948 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0068a950 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0068a968 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0068b970 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0068c978 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0068c990 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0068d998 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0068e9a0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0068e9b8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0068f9c0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=006909c8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006909e0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006919e8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=006929f0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00692a08 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00693a10 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=00694a18 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00694a30 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00695a38 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=00696a40 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00696a58 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00697a60 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=00698a68 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00698a80 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00699a88 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0069aa90 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0069aaa8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0069bab0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0069cab8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0069cad0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0069dad8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0069eae0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0069eaf8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0069fb00 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=006a0b08 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006a0b20 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006a1b28 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=006a2b30 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006a2b48 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006a3b50 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=006a4b58 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006a4b70 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006a5b78 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=006a6b80 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006a6b98 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006a7ba0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=006a8ba8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006a8bc0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006a9bc8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=006aabd0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006aabe8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006abbf0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=006acbf8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006acc10 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006adc18 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=006aec20 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006aec38 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006afc40 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=006b0c48 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006b0c60 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006b1c68 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=006b2c70 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006b2c88 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006b3c90 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=006b4c98 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006b4cb0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006b5cb8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=006b6cc0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006b6cd8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006b7ce0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=006b8ce8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006b8d00 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006b9d08 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=006bad10 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006bad28 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006bbd30 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=006bcd38 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006bcd50 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006bdd58 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=006bed60 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006bed78 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006bfd80 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=006c0d88 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006c0da0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006c1da8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=006c2db0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006c2dc8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006c3dd0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=006c4dd8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006c4df0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006c5df8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=006c6e00 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006c6e18 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006c7e20 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=006c8e28 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006c8e40 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006c9e48 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=006cae50 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006cae68 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006cbe70 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=006cce78 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006cce90 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006cde98 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=006ceea0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006ceeb8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006cfec0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=006d0ec8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006d0ee0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006d1ee8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=006d2ef0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006d2f08 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006d3f10 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=006d4f18 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006d4f30 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006d5f38 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=006d6f40 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006d6f58 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006d7f60 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=006d8f68 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006d8f80 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006d9f88 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=006daf90 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006dafa8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006dbfb0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=006dcfb8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006dcfd0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006ddfd8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=006defe0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006deff8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006e0000 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=006e1008 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006e1020 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006e2028 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=006e3030 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006e3048 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006e4050 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=006e5058 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006e5070 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006e6078 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=006e7080 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006e7098 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006e80a0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=006e90a8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006e90c0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006ea0c8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=006eb0d0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006eb0e8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006ec0f0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=006ed0f8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006ed110 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006ee118 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=006ef120 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006ef138 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006f0140 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=006f1148 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006f1160 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006f2168 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=006f3170 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006f3188 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006f4190 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=006f5198 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006f51b0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006f61b8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=006f71c0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006f71d8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006f81e0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=006f91e8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006f9200 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006fa208 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=006fb210 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006fb228 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006fc230 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=006fd238 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006fd250 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006fe258 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=006ff260 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=006ff278 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00700280 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=00701288 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007012a0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007022a8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007032b0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007032c8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007042d0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007052d8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007052f0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007062f8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=00707300 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00707318 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00708320 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=00709328 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00709340 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0070a348 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0070b350 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0070b368 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0070c370 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0070d378 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0070d390 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0070e398 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0070f3a0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0070f3b8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007103c0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007113c8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007113e0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007123e8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007133f0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00713408 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00714410 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=00715418 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00715430 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00716438 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=00717440 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00717458 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00718460 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=00719468 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00719480 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0071a488 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0071b490 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0071b4a8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0071c4b0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0071d4b8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0071d4d0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0071e4d8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0071f4e0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0071f4f8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00720500 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=00721508 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00721520 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00722528 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=00723530 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00723548 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00724550 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=00725558 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00725570 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00726578 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=00727580 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00727598 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007285a0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007295a8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007295c0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0072a5c8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0072b5d0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0072b5e8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0072c5f0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0072d5f8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0072d610 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0072e618 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0072f620 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0072f638 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00730640 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=00731648 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00731660 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00732668 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=00733670 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00733688 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00734690 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=00735698 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007356b0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007366b8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007376c0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007376d8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007386e0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007396e8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00739700 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0073a708 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0073b710 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0073b728 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0073c730 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0073d738 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0073d750 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0073e758 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0073f760 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0073f778 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00740780 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=00741788 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007417a0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007427a8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007437b0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007437c8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007447d0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007457d8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007457f0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007467f8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=00747800 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00747818 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00748820 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=00749828 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00749840 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0074a848 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0074b850 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0074b868 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0074c870 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0074d878 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0074d890 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0074e898 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0074f8a0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0074f8b8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007508c0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007518c8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007518e0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007528e8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007538f0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00753908 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00754910 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=00755918 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00755930 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00756938 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=00757940 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00757958 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00758960 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=00759968 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00759980 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0075a988 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0075b990 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0075b9a8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0075c9b0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0075d9b8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0075d9d0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0075e9d8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0075f9e0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0075f9f8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00760a00 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=00761a08 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00761a20 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00762a28 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=00763a30 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00763a48 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00764a50 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=00765a58 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00765a70 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00766a78 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=00767a80 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00767a98 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00768aa0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=00769aa8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00769ac0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0076aac8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0076bad0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0076bae8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0076caf0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0076daf8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0076db10 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0076eb18 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0076fb20 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0076fb38 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00770b40 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=00771b48 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00771b60 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00772b68 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=00773b70 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00773b88 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00774b90 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=00775b98 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00775bb0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00776bb8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=00777bc0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00777bd8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00778be0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=00779be8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00779c00 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0077ac08 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0077bc10 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0077bc28 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0077cc30 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0077dc38 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0077dc50 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0077ec58 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0077fc60 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0077fc78 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00780c80 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=00781c88 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00781ca0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00782ca8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=00783cb0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00783cc8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00784cd0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=00785cd8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00785cf0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00786cf8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=00787d00 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00787d18 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00788d20 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=00789d28 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00789d40 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0078ad48 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0078bd50 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0078bd68 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0078cd70 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0078dd78 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0078dd90 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0078ed98 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0078fda0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0078fdb8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00790dc0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=00791dc8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00791de0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00792de8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=00793df0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00793e08 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00794e10 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=00795e18 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00795e30 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00796e38 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=00797e40 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00797e58 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00798e60 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=00799e68 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00799e80 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0079ae88 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0079be90 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0079bea8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0079ceb0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0079deb8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0079ded0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0079eed8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0079fee0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0079fef8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007a0f00 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007a1f08 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007a1f20 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007a2f28 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007a3f30 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007a3f48 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007a4f50 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007a5f58 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007a5f70 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007a6f78 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007a7f80 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007a7f98 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007a8fa0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007a9fa8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007a9fc0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007aafc8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007abfd0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007abfe8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007acff0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007adff8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007ae010 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007af018 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007b0020 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007b0038 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007b1040 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007b2048 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007b2060 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007b3068 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007b4070 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007b4088 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007b5090 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007b6098 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007b60b0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007b70b8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007b80c0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007b80d8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007b90e0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007ba0e8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007ba100 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007bb108 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007bc110 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007bc128 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007bd130 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007be138 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007be150 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007bf158 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007c0160 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007c0178 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007c1180 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007c2188 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007c21a0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007c31a8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007c41b0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007c41c8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007c51d0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007c61d8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007c61f0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007c71f8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007c8200 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007c8218 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007c9220 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007ca228 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007ca240 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007cb248 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007cc250 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007cc268 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007cd270 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007ce278 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007ce290 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007cf298 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007d02a0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007d02b8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007d12c0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007d22c8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007d22e0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007d32e8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007d42f0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007d4308 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007d5310 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007d6318 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007d6330 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007d7338 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007d8340 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007d8358 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007d9360 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007da368 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007da380 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007db388 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007dc390 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007dc3a8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007dd3b0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007de3b8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007de3d0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007e0030 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007df3d8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007e1038 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007e2040 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007df3f0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007e3048 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007e4050 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007df408 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007e5058 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007e6060 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007df420 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007e7068 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007e8070 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007df438 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007e9078 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007ea080 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007df450 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007eb088 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007ec090 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007df468 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007ed098 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007ee0a0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007df480 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007ef0a8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007f00b0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007df498 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007f10b8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007f20c0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007df4b0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007f30c8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007f40d0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007df4c8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007f50d8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007f60e0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007df4e0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007f70e8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007f80f0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007df4f8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007f90f8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007fa100 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007df510 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007fb108 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007fc110 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007df528 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007fd118 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007fe120 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007df540 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=007ff128 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00800130 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007df558 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00801138 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00802140 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007df570 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00803148 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00804150 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007df588 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00805158 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00806160 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007df5a0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00807168 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00808170 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007df5b8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00809178 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0080a180 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007df5d0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0080b188 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0080c190 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007df5e8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0080d198 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0080e1a0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007df600 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0080f1a8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008101b0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007df618 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008111b8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008121c0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007df630 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008131c8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008141d0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007df648 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008151d8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008161e0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007df660 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008171e8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008181f0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007df678 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008191f8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0081a200 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007df690 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0081b208 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0081c210 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007df6a8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0081d218 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0081e220 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007df6c0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0081f228 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00820230 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007df6d8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00821238 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00822240 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007df6f0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00823248 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00824250 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007df708 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00825258 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00826260 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007df720 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00827268 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00828270 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007df738 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00829278 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0082a280 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007df750 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0082b288 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0082c290 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007df768 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0082d298 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0082e2a0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007df780 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0082f2a8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008302b0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007df798 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008312b8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008322c0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007df7b0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008332c8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008342d0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007df7c8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008352d8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008362e0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007df7e0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008372e8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008382f0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007df7f8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008392f8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0083a300 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007df810 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0083b308 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0083c310 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007df828 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0083d318 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0083e320 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007df840 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0083f328 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00840330 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007df858 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00841338 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00842340 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007df870 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00843348 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00844350 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007df888 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00845358 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00846360 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007df8a0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00847368 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00848370 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007df8b8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00849378 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0084a380 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007df8d0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0084b388 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0084c390 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007df8e8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0084d398 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0084e3a0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007df900 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0084f3a8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008503b0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007df918 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008513b8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008523c0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007df930 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008533c8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008543d0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007df948 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008553d8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008563e0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007df960 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008573e8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008583f0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007df978 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008593f8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0085a400 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007df990 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0085b408 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0085c410 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007df9a8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0085d418 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0085e420 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007df9c0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0085f428 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00860430 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007df9d8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00861438 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00862440 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007df9f0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00863448 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00864450 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007dfa08 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00865458 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00866460 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007dfa20 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00867468 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00868470 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007dfa38 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00869478 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0086a480 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007dfa50 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0086b488 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0086c490 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007dfa68 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0086d498 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0086e4a0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007dfa80 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0086f4a8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008704b0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007dfa98 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008714b8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008724c0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007dfab0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008734c8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008744d0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007dfac8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008754d8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008764e0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007dfae0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008774e8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008784f0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007dfaf8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008794f8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0087a500 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007dfb10 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0087b508 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0087c510 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007dfb28 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0087d518 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0087e520 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007dfb40 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0087f528 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00880530 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007dfb58 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00881538 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00882540 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007dfb70 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00883548 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00884550 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007dfb88 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00885558 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00886560 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007dfba0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00887568 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00888570 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007dfbb8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00889578 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0088a580 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007dfbd0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0088b588 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0088c590 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007dfbe8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0088d598 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0088e5a0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007dfc00 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0088f5a8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008905b0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007dfc18 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008915b8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008925c0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007dfc30 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008935c8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008945d0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007dfc48 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008955d8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008965e0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007dfc60 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008975e8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008985f0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007dfc78 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008995f8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0089a600 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007dfc90 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0089b608 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0089c610 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007dfca8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0089d618 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0089e620 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007dfcc0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0089f628 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008a0630 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007dfcd8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008a1638 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008a2640 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007dfcf0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008a3648 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008a4650 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007dfd08 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008a5658 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008a6660 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007dfd20 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008a7668 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008a8670 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007dfd38 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008a9678 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008aa680 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007dfd50 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008ab688 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008ac690 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007dfd68 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008ad698 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008ae6a0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007dfd80 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008af6a8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008b06b0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007dfd98 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008b16b8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008b26c0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007dfdb0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008b36c8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008b46d0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007dfdc8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008b56d8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008b66e0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007dfde0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008b76e8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008b86f0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007dfdf8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008b96f8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008ba700 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007dfe10 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008bb708 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008bc710 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007dfe28 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008bd718 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008be720 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007dfe40 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008bf728 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008c0730 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007dfe58 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008c1738 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008c2740 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007dfe70 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008c3748 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008c4750 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007dfe88 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008c5758 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008c6760 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007dfea0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008c7768 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008c8770 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007dfeb8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008c9778 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008ca780 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007dfed0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008cb788 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008cc790 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007dfee8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008cd798 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008ce7a0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007dff00 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008cf7a8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008d07b0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007dff18 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008d17b8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008d27c0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007dff30 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008d37c8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008d47d0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007dff48 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008d57d8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008d67e0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007dff60 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008d77e8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008d87f0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007dff78 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008d97f8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008da800 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007dff90 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008db808 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008dc810 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007dffa8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008dd818 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008de820 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007dffc0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008df828 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008e0830 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=007dffd8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008e1838 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008e2840 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=008e3848 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008e3860 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008e4868 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=008e5870 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008e5888 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008e6890 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=008e7898 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008e78b0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008e88b8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=008e98c0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008e98d8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008ea8e0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=008eb8e8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008eb900 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008ec908 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=008ed910 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008ed928 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008ee930 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=008ef938 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008ef950 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008f0958 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=008f1960 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008f1978 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008f2980 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=008f3988 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008f39a0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008f49a8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=008f59b0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008f59c8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008f69d0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=008f79d8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008f79f0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008f89f8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=008f9a00 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008f9a18 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008faa20 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=008fba28 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008fba40 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008fca48 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=008fda50 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008fda68 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008fea70 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=008ffa78 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=008ffa90 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00900a98 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=00901aa0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00901ab8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00902ac0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=00903ac8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00903ae0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00904ae8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=00905af0 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00905b08 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00906b10 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=00907b18 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00907b30 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00908b38 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=00909b40 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00909b58 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0090ab60 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0090bb68 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0090bb80 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0090cb88 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0090db90 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0090dba8 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0090ebb0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec55fa1 000d:Ret ntdll.RtlAllocateHeap() retval=0090fbb8 ret=7ec55fa1 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=0090fbd0 ret=7ec55c75 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00910bd8 ret=7ec55c75 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142a68) ret=7ec55f3a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec55f3a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec55eb2 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec55eb2 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141a60) ret=7ec55ee0 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec55ee0 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00141a60 ret=7ec55c75 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141a60) ret=7ec55ee0 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec55ee0 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59132 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59132 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,00000000,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00140a58 L".avi",ffffffff,00000000,00000000,00000000,00000000) ret=7ec53b8b 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000005 ret=7ec53b8b 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000005) ret=7ec53bad 000d:Ret ntdll.RtlAllocateHeap() retval=00141260 ret=7ec53bad 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00140a58 L".avi",ffffffff,00141260,00000005,00000000,00000000) ret=7ec53bf1 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000005 ret=7ec53bf1 000d:Call shlwapi.AssocQueryStringW(00000000,00000003,00140a58,00000000,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00141278 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".avi",00000000,00020019,00141280) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,00141284) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f4c8) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000002 ret=7ea7722c 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141278) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=80070002 ret=7ec54638 000d:Call shlwapi.AssocQueryStringW(00000000,0000000f,00140a58,00000000,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00141278 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".avi",00000000,00020019,00141280) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,00141284) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f4c8) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000002 ret=7ea7722c 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141278) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=80070002 ret=7ec54638 000d:Call shlwapi.AssocQueryStringW(00000000,0000000e,00140a58,00000000,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00141278 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".avi",00000000,00020019,00141280) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,00141284) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegGetValueW(00000044,00000000,7eaa22ce L"Content Type",00000002,00000000,00000000,0033f7a4) ret=7ea77c08 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77c08 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000014) ret=7ea77f05 000d:Ret ntdll.RtlAllocateHeap() retval=00141290 ret=7ea77f05 000d:Call advapi32.RegGetValueW(00000044,00000000,7eaa22ce L"Content Type",00000002,00000000,00141290,0033f7a4) ret=7ea77f50 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77f50 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141290) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141278) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000001 ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000014) ret=7ec54661 000d:Ret ntdll.RtlAllocateHeap() retval=00141278 ret=7ec54661 000d:Call shlwapi.AssocQueryStringW(00000000,0000000e,00140a58,00000000,00141278 L"\1be0\0091\0120\0011D",0033f8c8) ret=7ec54693 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00141298 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".avi",00000000,00020019,001412a0) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,001412a4) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegGetValueW(00000044,00000000,7eaa22ce L"Content Type",00000002,00000000,00000000,0033f7a4) ret=7ea77c08 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77c08 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000014) ret=7ea77f05 000d:Ret ntdll.RtlAllocateHeap() retval=001412b0 ret=7ea77f05 000d:Call advapi32.RegGetValueW(00000044,00000000,7eaa22ce L"Content Type",00000002,00000000,001412b0,0033f7a4) ret=7ea77f50 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77f50 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001412b0) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141298) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000000 ret=7ec54693 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00141298 ret=7ec55c75 000d:Call shlwapi.AssocQueryStringW(00000000,00000001,00140a58,7ec5ed44,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=001422a0 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".avi",00000000,00020019,001422a8) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,001422ac) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f458) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000002 ret=7ea7722c 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001422a0) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=80070002 ret=7ec54638 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141260) ret=7ec598ff 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec598ff 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59922 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59922 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59945 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59945 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59968 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59968 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec5998b 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec5998b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec599ae 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec599ae 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141278) ret=7ec599d1 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec599d1 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141298) ret=7ec599f5 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec599f5 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59a18 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a18 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59a3b 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a3b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59a5e 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a5e 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59a81 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a81 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,00000001,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00140a58 L".bmp",ffffffff,00000000,00000000,00000000,00000000) ret=7ec53b8b 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000005 ret=7ec53b8b 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000005) ret=7ec53bad 000d:Ret ntdll.RtlAllocateHeap() retval=00141260 ret=7ec53bad 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00140a58 L".bmp",ffffffff,00141260,00000005,00000000,00000000) ret=7ec53bf1 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000005 ret=7ec53bf1 000d:Call shlwapi.AssocQueryStringW(00000000,00000003,00140a58,00000000,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00141278 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".bmp",00000000,00020019,00141280) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,00141284) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f4c8) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000002 ret=7ea7722c 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141278) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=80070002 ret=7ec54638 000d:Call shlwapi.AssocQueryStringW(00000000,0000000f,00140a58,00000000,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00141278 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".bmp",00000000,00020019,00141280) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,00141284) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f4c8) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000002 ret=7ea7722c 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141278) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=80070002 ret=7ec54638 000d:Call shlwapi.AssocQueryStringW(00000000,0000000e,00140a58,00000000,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00141278 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".bmp",00000000,00020019,00141280) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,00141284) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegGetValueW(00000044,00000000,7eaa22ce L"Content Type",00000002,00000000,00000000,0033f7a4) ret=7ea77c08 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77c08 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000014) ret=7ea77f05 000d:Ret ntdll.RtlAllocateHeap() retval=00141290 ret=7ea77f05 000d:Call advapi32.RegGetValueW(00000044,00000000,7eaa22ce L"Content Type",00000002,00000000,00141290,0033f7a4) ret=7ea77f50 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77f50 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141290) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141278) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000001 ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000014) ret=7ec54661 000d:Ret ntdll.RtlAllocateHeap() retval=00141278 ret=7ec54661 000d:Call shlwapi.AssocQueryStringW(00000000,0000000e,00140a58,00000000,00141278 L"\1be0\0091\0120\0011D",0033f8c8) ret=7ec54693 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00141298 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".bmp",00000000,00020019,001412a0) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,001412a4) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegGetValueW(00000044,00000000,7eaa22ce L"Content Type",00000002,00000000,00000000,0033f7a4) ret=7ea77c08 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77c08 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000014) ret=7ea77f05 000d:Ret ntdll.RtlAllocateHeap() retval=001412b0 ret=7ea77f05 000d:Call advapi32.RegGetValueW(00000044,00000000,7eaa22ce L"Content Type",00000002,00000000,001412b0,0033f7a4) ret=7ea77f50 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77f50 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001412b0) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141298) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000000 ret=7ec54693 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00141298 ret=7ec55c75 000d:Call shlwapi.AssocQueryStringW(00000000,00000001,00140a58,7ec5ed44,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=001422a0 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".bmp",00000000,00020019,001422a8) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,001422ac) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f458) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000002 ret=7ea7722c 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001422a0) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=80070002 ret=7ec54638 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141260) ret=7ec598ff 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec598ff 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59922 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59922 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59945 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59945 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59968 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59968 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec5998b 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec5998b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec599ae 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec599ae 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141278) ret=7ec599d1 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec599d1 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141298) ret=7ec599f5 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec599f5 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59a18 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a18 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59a3b 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a3b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59a5e 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a5e 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59a81 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a81 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,00000002,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00140a58 L".chm",ffffffff,00000000,00000000,00000000,00000000) ret=7ec53b8b 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000005 ret=7ec53b8b 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000005) ret=7ec53bad 000d:Ret ntdll.RtlAllocateHeap() retval=00141260 ret=7ec53bad 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00140a58 L".chm",ffffffff,00141260,00000005,00000000,00000000) ret=7ec53bf1 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000005 ret=7ec53bf1 000d:Call shlwapi.AssocQueryStringW(00000000,00000003,00140a58,00000000,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00141278 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".chm",00000000,00020019,00141280) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,00141284) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f4c8) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000012) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=00141290 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00141290,0033f4c8) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegGetValueW(80000000,00141290 L"chm.file",00000000,00000002,00000000,00000000,0033f79c) ret=7ea77e3e 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77e3e 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000030) ret=7ea77fc6 000d:Ret ntdll.RtlAllocateHeap() retval=001412b0 ret=7ea77fc6 000d:Call advapi32.RegGetValueW(80000000,00141290 L"chm.file",00000000,00000002,00000000,001412b0,0033f79c) ret=7ea7800c 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea7800c 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001412b0) ret=7ea78066 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea78066 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141290) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141278) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000001 ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000030) ret=7ec54661 000d:Ret ntdll.RtlAllocateHeap() retval=00141278 ret=7ec54661 000d:Call shlwapi.AssocQueryStringW(00000000,00000003,00140a58,00000000,00141278 L"\1be0\0091\0120\0011D",0033f8c8) ret=7ec54693 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=001412b0 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".chm",00000000,00020019,001412b8) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,001412bc) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f4c8) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000012) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=001412c8 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,001412c8,0033f4c8) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegGetValueW(80000000,001412c8 L"chm.file",00000000,00000002,00000000,00000000,0033f79c) ret=7ea77e3e 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77e3e 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000030) ret=7ea77fc6 000d:Ret ntdll.RtlAllocateHeap() retval=001412e8 ret=7ea77fc6 000d:Call advapi32.RegGetValueW(80000000,001412c8 L"chm.file",00000000,00000002,00000000,001412e8,0033f79c) ret=7ea7800c 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea7800c 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001412e8) ret=7ea78066 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea78066 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001412c8) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001412b0) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000000 ret=7ec54693 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00141278 L"Compiled HTML Help File",ffffffff,00000000,00000000,00000000,00000000) ret=7ec53b8b 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000018 ret=7ec53b8b 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000018) ret=7ec53bad 000d:Ret ntdll.RtlAllocateHeap() retval=001412b0 ret=7ec53bad 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00141278 L"Compiled HTML Help File",ffffffff,001412b0,00000018,00000000,00000000) ret=7ec53bf1 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000018 ret=7ec53bf1 000d:Call shlwapi.AssocQueryStringW(00000000,0000000f,00140a58,00000000,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=001412d0 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".chm",00000000,00020019,001412d8) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,001412dc) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f4c8) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000012) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=001412e8 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,001412e8,0033f4c8) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegOpenKeyExW(80000000,001412e8 L"chm.file",00000000,00020019,0033f79c) ret=7ea77d33 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea77d33 000d:Call advapi32.RegGetValueW(00000048,7eaa22b6 L"DefaultIcon",00000000,00000002,00000000,00000000,0033f7a0) ret=7ea780bd 000d:Ret advapi32.RegGetValueW() retval=00000002 ret=7ea780bd 000d:Call advapi32.RegCloseKey(00000048) ret=7ea780e4 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea780e4 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001412e8) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001412d0) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=80070002 ret=7ec54638 000d:Call shlwapi.AssocQueryStringW(00000000,0000000e,00140a58,00000000,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=001412d0 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".chm",00000000,00020019,001412d8) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,001412dc) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegGetValueW(00000044,00000000,7eaa22ce L"Content Type",00000002,00000000,00000000,0033f7a4) ret=7ea77c08 000d:Ret advapi32.RegGetValueW() retval=00000002 ret=7ea77c08 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001412d0) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=80070002 ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=001412d0 ret=7ec55c75 000d:Call shlwapi.AssocQueryStringW(00000000,00000001,00140a58,7ec5ed44,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=001422d8 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".chm",00000000,00020019,001422e0) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,001422e4) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f458) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000012) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=001422f0 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,001422f0,0033f458) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegOpenKeyExW(80000000,001422f0 L"chm.file",00000000,00020019,0033f4c4) ret=7ea7737b 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7737b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001422f0) ret=7ea773a1 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea773a1 000d:Call advapi32.RegOpenKeyExW(00000048,7eaa23b4 L"shell",00000000,00020019,0033f4c0) ret=7ea773ed 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea773ed 000d:Call advapi32.RegCloseKey(00000048) ret=7ea773fd 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea773fd 000d:Call advapi32.RegOpenKeyExW(0000004c,7ec5ed44 L"open",00000000,00020019,0033f4bc) ret=7ea77433 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea77433 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ea77459 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77459 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea77467 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea77467 000d:Call advapi32.RegOpenKeyExW(00000048,7eaa23c0 L"command",00000000,00020019,0033f4c8) ret=7ea7749f 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7749f 000d:Call advapi32.RegCloseKey(00000048) ret=7ea774af 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774af 000d:Call advapi32.RegQueryValueExW(0000004c,00000000,00000000,00000000,00000000,0033f458) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,0000003c) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=001422f0 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(0000004c,00000000,00000000,00000000,001422f0,0033f458) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea774d3 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774d3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001422f0) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001422d8) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000001 ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,0000003c) ret=7ec54661 000d:Ret ntdll.RtlAllocateHeap() retval=001422d8 ret=7ec54661 000d:Call shlwapi.AssocQueryStringW(00000000,00000001,00140a58,7ec5ed44,001422d8 L"\1be0\0091\0120\0011D",0033f8c8) ret=7ec54693 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00142320 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".chm",00000000,00020019,00142328) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,0014232c) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f458) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000012) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=00142338 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00142338,0033f458) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegOpenKeyExW(80000000,00142338 L"chm.file",00000000,00020019,0033f4c4) ret=7ea7737b 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7737b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142338) ret=7ea773a1 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea773a1 000d:Call advapi32.RegOpenKeyExW(00000048,7eaa23b4 L"shell",00000000,00020019,0033f4c0) ret=7ea773ed 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea773ed 000d:Call advapi32.RegCloseKey(00000048) ret=7ea773fd 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea773fd 000d:Call advapi32.RegOpenKeyExW(0000004c,7ec5ed44 L"open",00000000,00020019,0033f4bc) ret=7ea77433 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea77433 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ea77459 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77459 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea77467 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea77467 000d:Call advapi32.RegOpenKeyExW(00000048,7eaa23c0 L"command",00000000,00020019,0033f4c8) ret=7ea7749f 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7749f 000d:Call advapi32.RegCloseKey(00000048) ret=7ea774af 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774af 000d:Call advapi32.RegQueryValueExW(0000004c,00000000,00000000,00000000,00000000,0033f458) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,0000003c) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=00142338 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(0000004c,00000000,00000000,00000000,00142338,0033f458) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea774d3 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774d3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142338) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142320) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000000 ret=7ec54693 000d:Call shlwapi.AssocQueryStringW(00000000,00000004,00140a58,00000000,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00142320 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".chm",00000000,00020019,00142328) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,0014232c) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f418) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000012) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=00142338 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00142338,0033f418) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegOpenKeyExW(80000000,00142338 L"chm.file",00000000,00020019,0033f484) ret=7ea7737b 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7737b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142338) ret=7ea773a1 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea773a1 000d:Call advapi32.RegOpenKeyExW(00000048,7eaa23b4 L"shell",00000000,00020019,0033f480) ret=7ea773ed 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea773ed 000d:Call advapi32.RegCloseKey(00000048) ret=7ea773fd 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea773fd 000d:Call advapi32.RegQueryValueExW(0000004c,00000000,00000000,00000000,00000000,0033f418) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000002 ret=7ea7722c 000d:Call advapi32.RegQueryInfoKeyW(0000004c,00000000,00000000,00000000,00000000,0033f470,00000000,00000000,00000000,00000000,00000000,00000000) ret=7ea77568 000d:Ret advapi32.RegQueryInfoKeyW() retval=00000000 ret=7ea77568 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,0000000a) ret=7ea7759a 000d:Ret ntdll.RtlAllocateHeap() retval=00142338 ret=7ea7759a 000d:Call advapi32.RegEnumKeyExW(0000004c,00000000,00142338,0033f470,00000000,00000000,00000000,00000000) ret=7ea775df 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ea775df 000d:Call advapi32.RegOpenKeyExW(0000004c,00142338 L"open",00000000,00020019,0033f47c) ret=7ea77433 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea77433 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142338) ret=7ea77459 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77459 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea77467 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea77467 000d:Call advapi32.RegOpenKeyExW(00000048,7eaa23c0 L"command",00000000,00020019,0033f488) ret=7ea7749f 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7749f 000d:Call advapi32.RegCloseKey(00000048) ret=7ea774af 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774af 000d:Call advapi32.RegQueryValueExW(0000004c,00000000,00000000,00000000,00000000,0033f418) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,0000003c) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=00142338 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(0000004c,00000000,00000000,00000000,00142338,0033f418) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea774d3 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774d3 000d:Call KERNEL32.SearchPathW(00000000,00142338 L"C:\\windows\\system32\\hh.exe",00000000,00000104,0033f542,00000000) ret=7ea776c0 000d:Ret KERNEL32.SearchPathW() retval=00000000 ret=7ea776c0 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142338) ret=7ea776e6 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea776e6 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142320) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=80070002 ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00142320 ret=7ec55c75 000d:Call advapi32.RegGetValueW(80000000,00140a58 L".chm",00000000,00000002,00000000,00000000,0033f8cc) ret=7ec54717 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ec54717 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000012) ret=7ec54747 000d:Ret ntdll.RtlAllocateHeap() retval=00143328 ret=7ec54747 000d:Call advapi32.RegGetValueW(80000000,00140a58 L".chm",00000000,00000002,00000000,00143328,0033f8cc) ret=7ec54781 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ec54781 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00143328 L"chm.file",ffffffff,00000000,00000000,00000000,00000000) ret=7ec53b8b 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000009 ret=7ec53b8b 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000009) ret=7ec53bad 000d:Ret ntdll.RtlAllocateHeap() retval=00143348 ret=7ec53bad 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00143328 L"chm.file",ffffffff,00143348,00000009,00000000,00000000) ret=7ec53bf1 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000009 ret=7ec53bf1 000d:Call advapi32.RegCreateKeyW(80000001,7ec5ee60 L"Software\\Wine\\FileOpenAssociations",0033f8d0) ret=7ec547ef 000d:Ret advapi32.RegCreateKeyW() retval=00000000 ret=7ec547ef 000d:Call advapi32.RegGetValueA(00000044,00141260 ".chm",7ec5e310 "MimeType",00000002,00000000,00000000,0033f8cc) ret=7ec54887 000d:Ret advapi32.RegGetValueA() retval=00000000 ret=7ec54887 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000012) ret=7ec548b7 000d:Ret ntdll.RtlAllocateHeap() retval=00143360 ret=7ec548b7 000d:Call advapi32.RegGetValueA(00000044,00141260 ".chm",7ec5e310 "MimeType",00000002,00000000,00143360,0033f8cc) ret=7ec548f1 000d:Ret advapi32.RegGetValueA() retval=00000000 ret=7ec548f1 000d:Call KERNEL32.lstrcmpA(00143360 "application/x-chm",001412d0 "application/x-chm") ret=7ec594ae 000d:Ret KERNEL32.lstrcmpA() retval=00000000 ret=7ec594ae 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00143360) ret=7ec594e0 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec594e0 000d:Call advapi32.RegGetValueW(00000044,00140a58 L".chm",7ec5ee4a L"ProgID",00000002,00000000,00000000,0033f8cc) ret=7ec54717 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ec54717 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000012) ret=7ec54747 000d:Ret ntdll.RtlAllocateHeap() retval=00143360 ret=7ec54747 000d:Call advapi32.RegGetValueW(00000044,00140a58 L".chm",7ec5ee4a L"ProgID",00000002,00000000,00143360,0033f8cc) ret=7ec54781 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ec54781 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00143360) ret=7ec59557 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59557 000d:Call advapi32.RegGetValueA(00000044,00141260 ".chm",7ec5e319 "AppName",00000002,00000000,00000000,0033f8cc) ret=7ec54887 000d:Ret advapi32.RegGetValueA() retval=00000000 ret=7ec54887 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000013) ret=7ec548b7 000d:Ret ntdll.RtlAllocateHeap() retval=00143360 ret=7ec548b7 000d:Call advapi32.RegGetValueA(00000044,00141260 ".chm",7ec5e319 "AppName",00000002,00000000,00143360,0033f8cc) ret=7ec548f1 000d:Ret advapi32.RegGetValueA() retval=00000000 ret=7ec548f1 000d:Call KERNEL32.lstrcmpA(00143360 "A Wine application",00142320 "A Wine application") ret=7ec59580 000d:Ret KERNEL32.lstrcmpA() retval=00000000 ret=7ec59580 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00143360) ret=7ec595ae 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec595ae 000d:Call advapi32.RegGetValueW(00000044,00140a58 L".chm",7ec5ee3a L"DocName",00000002,00000000,00000000,0033f8cc) ret=7ec54717 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ec54717 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000030) ret=7ec54747 000d:Ret ntdll.RtlAllocateHeap() retval=00143360 ret=7ec54747 000d:Call advapi32.RegGetValueW(00000044,00140a58 L".chm",7ec5ee3a L"DocName",00000002,00000000,00143360,0033f8cc) ret=7ec54781 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ec54781 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00143360) ret=7ec59641 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59641 000d:Call advapi32.RegCloseKey(00000044) ret=7ec5964f 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ec5964f 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141260) ret=7ec598ff 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec598ff 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001422d8) ret=7ec59922 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59922 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141278) ret=7ec59945 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59945 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001412b0) ret=7ec59968 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59968 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec5998b 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec5998b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec599ae 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec599ae 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec599d1 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec599d1 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001412d0) ret=7ec599f5 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec599f5 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59a18 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a18 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142320) ret=7ec59a3b 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a3b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00143328) ret=7ec59a5e 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a5e 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00143348) ret=7ec59a81 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a81 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,00000003,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00140a58 L".cpl",ffffffff,00000000,00000000,00000000,00000000) ret=7ec53b8b 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000005 ret=7ec53b8b 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000005) ret=7ec53bad 000d:Ret ntdll.RtlAllocateHeap() retval=00141260 ret=7ec53bad 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00140a58 L".cpl",ffffffff,00141260,00000005,00000000,00000000) ret=7ec53bf1 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000005 ret=7ec53bf1 000d:Call shlwapi.AssocQueryStringW(00000000,00000003,00140a58,00000000,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00141278 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".cpl",00000000,00020019,00141280) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,00141284) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f4c8) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=00141290 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00141290,0033f4c8) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegGetValueW(80000000,00141290 L"cplfile",00000000,00000002,00000000,00000000,0033f79c) ret=7ea77e3e 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77e3e 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000026) ret=7ea77fc6 000d:Ret ntdll.RtlAllocateHeap() retval=001412a8 ret=7ea77fc6 000d:Call advapi32.RegGetValueW(80000000,00141290 L"cplfile",00000000,00000002,00000000,001412a8,0033f79c) ret=7ea7800c 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea7800c 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001412a8) ret=7ea78066 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea78066 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141290) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141278) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000001 ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000026) ret=7ec54661 000d:Ret ntdll.RtlAllocateHeap() retval=00141278 ret=7ec54661 000d:Call shlwapi.AssocQueryStringW(00000000,00000003,00140a58,00000000,00141278 L"\1be0\0091\0120\0011D",0033f8c8) ret=7ec54693 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=001412a8 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".cpl",00000000,00020019,001412b0) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,001412b4) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f4c8) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=001412c0 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,001412c0,0033f4c8) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegGetValueW(80000000,001412c0 L"cplfile",00000000,00000002,00000000,00000000,0033f79c) ret=7ea77e3e 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77e3e 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000026) ret=7ea77fc6 000d:Ret ntdll.RtlAllocateHeap() retval=001412d8 ret=7ea77fc6 000d:Call advapi32.RegGetValueW(80000000,001412c0 L"cplfile",00000000,00000002,00000000,001412d8,0033f79c) ret=7ea7800c 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea7800c 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001412d8) ret=7ea78066 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea78066 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001412c0) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001412a8) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000000 ret=7ec54693 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00141278 L"Control Panel Item",ffffffff,00000000,00000000,00000000,00000000) ret=7ec53b8b 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000013 ret=7ec53b8b 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000013) ret=7ec53bad 000d:Ret ntdll.RtlAllocateHeap() retval=001412a8 ret=7ec53bad 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00141278 L"Control Panel Item",ffffffff,001412a8,00000013,00000000,00000000) ret=7ec53bf1 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000013 ret=7ec53bf1 000d:Call shlwapi.AssocQueryStringW(00000000,0000000f,00140a58,00000000,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=001412c8 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".cpl",00000000,00020019,001412d0) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,001412d4) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f4c8) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=001412e0 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,001412e0,0033f4c8) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegOpenKeyExW(80000000,001412e0 L"cplfile",00000000,00020019,0033f79c) ret=7ea77d33 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea77d33 000d:Call advapi32.RegGetValueW(00000048,7eaa22b6 L"DefaultIcon",00000000,00000002,00000000,00000000,0033f7a0) ret=7ea780bd 000d:Ret advapi32.RegGetValueW() retval=00000002 ret=7ea780bd 000d:Call advapi32.RegCloseKey(00000048) ret=7ea780e4 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea780e4 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001412e0) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001412c8) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=80070002 ret=7ec54638 000d:Call shlwapi.AssocQueryStringW(00000000,0000000e,00140a58,00000000,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=001412c8 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".cpl",00000000,00020019,001412d0) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,001412d4) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegGetValueW(00000044,00000000,7eaa22ce L"Content Type",00000002,00000000,00000000,0033f7a4) ret=7ea77c08 000d:Ret advapi32.RegGetValueW() retval=00000002 ret=7ea77c08 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001412c8) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=80070002 ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=001412c8 ret=7ec55c75 000d:Call shlwapi.AssocQueryStringW(00000000,00000001,00140a58,7ec5ed44,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=001422d0 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".cpl",00000000,00020019,001422d8) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,001422dc) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f458) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=001422e8 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,001422e8,0033f458) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegOpenKeyExW(80000000,001422e8 L"cplfile",00000000,00020019,0033f4c4) ret=7ea7737b 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7737b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001422e8) ret=7ea773a1 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea773a1 000d:Call advapi32.RegOpenKeyExW(00000048,7eaa23b4 L"shell",00000000,00020019,0033f4c0) ret=7ea773ed 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea773ed 000d:Call advapi32.RegCloseKey(00000048) ret=7ea773fd 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea773fd 000d:Call advapi32.RegOpenKeyExW(0000004c,7ec5ed44 L"open",00000000,00020019,0033f4bc) ret=7ea77433 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea77433 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ea77459 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77459 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea77467 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea77467 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001422d0) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=80070002 ret=7ec54638 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141260) ret=7ec598ff 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec598ff 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59922 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59922 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141278) ret=7ec59945 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59945 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001412a8) ret=7ec59968 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59968 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec5998b 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec5998b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec599ae 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec599ae 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec599d1 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec599d1 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001412c8) ret=7ec599f5 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec599f5 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59a18 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a18 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59a3b 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a3b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59a5e 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a5e 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59a81 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a81 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,00000004,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00140a58 L".css",ffffffff,00000000,00000000,00000000,00000000) ret=7ec53b8b 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000005 ret=7ec53b8b 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000005) ret=7ec53bad 000d:Ret ntdll.RtlAllocateHeap() retval=00141260 ret=7ec53bad 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00140a58 L".css",ffffffff,00141260,00000005,00000000,00000000) ret=7ec53bf1 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000005 ret=7ec53bf1 000d:Call shlwapi.AssocQueryStringW(00000000,00000003,00140a58,00000000,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00141278 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".css",00000000,00020019,00141280) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,00141284) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f4c8) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000002 ret=7ea7722c 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141278) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=80070002 ret=7ec54638 000d:Call shlwapi.AssocQueryStringW(00000000,0000000f,00140a58,00000000,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00141278 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".css",00000000,00020019,00141280) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,00141284) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f4c8) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000002 ret=7ea7722c 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141278) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=80070002 ret=7ec54638 000d:Call shlwapi.AssocQueryStringW(00000000,0000000e,00140a58,00000000,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00141278 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".css",00000000,00020019,00141280) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,00141284) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegGetValueW(00000044,00000000,7eaa22ce L"Content Type",00000002,00000000,00000000,0033f7a4) ret=7ea77c08 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77c08 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000012) ret=7ea77f05 000d:Ret ntdll.RtlAllocateHeap() retval=00141290 ret=7ea77f05 000d:Call advapi32.RegGetValueW(00000044,00000000,7eaa22ce L"Content Type",00000002,00000000,00141290,0033f7a4) ret=7ea77f50 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77f50 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141290) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141278) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000001 ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000012) ret=7ec54661 000d:Ret ntdll.RtlAllocateHeap() retval=00141278 ret=7ec54661 000d:Call shlwapi.AssocQueryStringW(00000000,0000000e,00140a58,00000000,00141278 L"\1be0\0091\0120\0011D",0033f8c8) ret=7ec54693 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00141298 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".css",00000000,00020019,001412a0) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,001412a4) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegGetValueW(00000044,00000000,7eaa22ce L"Content Type",00000002,00000000,00000000,0033f7a4) ret=7ea77c08 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77c08 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000012) ret=7ea77f05 000d:Ret ntdll.RtlAllocateHeap() retval=001412b0 ret=7ea77f05 000d:Call advapi32.RegGetValueW(00000044,00000000,7eaa22ce L"Content Type",00000002,00000000,001412b0,0033f7a4) ret=7ea77f50 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77f50 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001412b0) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141298) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000000 ret=7ec54693 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00141298 ret=7ec55c75 000d:Call shlwapi.AssocQueryStringW(00000000,00000001,00140a58,7ec5ed44,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=001422a0 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".css",00000000,00020019,001422a8) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,001422ac) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f458) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000002 ret=7ea7722c 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001422a0) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=80070002 ret=7ec54638 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141260) ret=7ec598ff 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec598ff 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59922 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59922 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59945 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59945 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59968 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59968 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec5998b 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec5998b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec599ae 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec599ae 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141278) ret=7ec599d1 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec599d1 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141298) ret=7ec599f5 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec599f5 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59a18 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a18 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59a3b 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a3b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59a5e 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a5e 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59a81 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a81 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,00000005,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00140a58 L".dib",ffffffff,00000000,00000000,00000000,00000000) ret=7ec53b8b 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000005 ret=7ec53b8b 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000005) ret=7ec53bad 000d:Ret ntdll.RtlAllocateHeap() retval=00141260 ret=7ec53bad 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00140a58 L".dib",ffffffff,00141260,00000005,00000000,00000000) ret=7ec53bf1 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000005 ret=7ec53bf1 000d:Call shlwapi.AssocQueryStringW(00000000,00000003,00140a58,00000000,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00141278 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".dib",00000000,00020019,00141280) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,00141284) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f4c8) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000002 ret=7ea7722c 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141278) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=80070002 ret=7ec54638 000d:Call shlwapi.AssocQueryStringW(00000000,0000000f,00140a58,00000000,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00141278 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".dib",00000000,00020019,00141280) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,00141284) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f4c8) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000002 ret=7ea7722c 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141278) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=80070002 ret=7ec54638 000d:Call shlwapi.AssocQueryStringW(00000000,0000000e,00140a58,00000000,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00141278 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".dib",00000000,00020019,00141280) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,00141284) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegGetValueW(00000044,00000000,7eaa22ce L"Content Type",00000002,00000000,00000000,0033f7a4) ret=7ea77c08 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77c08 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000014) ret=7ea77f05 000d:Ret ntdll.RtlAllocateHeap() retval=00141290 ret=7ea77f05 000d:Call advapi32.RegGetValueW(00000044,00000000,7eaa22ce L"Content Type",00000002,00000000,00141290,0033f7a4) ret=7ea77f50 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77f50 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141290) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141278) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000001 ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000014) ret=7ec54661 000d:Ret ntdll.RtlAllocateHeap() retval=00141278 ret=7ec54661 000d:Call shlwapi.AssocQueryStringW(00000000,0000000e,00140a58,00000000,00141278 L"\1be0\0091\0120\0011D",0033f8c8) ret=7ec54693 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00141298 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".dib",00000000,00020019,001412a0) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,001412a4) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegGetValueW(00000044,00000000,7eaa22ce L"Content Type",00000002,00000000,00000000,0033f7a4) ret=7ea77c08 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77c08 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000014) ret=7ea77f05 000d:Ret ntdll.RtlAllocateHeap() retval=001412b0 ret=7ea77f05 000d:Call advapi32.RegGetValueW(00000044,00000000,7eaa22ce L"Content Type",00000002,00000000,001412b0,0033f7a4) ret=7ea77f50 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77f50 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001412b0) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141298) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000000 ret=7ec54693 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00141298 ret=7ec55c75 000d:Call shlwapi.AssocQueryStringW(00000000,00000001,00140a58,7ec5ed44,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=001422a0 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".dib",00000000,00020019,001422a8) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,001422ac) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f458) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000002 ret=7ea7722c 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001422a0) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=80070002 ret=7ec54638 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141260) ret=7ec598ff 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec598ff 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59922 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59922 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59945 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59945 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59968 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59968 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec5998b 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec5998b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec599ae 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec599ae 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141278) ret=7ec599d1 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec599d1 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141298) ret=7ec599f5 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec599f5 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59a18 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a18 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59a3b 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a3b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59a5e 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a5e 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59a81 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a81 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,00000006,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00140a58 L".dll",ffffffff,00000000,00000000,00000000,00000000) ret=7ec53b8b 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000005 ret=7ec53b8b 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000005) ret=7ec53bad 000d:Ret ntdll.RtlAllocateHeap() retval=00141260 ret=7ec53bad 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00140a58 L".dll",ffffffff,00141260,00000005,00000000,00000000) ret=7ec53bf1 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000005 ret=7ec53bf1 000d:Call shlwapi.AssocQueryStringW(00000000,00000003,00140a58,00000000,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00141278 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".dll",00000000,00020019,00141280) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,00141284) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f4c8) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000002 ret=7ea7722c 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141278) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=80070002 ret=7ec54638 000d:Call shlwapi.AssocQueryStringW(00000000,0000000f,00140a58,00000000,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00141278 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".dll",00000000,00020019,00141280) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,00141284) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f4c8) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000002 ret=7ea7722c 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141278) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=80070002 ret=7ec54638 000d:Call shlwapi.AssocQueryStringW(00000000,0000000e,00140a58,00000000,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00141278 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".dll",00000000,00020019,00141280) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,00141284) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegGetValueW(00000044,00000000,7eaa22ce L"Content Type",00000002,00000000,00000000,0033f7a4) ret=7ea77c08 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77c08 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000032) ret=7ea77f05 000d:Ret ntdll.RtlAllocateHeap() retval=00141290 ret=7ea77f05 000d:Call advapi32.RegGetValueW(00000044,00000000,7eaa22ce L"Content Type",00000002,00000000,00141290,0033f7a4) ret=7ea77f50 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77f50 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141290) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141278) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000001 ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000032) ret=7ec54661 000d:Ret ntdll.RtlAllocateHeap() retval=00141278 ret=7ec54661 000d:Call shlwapi.AssocQueryStringW(00000000,0000000e,00140a58,00000000,00141278 L"\1be0\0091\0120\0011D",0033f8c8) ret=7ec54693 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=001412b8 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".dll",00000000,00020019,001412c0) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,001412c4) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegGetValueW(00000044,00000000,7eaa22ce L"Content Type",00000002,00000000,00000000,0033f7a4) ret=7ea77c08 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77c08 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000032) ret=7ea77f05 000d:Ret ntdll.RtlAllocateHeap() retval=001412d0 ret=7ea77f05 000d:Call advapi32.RegGetValueW(00000044,00000000,7eaa22ce L"Content Type",00000002,00000000,001412d0,0033f7a4) ret=7ea77f50 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77f50 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001412d0) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001412b8) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000000 ret=7ec54693 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=001412b8 ret=7ec55c75 000d:Call shlwapi.AssocQueryStringW(00000000,00000001,00140a58,7ec5ed44,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=001422c0 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".dll",00000000,00020019,001422c8) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,001422cc) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f458) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000002 ret=7ea7722c 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001422c0) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=80070002 ret=7ec54638 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141260) ret=7ec598ff 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec598ff 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59922 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59922 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59945 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59945 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59968 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59968 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec5998b 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec5998b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec599ae 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec599ae 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141278) ret=7ec599d1 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec599d1 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001412b8) ret=7ec599f5 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec599f5 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59a18 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a18 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59a3b 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a3b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59a5e 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a5e 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59a81 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a81 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,00000007,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,00000008,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00140a58 L".gif",ffffffff,00000000,00000000,00000000,00000000) ret=7ec53b8b 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000005 ret=7ec53b8b 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000005) ret=7ec53bad 000d:Ret ntdll.RtlAllocateHeap() retval=00141260 ret=7ec53bad 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00140a58 L".gif",ffffffff,00141260,00000005,00000000,00000000) ret=7ec53bf1 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000005 ret=7ec53bf1 000d:Call shlwapi.AssocQueryStringW(00000000,00000003,00140a58,00000000,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00141278 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".gif",00000000,00020019,00141280) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,00141284) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f4c8) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=00141290 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00141290,0033f4c8) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegGetValueW(80000000,00141290 L"giffile",00000000,00000002,00000000,00000000,0033f79c) ret=7ea77e3e 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77e3e 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000014) ret=7ea77fc6 000d:Ret ntdll.RtlAllocateHeap() retval=001412a8 ret=7ea77fc6 000d:Call advapi32.RegGetValueW(80000000,00141290 L"giffile",00000000,00000002,00000000,001412a8,0033f79c) ret=7ea7800c 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea7800c 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001412a8) ret=7ea78066 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea78066 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141290) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141278) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000001 ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000014) ret=7ec54661 000d:Ret ntdll.RtlAllocateHeap() retval=00141278 ret=7ec54661 000d:Call shlwapi.AssocQueryStringW(00000000,00000003,00140a58,00000000,00141278 L"\1be0\0091\0120\0011D",0033f8c8) ret=7ec54693 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00141298 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".gif",00000000,00020019,001412a0) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,001412a4) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f4c8) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=001412b0 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,001412b0,0033f4c8) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegGetValueW(80000000,001412b0 L"giffile",00000000,00000002,00000000,00000000,0033f79c) ret=7ea77e3e 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77e3e 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000014) ret=7ea77fc6 000d:Ret ntdll.RtlAllocateHeap() retval=001412c8 ret=7ea77fc6 000d:Call advapi32.RegGetValueW(80000000,001412b0 L"giffile",00000000,00000002,00000000,001412c8,0033f79c) ret=7ea7800c 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea7800c 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001412c8) ret=7ea78066 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea78066 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001412b0) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141298) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000000 ret=7ec54693 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00141278 L"GIF Image",ffffffff,00000000,00000000,00000000,00000000) ret=7ec53b8b 000d:Ret KERNEL32.WideCharToMultiByte() retval=0000000a ret=7ec53b8b 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,0000000a) ret=7ec53bad 000d:Ret ntdll.RtlAllocateHeap() retval=00141298 ret=7ec53bad 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00141278 L"GIF Image",ffffffff,00141298,0000000a,00000000,00000000) ret=7ec53bf1 000d:Ret KERNEL32.WideCharToMultiByte() retval=0000000a ret=7ec53bf1 000d:Call shlwapi.AssocQueryStringW(00000000,0000000f,00140a58,00000000,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=001412b0 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".gif",00000000,00020019,001412b8) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,001412bc) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f4c8) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=001412c8 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,001412c8,0033f4c8) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegOpenKeyExW(80000000,001412c8 L"giffile",00000000,00020019,0033f79c) ret=7ea77d33 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea77d33 000d:Call advapi32.RegGetValueW(00000048,7eaa22b6 L"DefaultIcon",00000000,00000002,00000000,00000000,0033f7a0) ret=7ea780bd 000d:Ret advapi32.RegGetValueW() retval=00000002 ret=7ea780bd 000d:Call advapi32.RegCloseKey(00000048) ret=7ea780e4 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea780e4 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001412c8) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001412b0) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=80070002 ret=7ec54638 000d:Call shlwapi.AssocQueryStringW(00000000,0000000e,00140a58,00000000,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=001412b0 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".gif",00000000,00020019,001412b8) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,001412bc) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegGetValueW(00000044,00000000,7eaa22ce L"Content Type",00000002,00000000,00000000,0033f7a4) ret=7ea77c08 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77c08 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000014) ret=7ea77f05 000d:Ret ntdll.RtlAllocateHeap() retval=001412c8 ret=7ea77f05 000d:Call advapi32.RegGetValueW(00000044,00000000,7eaa22ce L"Content Type",00000002,00000000,001412c8,0033f7a4) ret=7ea77f50 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77f50 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001412c8) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001412b0) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000001 ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000014) ret=7ec54661 000d:Ret ntdll.RtlAllocateHeap() retval=001412b0 ret=7ec54661 000d:Call shlwapi.AssocQueryStringW(00000000,0000000e,00140a58,00000000,001412b0 L"\1be0\0091\0120\0011D",0033f8c8) ret=7ec54693 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=001412d0 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".gif",00000000,00020019,001412d8) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,001412dc) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegGetValueW(00000044,00000000,7eaa22ce L"Content Type",00000002,00000000,00000000,0033f7a4) ret=7ea77c08 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77c08 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000014) ret=7ea77f05 000d:Ret ntdll.RtlAllocateHeap() retval=001412e8 ret=7ea77f05 000d:Call advapi32.RegGetValueW(00000044,00000000,7eaa22ce L"Content Type",00000002,00000000,001412e8,0033f7a4) ret=7ea77f50 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77f50 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001412e8) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001412d0) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000000 ret=7ec54693 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=001412d0 ret=7ec55c75 000d:Call shlwapi.AssocQueryStringW(00000000,00000001,00140a58,7ec5ed44,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=001422d8 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".gif",00000000,00020019,001422e0) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,001422e4) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f458) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=001422f0 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,001422f0,0033f458) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegOpenKeyExW(80000000,001422f0 L"giffile",00000000,00020019,0033f4c4) ret=7ea7737b 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7737b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001422f0) ret=7ea773a1 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea773a1 000d:Call advapi32.RegOpenKeyExW(00000048,7eaa23b4 L"shell",00000000,00020019,0033f4c0) ret=7ea773ed 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea773ed 000d:Call advapi32.RegCloseKey(00000048) ret=7ea773fd 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea773fd 000d:Call advapi32.RegOpenKeyExW(0000004c,7ec5ed44 L"open",00000000,00020019,0033f4bc) ret=7ea77433 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea77433 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ea77459 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77459 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea77467 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea77467 000d:Call advapi32.RegOpenKeyExW(00000048,7eaa23c0 L"command",00000000,00020019,0033f4c8) ret=7ea7749f 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea7749f 000d:Call advapi32.RegCloseKey(00000048) ret=7ea774af 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774af 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001422d8) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=80070002 ret=7ec54638 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141260) ret=7ec598ff 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec598ff 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59922 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59922 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141278) ret=7ec59945 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59945 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141298) ret=7ec59968 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59968 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec5998b 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec5998b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec599ae 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec599ae 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001412b0) ret=7ec599d1 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec599d1 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001412d0) ret=7ec599f5 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec599f5 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59a18 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a18 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59a3b 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a3b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59a5e 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a5e 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59a81 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a81 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,00000009,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00140a58 L".hlp",ffffffff,00000000,00000000,00000000,00000000) ret=7ec53b8b 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000005 ret=7ec53b8b 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000005) ret=7ec53bad 000d:Ret ntdll.RtlAllocateHeap() retval=00141260 ret=7ec53bad 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00140a58 L".hlp",ffffffff,00141260,00000005,00000000,00000000) ret=7ec53bf1 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000005 ret=7ec53bf1 000d:Call shlwapi.AssocQueryStringW(00000000,00000003,00140a58,00000000,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00141278 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".hlp",00000000,00020019,00141280) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,00141284) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f4c8) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=00141290 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00141290,0033f4c8) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegGetValueW(80000000,00141290 L"hlpfile",00000000,00000002,00000000,00000000,0033f79c) ret=7ea77e3e 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77e3e 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000014) ret=7ea77fc6 000d:Ret ntdll.RtlAllocateHeap() retval=001412a8 ret=7ea77fc6 000d:Call advapi32.RegGetValueW(80000000,00141290 L"hlpfile",00000000,00000002,00000000,001412a8,0033f79c) ret=7ea7800c 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea7800c 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001412a8) ret=7ea78066 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea78066 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141290) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141278) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000001 ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000014) ret=7ec54661 000d:Ret ntdll.RtlAllocateHeap() retval=00141278 ret=7ec54661 000d:Call shlwapi.AssocQueryStringW(00000000,00000003,00140a58,00000000,00141278 L"\1be0\0091\0120\0011D",0033f8c8) ret=7ec54693 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00141298 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".hlp",00000000,00020019,001412a0) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,001412a4) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f4c8) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=001412b0 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,001412b0,0033f4c8) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegGetValueW(80000000,001412b0 L"hlpfile",00000000,00000002,00000000,00000000,0033f79c) ret=7ea77e3e 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77e3e 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000014) ret=7ea77fc6 000d:Ret ntdll.RtlAllocateHeap() retval=001412c8 ret=7ea77fc6 000d:Call advapi32.RegGetValueW(80000000,001412b0 L"hlpfile",00000000,00000002,00000000,001412c8,0033f79c) ret=7ea7800c 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea7800c 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001412c8) ret=7ea78066 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea78066 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001412b0) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141298) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000000 ret=7ec54693 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00141278 L"Help File",ffffffff,00000000,00000000,00000000,00000000) ret=7ec53b8b 000d:Ret KERNEL32.WideCharToMultiByte() retval=0000000a ret=7ec53b8b 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,0000000a) ret=7ec53bad 000d:Ret ntdll.RtlAllocateHeap() retval=00141298 ret=7ec53bad 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00141278 L"Help File",ffffffff,00141298,0000000a,00000000,00000000) ret=7ec53bf1 000d:Ret KERNEL32.WideCharToMultiByte() retval=0000000a ret=7ec53bf1 000d:Call shlwapi.AssocQueryStringW(00000000,0000000f,00140a58,00000000,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=001412b0 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".hlp",00000000,00020019,001412b8) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,001412bc) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f4c8) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=001412c8 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,001412c8,0033f4c8) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegOpenKeyExW(80000000,001412c8 L"hlpfile",00000000,00020019,0033f79c) ret=7ea77d33 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea77d33 000d:Call advapi32.RegGetValueW(00000048,7eaa22b6 L"DefaultIcon",00000000,00000002,00000000,00000000,0033f7a0) ret=7ea780bd 000d:Ret advapi32.RegGetValueW() retval=00000002 ret=7ea780bd 000d:Call advapi32.RegCloseKey(00000048) ret=7ea780e4 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea780e4 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001412c8) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001412b0) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=80070002 ret=7ec54638 000d:Call shlwapi.AssocQueryStringW(00000000,0000000e,00140a58,00000000,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=001412b0 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".hlp",00000000,00020019,001412b8) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,001412bc) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegGetValueW(00000044,00000000,7eaa22ce L"Content Type",00000002,00000000,00000000,0033f7a4) ret=7ea77c08 000d:Ret advapi32.RegGetValueW() retval=00000002 ret=7ea77c08 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001412b0) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=80070002 ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=001412b0 ret=7ec55c75 000d:Call shlwapi.AssocQueryStringW(00000000,00000001,00140a58,7ec5ed44,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=001422b8 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".hlp",00000000,00020019,001422c0) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,001422c4) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f458) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=001422d0 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,001422d0,0033f458) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegOpenKeyExW(80000000,001422d0 L"hlpfile",00000000,00020019,0033f4c4) ret=7ea7737b 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7737b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001422d0) ret=7ea773a1 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea773a1 000d:Call advapi32.RegOpenKeyExW(00000048,7eaa23b4 L"shell",00000000,00020019,0033f4c0) ret=7ea773ed 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea773ed 000d:Call advapi32.RegCloseKey(00000048) ret=7ea773fd 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea773fd 000d:Call advapi32.RegOpenKeyExW(0000004c,7ec5ed44 L"open",00000000,00020019,0033f4bc) ret=7ea77433 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea77433 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ea77459 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77459 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea77467 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea77467 000d:Call advapi32.RegOpenKeyExW(00000048,7eaa23c0 L"command",00000000,00020019,0033f4c8) ret=7ea7749f 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7749f 000d:Call advapi32.RegCloseKey(00000048) ret=7ea774af 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774af 000d:Call advapi32.RegQueryValueExW(0000004c,00000000,00000000,00000000,00000000,0033f458) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000048) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=001422d0 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(0000004c,00000000,00000000,00000000,001422d0,0033f458) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea774d3 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774d3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001422d0) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001422b8) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000001 ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000048) ret=7ec54661 000d:Ret ntdll.RtlAllocateHeap() retval=001422b8 ret=7ec54661 000d:Call shlwapi.AssocQueryStringW(00000000,00000001,00140a58,7ec5ed44,001422b8 L"\1be0\0091\0120\0011D",0033f8c8) ret=7ec54693 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00142308 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".hlp",00000000,00020019,00142310) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,00142314) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f458) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=00142320 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00142320,0033f458) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegOpenKeyExW(80000000,00142320 L"hlpfile",00000000,00020019,0033f4c4) ret=7ea7737b 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7737b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142320) ret=7ea773a1 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea773a1 000d:Call advapi32.RegOpenKeyExW(00000048,7eaa23b4 L"shell",00000000,00020019,0033f4c0) ret=7ea773ed 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea773ed 000d:Call advapi32.RegCloseKey(00000048) ret=7ea773fd 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea773fd 000d:Call advapi32.RegOpenKeyExW(0000004c,7ec5ed44 L"open",00000000,00020019,0033f4bc) ret=7ea77433 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea77433 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ea77459 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77459 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea77467 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea77467 000d:Call advapi32.RegOpenKeyExW(00000048,7eaa23c0 L"command",00000000,00020019,0033f4c8) ret=7ea7749f 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7749f 000d:Call advapi32.RegCloseKey(00000048) ret=7ea774af 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774af 000d:Call advapi32.RegQueryValueExW(0000004c,00000000,00000000,00000000,00000000,0033f458) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000048) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=00142320 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(0000004c,00000000,00000000,00000000,00142320,0033f458) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea774d3 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774d3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142320) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142308) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000000 ret=7ec54693 000d:Call shlwapi.AssocQueryStringW(00000000,00000004,00140a58,00000000,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00142308 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".hlp",00000000,00020019,00142310) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,00142314) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f418) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=00142320 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00142320,0033f418) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegOpenKeyExW(80000000,00142320 L"hlpfile",00000000,00020019,0033f484) ret=7ea7737b 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7737b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142320) ret=7ea773a1 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea773a1 000d:Call advapi32.RegOpenKeyExW(00000048,7eaa23b4 L"shell",00000000,00020019,0033f480) ret=7ea773ed 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea773ed 000d:Call advapi32.RegCloseKey(00000048) ret=7ea773fd 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea773fd 000d:Call advapi32.RegQueryValueExW(0000004c,00000000,00000000,00000000,00000000,0033f418) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000002 ret=7ea7722c 000d:Call advapi32.RegQueryInfoKeyW(0000004c,00000000,00000000,00000000,00000000,0033f470,00000000,00000000,00000000,00000000,00000000,00000000) ret=7ea77568 000d:Ret advapi32.RegQueryInfoKeyW() retval=00000000 ret=7ea77568 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,0000000a) ret=7ea7759a 000d:Ret ntdll.RtlAllocateHeap() retval=00142320 ret=7ea7759a 000d:Call advapi32.RegEnumKeyExW(0000004c,00000000,00142320,0033f470,00000000,00000000,00000000,00000000) ret=7ea775df 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ea775df 000d:Call advapi32.RegOpenKeyExW(0000004c,00142320 L"open",00000000,00020019,0033f47c) ret=7ea77433 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea77433 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142320) ret=7ea77459 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77459 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea77467 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea77467 000d:Call advapi32.RegOpenKeyExW(00000048,7eaa23c0 L"command",00000000,00020019,0033f488) ret=7ea7749f 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7749f 000d:Call advapi32.RegCloseKey(00000048) ret=7ea774af 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774af 000d:Call advapi32.RegQueryValueExW(0000004c,00000000,00000000,00000000,00000000,0033f418) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000048) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=00142320 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(0000004c,00000000,00000000,00000000,00142320,0033f418) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea774d3 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774d3 000d:Call KERNEL32.SearchPathW(00000000,00142320 L"C:\\windows\\system32\\winhlp32.exe",00000000,00000104,0033f542,00000000) ret=7ea776c0 000d:Ret KERNEL32.SearchPathW() retval=00000020 ret=7ea776c0 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142320) ret=7ea776e6 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea776e6 000d:Call KERNEL32.LoadLibraryA(7eab0287 "version.dll") ret=7ea9f310 000d:Call PE DLL (proc=0x7e2284d0,module=0x7e220000 L"lz32.dll",reason=PROCESS_ATTACH,res=(nil)) 000d:Call KERNEL32.DisableThreadLibraryCalls(7e220000) ret=7e2285c0 000d:Ret KERNEL32.DisableThreadLibraryCalls() retval=00000001 ret=7e2285c0 000d:Ret PE DLL (proc=0x7e2284d0,module=0x7e220000 L"lz32.dll",reason=PROCESS_ATTACH,res=(nil)) retval=1 000d:Call PE DLL (proc=0x7e241370,module=0x7e230000 L"version.dll",reason=PROCESS_ATTACH,res=(nil)) 000d:Call KERNEL32.__wine_dll_register_16(7e242c5c,7e24162c "ver.dll") ret=7e23c2d7 000d:Ret KERNEL32.__wine_dll_register_16() retval=00000006 ret=7e23c2d7 000d:Call KERNEL32.DisableThreadLibraryCalls(7e230000) ret=7e241460 000d:Ret KERNEL32.DisableThreadLibraryCalls() retval=00000001 ret=7e241460 000d:Ret PE DLL (proc=0x7e241370,module=0x7e230000 L"version.dll",reason=PROCESS_ATTACH,res=(nil)) retval=1 000d:Ret KERNEL32.LoadLibraryA() retval=7e230000 ret=7ea9f310 000d:Call KERNEL32.GetProcAddress(7e230000,7eab0473 "GetFileVersionInfoSizeW") ret=7ea9f2e5 000d:Ret KERNEL32.GetProcAddress() retval=7e23bdc4 ret=7ea9f2e5 000d:Call version.GetFileVersionInfoSizeW(0033f542 L"C:\\windows\\system32\\winhlp32.exe",0033f79c) ret=7ea77c71 000d:Call KERNEL32.GetModuleHandleExW(00000000,0033f542,0033f408) ret=7e23d460 000d:Ret KERNEL32.GetModuleHandleExW() retval=00000000 ret=7e23d460 000d:Call KERNEL32.LoadLibraryExW(0033f542 L"C:\\windows\\system32\\winhlp32.exe",00000000,00000002) ret=7e23d53c 000d:Ret KERNEL32.LoadLibraryExW() retval=00450001 ret=7e23d53c 000d:Call KERNEL32.FindResourceW(00450001,00000001,00000010) ret=7e23d48a 000d:Ret KERNEL32.FindResourceW() retval=00000000 ret=7e23d48a 000d:Call KERNEL32.FreeLibrary(00450001) ret=7e23d4af 000d:Ret KERNEL32.FreeLibrary() retval=00000001 ret=7e23d4af 000d:Ret version.GetFileVersionInfoSizeW() retval=00000000 ret=7ea77c71 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142308) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000001 ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000012) ret=7ec54661 000d:Ret ntdll.RtlAllocateHeap() retval=001424e8 ret=7ec54661 000d:Call shlwapi.AssocQueryStringW(00000000,00000004,00140a58,00000000,001424e8 L"\00c0\0011\00b0\0011indows\\s\0019",0033f8c8) ret=7ec54693 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00142508 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".hlp",00000000,00020019,00142510) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,00142514) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f418) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=00142308 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00142308,0033f418) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegOpenKeyExW(80000000,00142308 L"hlpfile",00000000,00020019,0033f484) ret=7ea7737b 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7737b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142308) ret=7ea773a1 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea773a1 000d:Call advapi32.RegOpenKeyExW(00000048,7eaa23b4 L"shell",00000000,00020019,0033f480) ret=7ea773ed 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea773ed 000d:Call advapi32.RegCloseKey(00000048) ret=7ea773fd 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea773fd 000d:Call advapi32.RegQueryValueExW(0000004c,00000000,00000000,00000000,00000000,0033f418) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000002 ret=7ea7722c 000d:Call advapi32.RegQueryInfoKeyW(0000004c,00000000,00000000,00000000,00000000,0033f470,00000000,00000000,00000000,00000000,00000000,00000000) ret=7ea77568 000d:Ret advapi32.RegQueryInfoKeyW() retval=00000000 ret=7ea77568 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,0000000a) ret=7ea7759a 000d:Ret ntdll.RtlAllocateHeap() retval=00142308 ret=7ea7759a 000d:Call advapi32.RegEnumKeyExW(0000004c,00000000,00142308,0033f470,00000000,00000000,00000000,00000000) ret=7ea775df 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ea775df 000d:Call advapi32.RegOpenKeyExW(0000004c,00142308 L"open",00000000,00020019,0033f47c) ret=7ea77433 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea77433 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142308) ret=7ea77459 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77459 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea77467 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea77467 000d:Call advapi32.RegOpenKeyExW(00000048,7eaa23c0 L"command",00000000,00020019,0033f488) ret=7ea7749f 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7749f 000d:Call advapi32.RegCloseKey(00000048) ret=7ea774af 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774af 000d:Call advapi32.RegQueryValueExW(0000004c,00000000,00000000,00000000,00000000,0033f418) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000048) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=00142308 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(0000004c,00000000,00000000,00000000,00142308,0033f418) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea774d3 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774d3 000d:Call KERNEL32.SearchPathW(00000000,00142308 L"C:\\windows\\system32\\winhlp32.exe",00000000,00000104,0033f542,00000000) ret=7ea776c0 000d:Ret KERNEL32.SearchPathW() retval=00000020 ret=7ea776c0 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142308) ret=7ea776e6 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea776e6 000d:Call version.GetFileVersionInfoSizeW(0033f542 L"C:\\windows\\system32\\winhlp32.exe",0033f79c) ret=7ea77c71 000d:Call KERNEL32.GetModuleHandleExW(00000000,0033f542,0033f408) ret=7e23d460 000d:Ret KERNEL32.GetModuleHandleExW() retval=00000000 ret=7e23d460 000d:Call KERNEL32.LoadLibraryExW(0033f542 L"C:\\windows\\system32\\winhlp32.exe",00000000,00000002) ret=7e23d53c 000d:Ret KERNEL32.LoadLibraryExW() retval=00450001 ret=7e23d53c 000d:Call KERNEL32.FindResourceW(00450001,00000001,00000010) ret=7e23d48a 000d:Ret KERNEL32.FindResourceW() retval=00000000 ret=7e23d48a 000d:Call KERNEL32.FreeLibrary(00450001) ret=7e23d4af 000d:Ret KERNEL32.FreeLibrary() retval=00000001 ret=7e23d4af 000d:Ret version.GetFileVersionInfoSizeW() retval=00000000 ret=7ea77c71 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142508) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000000 ret=7ec54693 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,001424e8 L"winhlp32",ffffffff,00000000,00000000,00000000,00000000) ret=7ec53b8b 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000009 ret=7ec53b8b 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000009) ret=7ec53bad 000d:Ret ntdll.RtlAllocateHeap() retval=00142508 ret=7ec53bad 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,001424e8 L"winhlp32",ffffffff,00142508,00000009,00000000,00000000) ret=7ec53bf1 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000009 ret=7ec53bf1 000d:Call advapi32.RegGetValueW(80000000,00140a58 L".hlp",00000000,00000002,00000000,00000000,0033f8cc) ret=7ec54717 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ec54717 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec54747 000d:Ret ntdll.RtlAllocateHeap() retval=00142308 ret=7ec54747 000d:Call advapi32.RegGetValueW(80000000,00140a58 L".hlp",00000000,00000002,00000000,00142308,0033f8cc) ret=7ec54781 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ec54781 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00142308 L"hlpfile",ffffffff,00000000,00000000,00000000,00000000) ret=7ec53b8b 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000008 ret=7ec53b8b 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000008) ret=7ec53bad 000d:Ret ntdll.RtlAllocateHeap() retval=00142320 ret=7ec53bad 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00142308 L"hlpfile",ffffffff,00142320,00000008,00000000,00000000) ret=7ec53bf1 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000008 ret=7ec53bf1 000d:Call advapi32.RegCreateKeyW(80000001,7ec5ee60 L"Software\\Wine\\FileOpenAssociations",0033f8d0) ret=7ec547ef 000d:Ret advapi32.RegCreateKeyW() retval=00000000 ret=7ec547ef 000d:Call advapi32.RegGetValueA(00000044,00141260 ".hlp",7ec5e310 "MimeType",00000002,00000000,00000000,0033f8cc) ret=7ec54887 000d:Ret advapi32.RegGetValueA() retval=00000000 ret=7ec54887 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000021) ret=7ec548b7 000d:Ret ntdll.RtlAllocateHeap() retval=00142338 ret=7ec548b7 000d:Call advapi32.RegGetValueA(00000044,00141260 ".hlp",7ec5e310 "MimeType",00000002,00000000,00142338,0033f8cc) ret=7ec548f1 000d:Ret advapi32.RegGetValueA() retval=00000000 ret=7ec548f1 000d:Call KERNEL32.lstrcmpA(00142338 "application/x-wine-extension-hlp",001412b0 "application/x-wine-extension-hlp") ret=7ec594ae 000d:Ret KERNEL32.lstrcmpA() retval=00000000 ret=7ec594ae 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142338) ret=7ec594e0 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec594e0 000d:Call advapi32.RegGetValueW(00000044,00140a58 L".hlp",7ec5ee4a L"ProgID",00000002,00000000,00000000,0033f8cc) ret=7ec54717 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ec54717 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec54747 000d:Ret ntdll.RtlAllocateHeap() retval=00142338 ret=7ec54747 000d:Call advapi32.RegGetValueW(00000044,00140a58 L".hlp",7ec5ee4a L"ProgID",00000002,00000000,00142338,0033f8cc) ret=7ec54781 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ec54781 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142338) ret=7ec59557 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59557 000d:Call advapi32.RegGetValueA(00000044,00141260 ".hlp",7ec5e319 "AppName",00000002,00000000,00000000,0033f8cc) ret=7ec54887 000d:Ret advapi32.RegGetValueA() retval=00000000 ret=7ec54887 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000009) ret=7ec548b7 000d:Ret ntdll.RtlAllocateHeap() retval=00142338 ret=7ec548b7 000d:Call advapi32.RegGetValueA(00000044,00141260 ".hlp",7ec5e319 "AppName",00000002,00000000,00142338,0033f8cc) ret=7ec548f1 000d:Ret advapi32.RegGetValueA() retval=00000000 ret=7ec548f1 000d:Call KERNEL32.lstrcmpA(00142338 "winhlp32",00142508 "winhlp32") ret=7ec59580 000d:Ret KERNEL32.lstrcmpA() retval=00000000 ret=7ec59580 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142338) ret=7ec595ae 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec595ae 000d:Call advapi32.RegGetValueW(00000044,00140a58 L".hlp",7ec5ee3a L"DocName",00000002,00000000,00000000,0033f8cc) ret=7ec54717 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ec54717 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000014) ret=7ec54747 000d:Ret ntdll.RtlAllocateHeap() retval=00142338 ret=7ec54747 000d:Call advapi32.RegGetValueW(00000044,00140a58 L".hlp",7ec5ee3a L"DocName",00000002,00000000,00142338,0033f8cc) ret=7ec54781 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ec54781 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142338) ret=7ec59641 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59641 000d:Call advapi32.RegCloseKey(00000044) ret=7ec5964f 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ec5964f 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141260) ret=7ec598ff 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec598ff 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001422b8) ret=7ec59922 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59922 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141278) ret=7ec59945 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59945 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141298) ret=7ec59968 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59968 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec5998b 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec5998b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec599ae 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec599ae 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec599d1 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec599d1 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001412b0) ret=7ec599f5 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec599f5 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001424e8) ret=7ec59a18 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a18 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142508) ret=7ec59a3b 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a3b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142308) ret=7ec59a5e 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a5e 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142320) ret=7ec59a81 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a81 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,0000000a,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00140a58 L".htc",ffffffff,00000000,00000000,00000000,00000000) ret=7ec53b8b 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000005 ret=7ec53b8b 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000005) ret=7ec53bad 000d:Ret ntdll.RtlAllocateHeap() retval=001424e8 ret=7ec53bad 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00140a58 L".htc",ffffffff,001424e8,00000005,00000000,00000000) ret=7ec53bf1 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000005 ret=7ec53bf1 000d:Call shlwapi.AssocQueryStringW(00000000,00000003,00140a58,00000000,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00142500 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".htc",00000000,00020019,00142508) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,0014250c) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f4c8) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000002 ret=7ea7722c 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142500) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=80070002 ret=7ec54638 000d:Call shlwapi.AssocQueryStringW(00000000,0000000f,00140a58,00000000,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00142500 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".htc",00000000,00020019,00142508) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,0014250c) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f4c8) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000002 ret=7ea7722c 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142500) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=80070002 ret=7ec54638 000d:Call shlwapi.AssocQueryStringW(00000000,0000000e,00140a58,00000000,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00142500 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".htc",00000000,00020019,00142508) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,0014250c) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegGetValueW(00000044,00000000,7eaa22ce L"Content Type",00000002,00000000,00000000,0033f7a4) ret=7ea77c08 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77c08 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000022) ret=7ea77f05 000d:Ret ntdll.RtlAllocateHeap() retval=00141260 ret=7ea77f05 000d:Call advapi32.RegGetValueW(00000044,00000000,7eaa22ce L"Content Type",00000002,00000000,00141260,0033f7a4) ret=7ea77f50 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77f50 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141260) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142500) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000001 ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000022) ret=7ec54661 000d:Ret ntdll.RtlAllocateHeap() retval=00142500 ret=7ec54661 000d:Call shlwapi.AssocQueryStringW(00000000,0000000e,00140a58,00000000,00142500 L"\00a0\0011\0090\0011D",0033f8c8) ret=7ec54693 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00141260 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".htc",00000000,00020019,00141268) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,0014126c) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegGetValueW(00000044,00000000,7eaa22ce L"Content Type",00000002,00000000,00000000,0033f7a4) ret=7ea77c08 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77c08 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000022) ret=7ea77f05 000d:Ret ntdll.RtlAllocateHeap() retval=00141278 ret=7ea77f05 000d:Call advapi32.RegGetValueW(00000044,00000000,7eaa22ce L"Content Type",00000002,00000000,00141278,0033f7a4) ret=7ea77f50 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77f50 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141278) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141260) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000000 ret=7ec54693 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00141260 ret=7ec55c75 000d:Call shlwapi.AssocQueryStringW(00000000,00000001,00140a58,7ec5ed44,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00142268 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".htc",00000000,00020019,00142270) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,00142274) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f458) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000002 ret=7ea7722c 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142268) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=80070002 ret=7ec54638 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001424e8) ret=7ec598ff 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec598ff 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59922 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59922 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59945 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59945 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59968 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59968 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec5998b 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec5998b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec599ae 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec599ae 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142500) ret=7ec599d1 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec599d1 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141260) ret=7ec599f5 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec599f5 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59a18 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a18 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59a3b 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a3b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59a5e 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a5e 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59a81 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a81 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,0000000b,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00140a58 L".htm",ffffffff,00000000,00000000,00000000,00000000) ret=7ec53b8b 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000005 ret=7ec53b8b 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000005) ret=7ec53bad 000d:Ret ntdll.RtlAllocateHeap() retval=001424e8 ret=7ec53bad 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00140a58 L".htm",ffffffff,001424e8,00000005,00000000,00000000) ret=7ec53bf1 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000005 ret=7ec53bf1 000d:Call shlwapi.AssocQueryStringW(00000000,00000003,00140a58,00000000,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00142500 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".htm",00000000,00020019,00142508) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,0014250c) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f4c8) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000012) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=00141260 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00141260,0033f4c8) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegGetValueW(80000000,00141260 L"htmlfile",00000000,00000002,00000000,00000000,0033f79c) ret=7ea77e3e 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77e3e 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,0000001c) ret=7ea77fc6 000d:Ret ntdll.RtlAllocateHeap() retval=00141280 ret=7ea77fc6 000d:Call advapi32.RegGetValueW(80000000,00141260 L"htmlfile",00000000,00000002,00000000,00141280,0033f79c) ret=7ea7800c 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea7800c 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141280) ret=7ea78066 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea78066 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141260) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142500) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000001 ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,0000001c) ret=7ec54661 000d:Ret ntdll.RtlAllocateHeap() retval=00142500 ret=7ec54661 000d:Call shlwapi.AssocQueryStringW(00000000,00000003,00140a58,00000000,00142500 L"\00a0\0011\0090\0011D",0033f8c8) ret=7ec54693 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00141260 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".htm",00000000,00020019,00141268) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,0014126c) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f4c8) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000012) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=00141278 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00141278,0033f4c8) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegGetValueW(80000000,00141278 L"htmlfile",00000000,00000002,00000000,00000000,0033f79c) ret=7ea77e3e 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77e3e 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,0000001c) ret=7ea77fc6 000d:Ret ntdll.RtlAllocateHeap() retval=00141298 ret=7ea77fc6 000d:Call advapi32.RegGetValueW(80000000,00141278 L"htmlfile",00000000,00000002,00000000,00141298,0033f79c) ret=7ea7800c 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea7800c 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141298) ret=7ea78066 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea78066 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141278) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141260) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000000 ret=7ec54693 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00142500 L"HTML Document",ffffffff,00000000,00000000,00000000,00000000) ret=7ec53b8b 000d:Ret KERNEL32.WideCharToMultiByte() retval=0000000e ret=7ec53b8b 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,0000000e) ret=7ec53bad 000d:Ret ntdll.RtlAllocateHeap() retval=00141260 ret=7ec53bad 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00142500 L"HTML Document",ffffffff,00141260,0000000e,00000000,00000000) ret=7ec53bf1 000d:Ret KERNEL32.WideCharToMultiByte() retval=0000000e ret=7ec53bf1 000d:Call shlwapi.AssocQueryStringW(00000000,0000000f,00140a58,00000000,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00141278 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".htm",00000000,00020019,00141280) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,00141284) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f4c8) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000012) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=00141290 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00141290,0033f4c8) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegOpenKeyExW(80000000,00141290 L"htmlfile",00000000,00020019,0033f79c) ret=7ea77d33 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea77d33 000d:Call advapi32.RegGetValueW(00000048,7eaa22b6 L"DefaultIcon",00000000,00000002,00000000,00000000,0033f7a0) ret=7ea780bd 000d:Ret advapi32.RegGetValueW() retval=00000002 ret=7ea780bd 000d:Call advapi32.RegCloseKey(00000048) ret=7ea780e4 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea780e4 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141290) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141278) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=80070002 ret=7ec54638 000d:Call shlwapi.AssocQueryStringW(00000000,0000000e,00140a58,00000000,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00141278 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".htm",00000000,00020019,00141280) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,00141284) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegGetValueW(00000044,00000000,7eaa22ce L"Content Type",00000002,00000000,00000000,0033f7a4) ret=7ea77c08 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77c08 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000014) ret=7ea77f05 000d:Ret ntdll.RtlAllocateHeap() retval=00141290 ret=7ea77f05 000d:Call advapi32.RegGetValueW(00000044,00000000,7eaa22ce L"Content Type",00000002,00000000,00141290,0033f7a4) ret=7ea77f50 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77f50 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141290) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141278) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000001 ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000014) ret=7ec54661 000d:Ret ntdll.RtlAllocateHeap() retval=00141278 ret=7ec54661 000d:Call shlwapi.AssocQueryStringW(00000000,0000000e,00140a58,00000000,00141278 L"\2670\0014\0120\0011D",0033f8c8) ret=7ec54693 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00141298 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".htm",00000000,00020019,001412a0) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,001412a4) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegGetValueW(00000044,00000000,7eaa22ce L"Content Type",00000002,00000000,00000000,0033f7a4) ret=7ea77c08 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77c08 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000014) ret=7ea77f05 000d:Ret ntdll.RtlAllocateHeap() retval=001412b0 ret=7ea77f05 000d:Call advapi32.RegGetValueW(00000044,00000000,7eaa22ce L"Content Type",00000002,00000000,001412b0,0033f7a4) ret=7ea77f50 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77f50 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001412b0) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141298) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000000 ret=7ec54693 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00141298 ret=7ec55c75 000d:Call shlwapi.AssocQueryStringW(00000000,00000001,00140a58,7ec5ed44,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=001422a0 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".htm",00000000,00020019,001422a8) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,001422ac) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f458) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000012) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=001422b8 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,001422b8,0033f458) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegOpenKeyExW(80000000,001422b8 L"htmlfile",00000000,00020019,0033f4c4) ret=7ea7737b 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7737b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001422b8) ret=7ea773a1 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea773a1 000d:Call advapi32.RegOpenKeyExW(00000048,7eaa23b4 L"shell",00000000,00020019,0033f4c0) ret=7ea773ed 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea773ed 000d:Call advapi32.RegCloseKey(00000048) ret=7ea773fd 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea773fd 000d:Call advapi32.RegOpenKeyExW(0000004c,7ec5ed44 L"open",00000000,00020019,0033f4bc) ret=7ea77433 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea77433 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ea77459 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77459 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea77467 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea77467 000d:Call advapi32.RegOpenKeyExW(00000048,7eaa23c0 L"command",00000000,00020019,0033f4c8) ret=7ea7749f 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7749f 000d:Call advapi32.RegCloseKey(00000048) ret=7ea774af 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774af 000d:Call advapi32.RegQueryValueExW(0000004c,00000000,00000000,00000000,00000000,0033f458) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000058) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=001422b8 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(0000004c,00000000,00000000,00000000,001422b8,0033f458) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea774d3 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774d3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001422b8) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001422a0) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000001 ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000058) ret=7ec54661 000d:Ret ntdll.RtlAllocateHeap() retval=001422a0 ret=7ec54661 000d:Call shlwapi.AssocQueryStringW(00000000,00000001,00140a58,7ec5ed44,001422a0 L"\0100\0011\00f0\0011D",0033f8c8) ret=7ec54693 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00142300 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".htm",00000000,00020019,00142308) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,0014230c) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f458) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000012) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=00142318 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00142318,0033f458) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegOpenKeyExW(80000000,00142318 L"htmlfile",00000000,00020019,0033f4c4) ret=7ea7737b 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7737b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142318) ret=7ea773a1 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea773a1 000d:Call advapi32.RegOpenKeyExW(00000048,7eaa23b4 L"shell",00000000,00020019,0033f4c0) ret=7ea773ed 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea773ed 000d:Call advapi32.RegCloseKey(00000048) ret=7ea773fd 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea773fd 000d:Call advapi32.RegOpenKeyExW(0000004c,7ec5ed44 L"open",00000000,00020019,0033f4bc) ret=7ea77433 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea77433 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ea77459 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77459 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea77467 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea77467 000d:Call advapi32.RegOpenKeyExW(00000048,7eaa23c0 L"command",00000000,00020019,0033f4c8) ret=7ea7749f 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7749f 000d:Call advapi32.RegCloseKey(00000048) ret=7ea774af 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774af 000d:Call advapi32.RegQueryValueExW(0000004c,00000000,00000000,00000000,00000000,0033f458) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000058) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=00142318 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(0000004c,00000000,00000000,00000000,00142318,0033f458) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea774d3 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774d3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142318) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142300) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000000 ret=7ec54693 000d:Call shlwapi.AssocQueryStringW(00000000,00000004,00140a58,00000000,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00142300 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".htm",00000000,00020019,00142308) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,0014230c) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f418) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000012) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=00142318 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00142318,0033f418) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegOpenKeyExW(80000000,00142318 L"htmlfile",00000000,00020019,0033f484) ret=7ea7737b 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7737b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142318) ret=7ea773a1 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea773a1 000d:Call advapi32.RegOpenKeyExW(00000048,7eaa23b4 L"shell",00000000,00020019,0033f480) ret=7ea773ed 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea773ed 000d:Call advapi32.RegCloseKey(00000048) ret=7ea773fd 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea773fd 000d:Call advapi32.RegQueryValueExW(0000004c,00000000,00000000,00000000,00000000,0033f418) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000002 ret=7ea7722c 000d:Call advapi32.RegQueryInfoKeyW(0000004c,00000000,00000000,00000000,00000000,0033f470,00000000,00000000,00000000,00000000,00000000,00000000) ret=7ea77568 000d:Ret advapi32.RegQueryInfoKeyW() retval=00000000 ret=7ea77568 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea7759a 000d:Ret ntdll.RtlAllocateHeap() retval=00142318 ret=7ea7759a 000d:Call advapi32.RegEnumKeyExW(0000004c,00000000,00142318,0033f470,00000000,00000000,00000000,00000000) ret=7ea775df 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ea775df 000d:Call advapi32.RegOpenKeyExW(0000004c,00142318 L"open",00000000,00020019,0033f47c) ret=7ea77433 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea77433 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142318) ret=7ea77459 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77459 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea77467 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea77467 000d:Call advapi32.RegOpenKeyExW(00000048,7eaa23c0 L"command",00000000,00020019,0033f488) ret=7ea7749f 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7749f 000d:Call advapi32.RegCloseKey(00000048) ret=7ea774af 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774af 000d:Call advapi32.RegQueryValueExW(0000004c,00000000,00000000,00000000,00000000,0033f418) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000058) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=00142318 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(0000004c,00000000,00000000,00000000,00142318,0033f418) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea774d3 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774d3 000d:Call KERNEL32.SearchPathW(00000000,00142318 L"C:\\windows\\system32\\winebrowser.exe",00000000,00000104,0033f542,00000000) ret=7ea776c0 000d:Ret KERNEL32.SearchPathW() retval=00000023 ret=7ea776c0 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142318) ret=7ea776e6 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea776e6 000d:Call version.GetFileVersionInfoSizeW(0033f542 L"C:\\windows\\system32\\winebrowser.exe",0033f79c) ret=7ea77c71 000d:Call KERNEL32.GetModuleHandleExW(00000000,0033f542,0033f408) ret=7e23d460 000d:Ret KERNEL32.GetModuleHandleExW() retval=00000000 ret=7e23d460 000d:Call KERNEL32.LoadLibraryExW(0033f542 L"C:\\windows\\system32\\winebrowser.exe",00000000,00000002) ret=7e23d53c 000d:Ret KERNEL32.LoadLibraryExW() retval=00450001 ret=7e23d53c 000d:Call KERNEL32.FindResourceW(00450001,00000001,00000010) ret=7e23d48a 000d:Ret KERNEL32.FindResourceW() retval=00000000 ret=7e23d48a 000d:Call KERNEL32.FreeLibrary(00450001) ret=7e23d4af 000d:Ret KERNEL32.FreeLibrary() retval=00000001 ret=7e23d4af 000d:Ret version.GetFileVersionInfoSizeW() retval=00000000 ret=7ea77c71 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142300) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000001 ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000018) ret=7ec54661 000d:Ret ntdll.RtlAllocateHeap() retval=00142300 ret=7ec54661 000d:Call shlwapi.AssocQueryStringW(00000000,00000004,00140a58,00000000,00142300 L"\00f0\0011\00e0\0011D",0033f8c8) ret=7ec54693 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00142320 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".htm",00000000,00020019,00142328) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,0014232c) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f418) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000012) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=00142338 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00142338,0033f418) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegOpenKeyExW(80000000,00142338 L"htmlfile",00000000,00020019,0033f484) ret=7ea7737b 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7737b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142338) ret=7ea773a1 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea773a1 000d:Call advapi32.RegOpenKeyExW(00000048,7eaa23b4 L"shell",00000000,00020019,0033f480) ret=7ea773ed 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea773ed 000d:Call advapi32.RegCloseKey(00000048) ret=7ea773fd 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea773fd 000d:Call advapi32.RegQueryValueExW(0000004c,00000000,00000000,00000000,00000000,0033f418) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000002 ret=7ea7722c 000d:Call advapi32.RegQueryInfoKeyW(0000004c,00000000,00000000,00000000,00000000,0033f470,00000000,00000000,00000000,00000000,00000000,00000000) ret=7ea77568 000d:Ret advapi32.RegQueryInfoKeyW() retval=00000000 ret=7ea77568 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea7759a 000d:Ret ntdll.RtlAllocateHeap() retval=00142338 ret=7ea7759a 000d:Call advapi32.RegEnumKeyExW(0000004c,00000000,00142338,0033f470,00000000,00000000,00000000,00000000) ret=7ea775df 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ea775df 000d:Call advapi32.RegOpenKeyExW(0000004c,00142338 L"open",00000000,00020019,0033f47c) ret=7ea77433 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea77433 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142338) ret=7ea77459 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77459 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea77467 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea77467 000d:Call advapi32.RegOpenKeyExW(00000048,7eaa23c0 L"command",00000000,00020019,0033f488) ret=7ea7749f 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7749f 000d:Call advapi32.RegCloseKey(00000048) ret=7ea774af 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774af 000d:Call advapi32.RegQueryValueExW(0000004c,00000000,00000000,00000000,00000000,0033f418) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000058) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=00142338 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(0000004c,00000000,00000000,00000000,00142338,0033f418) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea774d3 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774d3 000d:Call KERNEL32.SearchPathW(00000000,00142338 L"C:\\windows\\system32\\winebrowser.exe",00000000,00000104,0033f542,00000000) ret=7ea776c0 000d:Ret KERNEL32.SearchPathW() retval=00000023 ret=7ea776c0 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142338) ret=7ea776e6 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea776e6 000d:Call version.GetFileVersionInfoSizeW(0033f542 L"C:\\windows\\system32\\winebrowser.exe",0033f79c) ret=7ea77c71 000d:Call KERNEL32.GetModuleHandleExW(00000000,0033f542,0033f408) ret=7e23d460 000d:Ret KERNEL32.GetModuleHandleExW() retval=00000000 ret=7e23d460 000d:Call KERNEL32.LoadLibraryExW(0033f542 L"C:\\windows\\system32\\winebrowser.exe",00000000,00000002) ret=7e23d53c 000d:Ret KERNEL32.LoadLibraryExW() retval=00450001 ret=7e23d53c 000d:Call KERNEL32.FindResourceW(00450001,00000001,00000010) ret=7e23d48a 000d:Ret KERNEL32.FindResourceW() retval=00000000 ret=7e23d48a 000d:Call KERNEL32.FreeLibrary(00450001) ret=7e23d4af 000d:Ret KERNEL32.FreeLibrary() retval=00000001 ret=7e23d4af 000d:Ret version.GetFileVersionInfoSizeW() retval=00000000 ret=7ea77c71 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142320) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000000 ret=7ec54693 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00142300 L"winebrowser",ffffffff,00000000,00000000,00000000,00000000) ret=7ec53b8b 000d:Ret KERNEL32.WideCharToMultiByte() retval=0000000c ret=7ec53b8b 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,0000000c) ret=7ec53bad 000d:Ret ntdll.RtlAllocateHeap() retval=00142320 ret=7ec53bad 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00142300 L"winebrowser",ffffffff,00142320,0000000c,00000000,00000000) ret=7ec53bf1 000d:Ret KERNEL32.WideCharToMultiByte() retval=0000000c ret=7ec53bf1 000d:Call advapi32.RegGetValueW(80000000,00140a58 L".htm",00000000,00000002,00000000,00000000,0033f8cc) ret=7ec54717 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ec54717 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000012) ret=7ec54747 000d:Ret ntdll.RtlAllocateHeap() retval=00142338 ret=7ec54747 000d:Call advapi32.RegGetValueW(80000000,00140a58 L".htm",00000000,00000002,00000000,00142338,0033f8cc) ret=7ec54781 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ec54781 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00142338 L"htmlfile",ffffffff,00000000,00000000,00000000,00000000) ret=7ec53b8b 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000009 ret=7ec53b8b 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000009) ret=7ec53bad 000d:Ret ntdll.RtlAllocateHeap() retval=00142358 ret=7ec53bad 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00142338 L"htmlfile",ffffffff,00142358,00000009,00000000,00000000) ret=7ec53bf1 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000009 ret=7ec53bf1 000d:Call advapi32.RegCreateKeyW(80000001,7ec5ee60 L"Software\\Wine\\FileOpenAssociations",0033f8d0) ret=7ec547ef 000d:Ret advapi32.RegCreateKeyW() retval=00000000 ret=7ec547ef 000d:Call advapi32.RegGetValueA(00000044,001424e8 ".htm",7ec5e310 "MimeType",00000002,00000000,00000000,0033f8cc) ret=7ec54887 000d:Ret advapi32.RegGetValueA() retval=00000000 ret=7ec54887 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,0000000a) ret=7ec548b7 000d:Ret ntdll.RtlAllocateHeap() retval=00142370 ret=7ec548b7 000d:Call advapi32.RegGetValueA(00000044,001424e8 ".htm",7ec5e310 "MimeType",00000002,00000000,00142370,0033f8cc) ret=7ec548f1 000d:Ret advapi32.RegGetValueA() retval=00000000 ret=7ec548f1 000d:Call KERNEL32.lstrcmpA(00142370 "text/html",00141298 "text/html") ret=7ec594ae 000d:Ret KERNEL32.lstrcmpA() retval=00000000 ret=7ec594ae 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142370) ret=7ec594e0 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec594e0 000d:Call advapi32.RegGetValueW(00000044,00140a58 L".htm",7ec5ee4a L"ProgID",00000002,00000000,00000000,0033f8cc) ret=7ec54717 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ec54717 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000012) ret=7ec54747 000d:Ret ntdll.RtlAllocateHeap() retval=00142370 ret=7ec54747 000d:Call advapi32.RegGetValueW(00000044,00140a58 L".htm",7ec5ee4a L"ProgID",00000002,00000000,00142370,0033f8cc) ret=7ec54781 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ec54781 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142370) ret=7ec59557 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59557 000d:Call advapi32.RegGetValueA(00000044,001424e8 ".htm",7ec5e319 "AppName",00000002,00000000,00000000,0033f8cc) ret=7ec54887 000d:Ret advapi32.RegGetValueA() retval=00000000 ret=7ec54887 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,0000000c) ret=7ec548b7 000d:Ret ntdll.RtlAllocateHeap() retval=00142370 ret=7ec548b7 000d:Call advapi32.RegGetValueA(00000044,001424e8 ".htm",7ec5e319 "AppName",00000002,00000000,00142370,0033f8cc) ret=7ec548f1 000d:Ret advapi32.RegGetValueA() retval=00000000 ret=7ec548f1 000d:Call KERNEL32.lstrcmpA(00142370 "winebrowser",00142320 "winebrowser") ret=7ec59580 000d:Ret KERNEL32.lstrcmpA() retval=00000000 ret=7ec59580 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142370) ret=7ec595ae 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec595ae 000d:Call advapi32.RegGetValueW(00000044,00140a58 L".htm",7ec5ee3a L"DocName",00000002,00000000,00000000,0033f8cc) ret=7ec54717 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ec54717 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,0000001c) ret=7ec54747 000d:Ret ntdll.RtlAllocateHeap() retval=00142370 ret=7ec54747 000d:Call advapi32.RegGetValueW(00000044,00140a58 L".htm",7ec5ee3a L"DocName",00000002,00000000,00142370,0033f8cc) ret=7ec54781 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ec54781 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142370) ret=7ec59641 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59641 000d:Call advapi32.RegCloseKey(00000044) ret=7ec5964f 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ec5964f 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001424e8) ret=7ec598ff 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec598ff 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001422a0) ret=7ec59922 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59922 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142500) ret=7ec59945 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59945 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141260) ret=7ec59968 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59968 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec5998b 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec5998b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec599ae 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec599ae 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141278) ret=7ec599d1 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec599d1 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141298) ret=7ec599f5 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec599f5 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142300) ret=7ec59a18 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a18 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142320) ret=7ec59a3b 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a3b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142338) ret=7ec59a5e 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a5e 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142358) ret=7ec59a81 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a81 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,0000000c,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00140a58 L".html",ffffffff,00000000,00000000,00000000,00000000) ret=7ec53b8b 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000006 ret=7ec53b8b 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000006) ret=7ec53bad 000d:Ret ntdll.RtlAllocateHeap() retval=001424e8 ret=7ec53bad 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00140a58 L".html",ffffffff,001424e8,00000006,00000000,00000000) ret=7ec53bf1 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000006 ret=7ec53bf1 000d:Call shlwapi.AssocQueryStringW(00000000,00000003,00140a58,00000000,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00142500 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".html",00000000,00020019,00142508) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,0014250c) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f4c8) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000012) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=00141260 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00141260,0033f4c8) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegGetValueW(80000000,00141260 L"htmlfile",00000000,00000002,00000000,00000000,0033f79c) ret=7ea77e3e 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77e3e 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,0000001c) ret=7ea77fc6 000d:Ret ntdll.RtlAllocateHeap() retval=00141280 ret=7ea77fc6 000d:Call advapi32.RegGetValueW(80000000,00141260 L"htmlfile",00000000,00000002,00000000,00141280,0033f79c) ret=7ea7800c 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea7800c 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141280) ret=7ea78066 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea78066 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141260) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142500) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000001 ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,0000001c) ret=7ec54661 000d:Ret ntdll.RtlAllocateHeap() retval=00142500 ret=7ec54661 000d:Call shlwapi.AssocQueryStringW(00000000,00000003,00140a58,00000000,00142500 L"\00a0\0011\0090\0011D",0033f8c8) ret=7ec54693 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00141260 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".html",00000000,00020019,00141268) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,0014126c) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f4c8) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000012) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=00141278 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00141278,0033f4c8) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegGetValueW(80000000,00141278 L"htmlfile",00000000,00000002,00000000,00000000,0033f79c) ret=7ea77e3e 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77e3e 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,0000001c) ret=7ea77fc6 000d:Ret ntdll.RtlAllocateHeap() retval=00141298 ret=7ea77fc6 000d:Call advapi32.RegGetValueW(80000000,00141278 L"htmlfile",00000000,00000002,00000000,00141298,0033f79c) ret=7ea7800c 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea7800c 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141298) ret=7ea78066 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea78066 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141278) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141260) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000000 ret=7ec54693 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00142500 L"HTML Document",ffffffff,00000000,00000000,00000000,00000000) ret=7ec53b8b 000d:Ret KERNEL32.WideCharToMultiByte() retval=0000000e ret=7ec53b8b 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,0000000e) ret=7ec53bad 000d:Ret ntdll.RtlAllocateHeap() retval=00141260 ret=7ec53bad 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00142500 L"HTML Document",ffffffff,00141260,0000000e,00000000,00000000) ret=7ec53bf1 000d:Ret KERNEL32.WideCharToMultiByte() retval=0000000e ret=7ec53bf1 000d:Call shlwapi.AssocQueryStringW(00000000,0000000f,00140a58,00000000,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00141278 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".html",00000000,00020019,00141280) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,00141284) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f4c8) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000012) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=00141290 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00141290,0033f4c8) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegOpenKeyExW(80000000,00141290 L"htmlfile",00000000,00020019,0033f79c) ret=7ea77d33 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea77d33 000d:Call advapi32.RegGetValueW(00000048,7eaa22b6 L"DefaultIcon",00000000,00000002,00000000,00000000,0033f7a0) ret=7ea780bd 000d:Ret advapi32.RegGetValueW() retval=00000002 ret=7ea780bd 000d:Call advapi32.RegCloseKey(00000048) ret=7ea780e4 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea780e4 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141290) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141278) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=80070002 ret=7ec54638 000d:Call shlwapi.AssocQueryStringW(00000000,0000000e,00140a58,00000000,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00141278 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".html",00000000,00020019,00141280) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,00141284) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegGetValueW(00000044,00000000,7eaa22ce L"Content Type",00000002,00000000,00000000,0033f7a4) ret=7ea77c08 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77c08 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000014) ret=7ea77f05 000d:Ret ntdll.RtlAllocateHeap() retval=00141290 ret=7ea77f05 000d:Call advapi32.RegGetValueW(00000044,00000000,7eaa22ce L"Content Type",00000002,00000000,00141290,0033f7a4) ret=7ea77f50 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77f50 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141290) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141278) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000001 ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000014) ret=7ec54661 000d:Ret ntdll.RtlAllocateHeap() retval=00141278 ret=7ec54661 000d:Call shlwapi.AssocQueryStringW(00000000,0000000e,00140a58,00000000,00141278 L"\2670\0014\0120\0011D",0033f8c8) ret=7ec54693 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00141298 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".html",00000000,00020019,001412a0) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,001412a4) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegGetValueW(00000044,00000000,7eaa22ce L"Content Type",00000002,00000000,00000000,0033f7a4) ret=7ea77c08 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77c08 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000014) ret=7ea77f05 000d:Ret ntdll.RtlAllocateHeap() retval=001412b0 ret=7ea77f05 000d:Call advapi32.RegGetValueW(00000044,00000000,7eaa22ce L"Content Type",00000002,00000000,001412b0,0033f7a4) ret=7ea77f50 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77f50 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001412b0) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141298) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000000 ret=7ec54693 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00141298 ret=7ec55c75 000d:Call shlwapi.AssocQueryStringW(00000000,00000001,00140a58,7ec5ed44,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=001422a0 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".html",00000000,00020019,001422a8) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,001422ac) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f458) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000012) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=001422b8 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,001422b8,0033f458) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegOpenKeyExW(80000000,001422b8 L"htmlfile",00000000,00020019,0033f4c4) ret=7ea7737b 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7737b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001422b8) ret=7ea773a1 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea773a1 000d:Call advapi32.RegOpenKeyExW(00000048,7eaa23b4 L"shell",00000000,00020019,0033f4c0) ret=7ea773ed 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea773ed 000d:Call advapi32.RegCloseKey(00000048) ret=7ea773fd 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea773fd 000d:Call advapi32.RegOpenKeyExW(0000004c,7ec5ed44 L"open",00000000,00020019,0033f4bc) ret=7ea77433 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea77433 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ea77459 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77459 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea77467 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea77467 000d:Call advapi32.RegOpenKeyExW(00000048,7eaa23c0 L"command",00000000,00020019,0033f4c8) ret=7ea7749f 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7749f 000d:Call advapi32.RegCloseKey(00000048) ret=7ea774af 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774af 000d:Call advapi32.RegQueryValueExW(0000004c,00000000,00000000,00000000,00000000,0033f458) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000058) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=001422b8 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(0000004c,00000000,00000000,00000000,001422b8,0033f458) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea774d3 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774d3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001422b8) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001422a0) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000001 ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000058) ret=7ec54661 000d:Ret ntdll.RtlAllocateHeap() retval=001422a0 ret=7ec54661 000d:Call shlwapi.AssocQueryStringW(00000000,00000001,00140a58,7ec5ed44,001422a0 L"\0100\0011\00f0\0011D",0033f8c8) ret=7ec54693 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00142300 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".html",00000000,00020019,00142308) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,0014230c) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f458) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000012) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=00142318 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00142318,0033f458) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegOpenKeyExW(80000000,00142318 L"htmlfile",00000000,00020019,0033f4c4) ret=7ea7737b 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7737b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142318) ret=7ea773a1 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea773a1 000d:Call advapi32.RegOpenKeyExW(00000048,7eaa23b4 L"shell",00000000,00020019,0033f4c0) ret=7ea773ed 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea773ed 000d:Call advapi32.RegCloseKey(00000048) ret=7ea773fd 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea773fd 000d:Call advapi32.RegOpenKeyExW(0000004c,7ec5ed44 L"open",00000000,00020019,0033f4bc) ret=7ea77433 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea77433 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ea77459 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77459 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea77467 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea77467 000d:Call advapi32.RegOpenKeyExW(00000048,7eaa23c0 L"command",00000000,00020019,0033f4c8) ret=7ea7749f 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7749f 000d:Call advapi32.RegCloseKey(00000048) ret=7ea774af 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774af 000d:Call advapi32.RegQueryValueExW(0000004c,00000000,00000000,00000000,00000000,0033f458) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000058) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=00142318 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(0000004c,00000000,00000000,00000000,00142318,0033f458) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea774d3 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774d3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142318) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142300) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000000 ret=7ec54693 000d:Call shlwapi.AssocQueryStringW(00000000,00000004,00140a58,00000000,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00142300 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".html",00000000,00020019,00142308) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,0014230c) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f418) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000012) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=00142318 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00142318,0033f418) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegOpenKeyExW(80000000,00142318 L"htmlfile",00000000,00020019,0033f484) ret=7ea7737b 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7737b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142318) ret=7ea773a1 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea773a1 000d:Call advapi32.RegOpenKeyExW(00000048,7eaa23b4 L"shell",00000000,00020019,0033f480) ret=7ea773ed 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea773ed 000d:Call advapi32.RegCloseKey(00000048) ret=7ea773fd 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea773fd 000d:Call advapi32.RegQueryValueExW(0000004c,00000000,00000000,00000000,00000000,0033f418) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000002 ret=7ea7722c 000d:Call advapi32.RegQueryInfoKeyW(0000004c,00000000,00000000,00000000,00000000,0033f470,00000000,00000000,00000000,00000000,00000000,00000000) ret=7ea77568 000d:Ret advapi32.RegQueryInfoKeyW() retval=00000000 ret=7ea77568 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea7759a 000d:Ret ntdll.RtlAllocateHeap() retval=00142318 ret=7ea7759a 000d:Call advapi32.RegEnumKeyExW(0000004c,00000000,00142318,0033f470,00000000,00000000,00000000,00000000) ret=7ea775df 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ea775df 000d:Call advapi32.RegOpenKeyExW(0000004c,00142318 L"open",00000000,00020019,0033f47c) ret=7ea77433 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea77433 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142318) ret=7ea77459 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77459 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea77467 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea77467 000d:Call advapi32.RegOpenKeyExW(00000048,7eaa23c0 L"command",00000000,00020019,0033f488) ret=7ea7749f 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7749f 000d:Call advapi32.RegCloseKey(00000048) ret=7ea774af 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774af 000d:Call advapi32.RegQueryValueExW(0000004c,00000000,00000000,00000000,00000000,0033f418) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000058) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=00142318 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(0000004c,00000000,00000000,00000000,00142318,0033f418) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea774d3 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774d3 000d:Call KERNEL32.SearchPathW(00000000,00142318 L"C:\\windows\\system32\\winebrowser.exe",00000000,00000104,0033f542,00000000) ret=7ea776c0 000d:Ret KERNEL32.SearchPathW() retval=00000023 ret=7ea776c0 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142318) ret=7ea776e6 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea776e6 000d:Call version.GetFileVersionInfoSizeW(0033f542 L"C:\\windows\\system32\\winebrowser.exe",0033f79c) ret=7ea77c71 000d:Call KERNEL32.GetModuleHandleExW(00000000,0033f542,0033f408) ret=7e23d460 000d:Ret KERNEL32.GetModuleHandleExW() retval=00000000 ret=7e23d460 000d:Call KERNEL32.LoadLibraryExW(0033f542 L"C:\\windows\\system32\\winebrowser.exe",00000000,00000002) ret=7e23d53c 000d:Ret KERNEL32.LoadLibraryExW() retval=00450001 ret=7e23d53c 000d:Call KERNEL32.FindResourceW(00450001,00000001,00000010) ret=7e23d48a 000d:Ret KERNEL32.FindResourceW() retval=00000000 ret=7e23d48a 000d:Call KERNEL32.FreeLibrary(00450001) ret=7e23d4af 000d:Ret KERNEL32.FreeLibrary() retval=00000001 ret=7e23d4af 000d:Ret version.GetFileVersionInfoSizeW() retval=00000000 ret=7ea77c71 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142300) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000001 ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000018) ret=7ec54661 000d:Ret ntdll.RtlAllocateHeap() retval=00142300 ret=7ec54661 000d:Call shlwapi.AssocQueryStringW(00000000,00000004,00140a58,00000000,00142300 L"\00f0\0011\00e0\0011D",0033f8c8) ret=7ec54693 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00142320 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".html",00000000,00020019,00142328) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,0014232c) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f418) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000012) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=00142338 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00142338,0033f418) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegOpenKeyExW(80000000,00142338 L"htmlfile",00000000,00020019,0033f484) ret=7ea7737b 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7737b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142338) ret=7ea773a1 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea773a1 000d:Call advapi32.RegOpenKeyExW(00000048,7eaa23b4 L"shell",00000000,00020019,0033f480) ret=7ea773ed 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea773ed 000d:Call advapi32.RegCloseKey(00000048) ret=7ea773fd 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea773fd 000d:Call advapi32.RegQueryValueExW(0000004c,00000000,00000000,00000000,00000000,0033f418) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000002 ret=7ea7722c 000d:Call advapi32.RegQueryInfoKeyW(0000004c,00000000,00000000,00000000,00000000,0033f470,00000000,00000000,00000000,00000000,00000000,00000000) ret=7ea77568 000d:Ret advapi32.RegQueryInfoKeyW() retval=00000000 ret=7ea77568 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea7759a 000d:Ret ntdll.RtlAllocateHeap() retval=00142338 ret=7ea7759a 000d:Call advapi32.RegEnumKeyExW(0000004c,00000000,00142338,0033f470,00000000,00000000,00000000,00000000) ret=7ea775df 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ea775df 000d:Call advapi32.RegOpenKeyExW(0000004c,00142338 L"open",00000000,00020019,0033f47c) ret=7ea77433 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea77433 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142338) ret=7ea77459 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77459 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea77467 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea77467 000d:Call advapi32.RegOpenKeyExW(00000048,7eaa23c0 L"command",00000000,00020019,0033f488) ret=7ea7749f 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7749f 000d:Call advapi32.RegCloseKey(00000048) ret=7ea774af 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774af 000d:Call advapi32.RegQueryValueExW(0000004c,00000000,00000000,00000000,00000000,0033f418) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000058) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=00142338 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(0000004c,00000000,00000000,00000000,00142338,0033f418) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea774d3 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774d3 000d:Call KERNEL32.SearchPathW(00000000,00142338 L"C:\\windows\\system32\\winebrowser.exe",00000000,00000104,0033f542,00000000) ret=7ea776c0 000d:Ret KERNEL32.SearchPathW() retval=00000023 ret=7ea776c0 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142338) ret=7ea776e6 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea776e6 000d:Call version.GetFileVersionInfoSizeW(0033f542 L"C:\\windows\\system32\\winebrowser.exe",0033f79c) ret=7ea77c71 000d:Call KERNEL32.GetModuleHandleExW(00000000,0033f542,0033f408) ret=7e23d460 000d:Ret KERNEL32.GetModuleHandleExW() retval=00000000 ret=7e23d460 000d:Call KERNEL32.LoadLibraryExW(0033f542 L"C:\\windows\\system32\\winebrowser.exe",00000000,00000002) ret=7e23d53c 000d:Ret KERNEL32.LoadLibraryExW() retval=00450001 ret=7e23d53c 000d:Call KERNEL32.FindResourceW(00450001,00000001,00000010) ret=7e23d48a 000d:Ret KERNEL32.FindResourceW() retval=00000000 ret=7e23d48a 000d:Call KERNEL32.FreeLibrary(00450001) ret=7e23d4af 000d:Ret KERNEL32.FreeLibrary() retval=00000001 ret=7e23d4af 000d:Ret version.GetFileVersionInfoSizeW() retval=00000000 ret=7ea77c71 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142320) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000000 ret=7ec54693 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00142300 L"winebrowser",ffffffff,00000000,00000000,00000000,00000000) ret=7ec53b8b 000d:Ret KERNEL32.WideCharToMultiByte() retval=0000000c ret=7ec53b8b 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,0000000c) ret=7ec53bad 000d:Ret ntdll.RtlAllocateHeap() retval=00142320 ret=7ec53bad 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00142300 L"winebrowser",ffffffff,00142320,0000000c,00000000,00000000) ret=7ec53bf1 000d:Ret KERNEL32.WideCharToMultiByte() retval=0000000c ret=7ec53bf1 000d:Call advapi32.RegGetValueW(80000000,00140a58 L".html",00000000,00000002,00000000,00000000,0033f8cc) ret=7ec54717 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ec54717 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000012) ret=7ec54747 000d:Ret ntdll.RtlAllocateHeap() retval=00142338 ret=7ec54747 000d:Call advapi32.RegGetValueW(80000000,00140a58 L".html",00000000,00000002,00000000,00142338,0033f8cc) ret=7ec54781 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ec54781 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00142338 L"htmlfile",ffffffff,00000000,00000000,00000000,00000000) ret=7ec53b8b 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000009 ret=7ec53b8b 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000009) ret=7ec53bad 000d:Ret ntdll.RtlAllocateHeap() retval=00142358 ret=7ec53bad 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00142338 L"htmlfile",ffffffff,00142358,00000009,00000000,00000000) ret=7ec53bf1 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000009 ret=7ec53bf1 000d:Call advapi32.RegCreateKeyW(80000001,7ec5ee60 L"Software\\Wine\\FileOpenAssociations",0033f8d0) ret=7ec547ef 000d:Ret advapi32.RegCreateKeyW() retval=00000000 ret=7ec547ef 000d:Call advapi32.RegGetValueA(00000044,001424e8 ".html",7ec5e310 "MimeType",00000002,00000000,00000000,0033f8cc) ret=7ec54887 000d:Ret advapi32.RegGetValueA() retval=00000000 ret=7ec54887 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,0000000a) ret=7ec548b7 000d:Ret ntdll.RtlAllocateHeap() retval=00142370 ret=7ec548b7 000d:Call advapi32.RegGetValueA(00000044,001424e8 ".html",7ec5e310 "MimeType",00000002,00000000,00142370,0033f8cc) ret=7ec548f1 000d:Ret advapi32.RegGetValueA() retval=00000000 ret=7ec548f1 000d:Call KERNEL32.lstrcmpA(00142370 "text/html",00141298 "text/html") ret=7ec594ae 000d:Ret KERNEL32.lstrcmpA() retval=00000000 ret=7ec594ae 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142370) ret=7ec594e0 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec594e0 000d:Call advapi32.RegGetValueW(00000044,00140a58 L".html",7ec5ee4a L"ProgID",00000002,00000000,00000000,0033f8cc) ret=7ec54717 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ec54717 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000012) ret=7ec54747 000d:Ret ntdll.RtlAllocateHeap() retval=00142370 ret=7ec54747 000d:Call advapi32.RegGetValueW(00000044,00140a58 L".html",7ec5ee4a L"ProgID",00000002,00000000,00142370,0033f8cc) ret=7ec54781 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ec54781 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142370) ret=7ec59557 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59557 000d:Call advapi32.RegGetValueA(00000044,001424e8 ".html",7ec5e319 "AppName",00000002,00000000,00000000,0033f8cc) ret=7ec54887 000d:Ret advapi32.RegGetValueA() retval=00000000 ret=7ec54887 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,0000000c) ret=7ec548b7 000d:Ret ntdll.RtlAllocateHeap() retval=00142370 ret=7ec548b7 000d:Call advapi32.RegGetValueA(00000044,001424e8 ".html",7ec5e319 "AppName",00000002,00000000,00142370,0033f8cc) ret=7ec548f1 000d:Ret advapi32.RegGetValueA() retval=00000000 ret=7ec548f1 000d:Call KERNEL32.lstrcmpA(00142370 "winebrowser",00142320 "winebrowser") ret=7ec59580 000d:Ret KERNEL32.lstrcmpA() retval=00000000 ret=7ec59580 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142370) ret=7ec595ae 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec595ae 000d:Call advapi32.RegGetValueW(00000044,00140a58 L".html",7ec5ee3a L"DocName",00000002,00000000,00000000,0033f8cc) ret=7ec54717 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ec54717 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,0000001c) ret=7ec54747 000d:Ret ntdll.RtlAllocateHeap() retval=00142370 ret=7ec54747 000d:Call advapi32.RegGetValueW(00000044,00140a58 L".html",7ec5ee3a L"DocName",00000002,00000000,00142370,0033f8cc) ret=7ec54781 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ec54781 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142370) ret=7ec59641 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59641 000d:Call advapi32.RegCloseKey(00000044) ret=7ec5964f 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ec5964f 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001424e8) ret=7ec598ff 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec598ff 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001422a0) ret=7ec59922 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59922 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142500) ret=7ec59945 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59945 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141260) ret=7ec59968 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59968 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec5998b 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec5998b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec599ae 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec599ae 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141278) ret=7ec599d1 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec599d1 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141298) ret=7ec599f5 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec599f5 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142300) ret=7ec59a18 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a18 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142320) ret=7ec59a3b 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a3b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142338) ret=7ec59a5e 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a5e 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142358) ret=7ec59a81 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a81 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,0000000d,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00140a58 L".ico",ffffffff,00000000,00000000,00000000,00000000) ret=7ec53b8b 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000005 ret=7ec53b8b 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000005) ret=7ec53bad 000d:Ret ntdll.RtlAllocateHeap() retval=001424e8 ret=7ec53bad 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00140a58 L".ico",ffffffff,001424e8,00000005,00000000,00000000) ret=7ec53bf1 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000005 ret=7ec53bf1 000d:Call shlwapi.AssocQueryStringW(00000000,00000003,00140a58,00000000,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00142500 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".ico",00000000,00020019,00142508) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,0014250c) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f4c8) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000002 ret=7ea7722c 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142500) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=80070002 ret=7ec54638 000d:Call shlwapi.AssocQueryStringW(00000000,0000000f,00140a58,00000000,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00142500 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".ico",00000000,00020019,00142508) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,0014250c) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f4c8) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000002 ret=7ea7722c 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142500) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=80070002 ret=7ec54638 000d:Call shlwapi.AssocQueryStringW(00000000,0000000e,00140a58,00000000,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00142500 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".ico",00000000,00020019,00142508) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,0014250c) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegGetValueW(00000044,00000000,7eaa22ce L"Content Type",00000002,00000000,00000000,0033f7a4) ret=7ea77c08 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77c08 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,0000001a) ret=7ea77f05 000d:Ret ntdll.RtlAllocateHeap() retval=00141260 ret=7ea77f05 000d:Call advapi32.RegGetValueW(00000044,00000000,7eaa22ce L"Content Type",00000002,00000000,00141260,0033f7a4) ret=7ea77f50 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77f50 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141260) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142500) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000001 ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,0000001a) ret=7ec54661 000d:Ret ntdll.RtlAllocateHeap() retval=00142500 ret=7ec54661 000d:Call shlwapi.AssocQueryStringW(00000000,0000000e,00140a58,00000000,00142500 L"\00a0\0011\0090\0011D",0033f8c8) ret=7ec54693 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00141260 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".ico",00000000,00020019,00141268) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,0014126c) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegGetValueW(00000044,00000000,7eaa22ce L"Content Type",00000002,00000000,00000000,0033f7a4) ret=7ea77c08 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77c08 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,0000001a) ret=7ea77f05 000d:Ret ntdll.RtlAllocateHeap() retval=00141278 ret=7ea77f05 000d:Call advapi32.RegGetValueW(00000044,00000000,7eaa22ce L"Content Type",00000002,00000000,00141278,0033f7a4) ret=7ea77f50 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77f50 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141278) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141260) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000000 ret=7ec54693 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00141260 ret=7ec55c75 000d:Call shlwapi.AssocQueryStringW(00000000,00000001,00140a58,7ec5ed44,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00142268 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".ico",00000000,00020019,00142270) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,00142274) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f458) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000002 ret=7ea7722c 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142268) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=80070002 ret=7ec54638 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001424e8) ret=7ec598ff 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec598ff 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59922 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59922 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59945 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59945 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59968 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59968 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec5998b 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec5998b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec599ae 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec599ae 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142500) ret=7ec599d1 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec599d1 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141260) ret=7ec599f5 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec599f5 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59a18 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a18 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59a3b 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a3b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59a5e 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a5e 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59a81 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a81 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,0000000e,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00140a58 L".inf",ffffffff,00000000,00000000,00000000,00000000) ret=7ec53b8b 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000005 ret=7ec53b8b 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000005) ret=7ec53bad 000d:Ret ntdll.RtlAllocateHeap() retval=001424e8 ret=7ec53bad 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00140a58 L".inf",ffffffff,001424e8,00000005,00000000,00000000) ret=7ec53bf1 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000005 ret=7ec53bf1 000d:Call shlwapi.AssocQueryStringW(00000000,00000003,00140a58,00000000,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00142500 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".inf",00000000,00020019,00142508) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,0014250c) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f4c8) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=00141260 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00141260,0033f4c8) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegGetValueW(80000000,00141260 L"inffile",00000000,00000002,00000000,00000000,0033f79c) ret=7ea77e3e 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77e3e 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000024) ret=7ea77fc6 000d:Ret ntdll.RtlAllocateHeap() retval=00141278 ret=7ea77fc6 000d:Call advapi32.RegGetValueW(80000000,00141260 L"inffile",00000000,00000002,00000000,00141278,0033f79c) ret=7ea7800c 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea7800c 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141278) ret=7ea78066 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea78066 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141260) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142500) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000001 ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000024) ret=7ec54661 000d:Ret ntdll.RtlAllocateHeap() retval=00142500 ret=7ec54661 000d:Call shlwapi.AssocQueryStringW(00000000,00000003,00140a58,00000000,00142500 L"\00a0\0011\0090\0011D",0033f8c8) ret=7ec54693 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00141260 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".inf",00000000,00020019,00141268) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,0014126c) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f4c8) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=00141278 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00141278,0033f4c8) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegGetValueW(80000000,00141278 L"inffile",00000000,00000002,00000000,00000000,0033f79c) ret=7ea77e3e 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77e3e 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000024) ret=7ea77fc6 000d:Ret ntdll.RtlAllocateHeap() retval=00141290 ret=7ea77fc6 000d:Call advapi32.RegGetValueW(80000000,00141278 L"inffile",00000000,00000002,00000000,00141290,0033f79c) ret=7ea7800c 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea7800c 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141290) ret=7ea78066 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea78066 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141278) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141260) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000000 ret=7ec54693 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00142500 L"Setup Information",ffffffff,00000000,00000000,00000000,00000000) ret=7ec53b8b 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000012 ret=7ec53b8b 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000012) ret=7ec53bad 000d:Ret ntdll.RtlAllocateHeap() retval=00141260 ret=7ec53bad 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00142500 L"Setup Information",ffffffff,00141260,00000012,00000000,00000000) ret=7ec53bf1 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000012 ret=7ec53bf1 000d:Call shlwapi.AssocQueryStringW(00000000,0000000f,00140a58,00000000,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00141280 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".inf",00000000,00020019,00141288) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,0014128c) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f4c8) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=00141298 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00141298,0033f4c8) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegOpenKeyExW(80000000,00141298 L"inffile",00000000,00020019,0033f79c) ret=7ea77d33 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea77d33 000d:Call advapi32.RegGetValueW(00000048,7eaa22b6 L"DefaultIcon",00000000,00000002,00000000,00000000,0033f7a0) ret=7ea780bd 000d:Ret advapi32.RegGetValueW() retval=00000002 ret=7ea780bd 000d:Call advapi32.RegCloseKey(00000048) ret=7ea780e4 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea780e4 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141298) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141280) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=80070002 ret=7ec54638 000d:Call shlwapi.AssocQueryStringW(00000000,0000000e,00140a58,00000000,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00141280 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".inf",00000000,00020019,00141288) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,0014128c) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegGetValueW(00000044,00000000,7eaa22ce L"Content Type",00000002,00000000,00000000,0033f7a4) ret=7ea77c08 000d:Ret advapi32.RegGetValueW() retval=00000002 ret=7ea77c08 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141280) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=80070002 ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00141280 ret=7ec55c75 000d:Call shlwapi.AssocQueryStringW(00000000,00000001,00140a58,7ec5ed44,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00142288 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".inf",00000000,00020019,00142290) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,00142294) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f458) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=001422a0 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,001422a0,0033f458) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegOpenKeyExW(80000000,001422a0 L"inffile",00000000,00020019,0033f4c4) ret=7ea7737b 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7737b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001422a0) ret=7ea773a1 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea773a1 000d:Call advapi32.RegOpenKeyExW(00000048,7eaa23b4 L"shell",00000000,00020019,0033f4c0) ret=7ea773ed 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea773ed 000d:Call advapi32.RegCloseKey(00000048) ret=7ea773fd 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea773fd 000d:Call advapi32.RegOpenKeyExW(0000004c,7ec5ed44 L"open",00000000,00020019,0033f4bc) ret=7ea77433 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea77433 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ea77459 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77459 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea77467 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea77467 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142288) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=80070002 ret=7ec54638 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001424e8) ret=7ec598ff 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec598ff 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59922 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59922 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142500) ret=7ec59945 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59945 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141260) ret=7ec59968 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59968 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec5998b 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec5998b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec599ae 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec599ae 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec599d1 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec599d1 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141280) ret=7ec599f5 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec599f5 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59a18 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a18 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59a3b 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a3b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59a5e 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a5e 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59a81 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a81 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,0000000f,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00140a58 L".ini",ffffffff,00000000,00000000,00000000,00000000) ret=7ec53b8b 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000005 ret=7ec53b8b 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000005) ret=7ec53bad 000d:Ret ntdll.RtlAllocateHeap() retval=001424e8 ret=7ec53bad 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00140a58 L".ini",ffffffff,001424e8,00000005,00000000,00000000) ret=7ec53bf1 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000005 ret=7ec53bf1 000d:Call shlwapi.AssocQueryStringW(00000000,00000003,00140a58,00000000,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00142500 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".ini",00000000,00020019,00142508) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,0014250c) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f4c8) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=00141260 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00141260,0033f4c8) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegGetValueW(80000000,00141260 L"inifile",00000000,00000002,00000000,00000000,0033f79c) ret=7ea77e3e 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77e3e 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,0000002e) ret=7ea77fc6 000d:Ret ntdll.RtlAllocateHeap() retval=00141278 ret=7ea77fc6 000d:Call advapi32.RegGetValueW(80000000,00141260 L"inifile",00000000,00000002,00000000,00141278,0033f79c) ret=7ea7800c 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea7800c 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141278) ret=7ea78066 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea78066 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141260) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142500) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000001 ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,0000002e) ret=7ec54661 000d:Ret ntdll.RtlAllocateHeap() retval=00141260 ret=7ec54661 000d:Call shlwapi.AssocQueryStringW(00000000,00000003,00140a58,00000000,00141260 L"\2670\0014\0120\0011ile",0033f8c8) ret=7ec54693 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00142500 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".ini",00000000,00020019,00142508) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,0014250c) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f4c8) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=00141298 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00141298,0033f4c8) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegGetValueW(80000000,00141298 L"inifile",00000000,00000002,00000000,00000000,0033f79c) ret=7ea77e3e 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77e3e 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,0000002e) ret=7ea77fc6 000d:Ret ntdll.RtlAllocateHeap() retval=001412b0 ret=7ea77fc6 000d:Call advapi32.RegGetValueW(80000000,00141298 L"inifile",00000000,00000002,00000000,001412b0,0033f79c) ret=7ea7800c 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea7800c 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001412b0) ret=7ea78066 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea78066 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141298) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142500) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000000 ret=7ec54693 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00141260 L"Configuration Settings",ffffffff,00000000,00000000,00000000,00000000) ret=7ec53b8b 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000017 ret=7ec53b8b 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000017) ret=7ec53bad 000d:Ret ntdll.RtlAllocateHeap() retval=00142500 ret=7ec53bad 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00141260 L"Configuration Settings",ffffffff,00142500,00000017,00000000,00000000) ret=7ec53bf1 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000017 ret=7ec53bf1 000d:Call shlwapi.AssocQueryStringW(00000000,0000000f,00140a58,00000000,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00141298 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".ini",00000000,00020019,001412a0) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,001412a4) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f4c8) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=001412b0 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,001412b0,0033f4c8) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegOpenKeyExW(80000000,001412b0 L"inifile",00000000,00020019,0033f79c) ret=7ea77d33 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea77d33 000d:Call advapi32.RegGetValueW(00000048,7eaa22b6 L"DefaultIcon",00000000,00000002,00000000,00000000,0033f7a0) ret=7ea780bd 000d:Ret advapi32.RegGetValueW() retval=00000002 ret=7ea780bd 000d:Call advapi32.RegCloseKey(00000048) ret=7ea780e4 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea780e4 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001412b0) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141298) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=80070002 ret=7ec54638 000d:Call shlwapi.AssocQueryStringW(00000000,0000000e,00140a58,00000000,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00141298 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".ini",00000000,00020019,001412a0) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,001412a4) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegGetValueW(00000044,00000000,7eaa22ce L"Content Type",00000002,00000000,00000000,0033f7a4) ret=7ea77c08 000d:Ret advapi32.RegGetValueW() retval=00000002 ret=7ea77c08 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141298) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=80070002 ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00141298 ret=7ec55c75 000d:Call shlwapi.AssocQueryStringW(00000000,00000001,00140a58,7ec5ed44,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=001422a0 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".ini",00000000,00020019,001422a8) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,001422ac) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f458) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=001422b8 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,001422b8,0033f458) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegOpenKeyExW(80000000,001422b8 L"inifile",00000000,00020019,0033f4c4) ret=7ea7737b 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7737b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001422b8) ret=7ea773a1 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea773a1 000d:Call advapi32.RegOpenKeyExW(00000048,7eaa23b4 L"shell",00000000,00020019,0033f4c0) ret=7ea773ed 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea773ed 000d:Call advapi32.RegCloseKey(00000048) ret=7ea773fd 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea773fd 000d:Call advapi32.RegOpenKeyExW(0000004c,7ec5ed44 L"open",00000000,00020019,0033f4bc) ret=7ea77433 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea77433 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ea77459 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77459 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea77467 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea77467 000d:Call advapi32.RegOpenKeyExW(00000048,7eaa23c0 L"command",00000000,00020019,0033f4c8) ret=7ea7749f 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7749f 000d:Call advapi32.RegCloseKey(00000048) ret=7ea774af 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774af 000d:Call advapi32.RegQueryValueExW(0000004c,00000000,00000000,00000000,00000000,0033f458) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000046) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=001422b8 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(0000004c,00000000,00000000,00000000,001422b8,0033f458) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea774d3 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774d3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001422b8) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001422a0) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000001 ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000046) ret=7ec54661 000d:Ret ntdll.RtlAllocateHeap() retval=001422a0 ret=7ec54661 000d:Call shlwapi.AssocQueryStringW(00000000,00000001,00140a58,7ec5ed44,001422a0 L"\0100\0011\00f0\0011D",0033f8c8) ret=7ec54693 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=001422f0 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".ini",00000000,00020019,001422f8) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,001422fc) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f458) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=00142308 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00142308,0033f458) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegOpenKeyExW(80000000,00142308 L"inifile",00000000,00020019,0033f4c4) ret=7ea7737b 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7737b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142308) ret=7ea773a1 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea773a1 000d:Call advapi32.RegOpenKeyExW(00000048,7eaa23b4 L"shell",00000000,00020019,0033f4c0) ret=7ea773ed 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea773ed 000d:Call advapi32.RegCloseKey(00000048) ret=7ea773fd 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea773fd 000d:Call advapi32.RegOpenKeyExW(0000004c,7ec5ed44 L"open",00000000,00020019,0033f4bc) ret=7ea77433 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea77433 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ea77459 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77459 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea77467 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea77467 000d:Call advapi32.RegOpenKeyExW(00000048,7eaa23c0 L"command",00000000,00020019,0033f4c8) ret=7ea7749f 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7749f 000d:Call advapi32.RegCloseKey(00000048) ret=7ea774af 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774af 000d:Call advapi32.RegQueryValueExW(0000004c,00000000,00000000,00000000,00000000,0033f458) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000046) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=00142308 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(0000004c,00000000,00000000,00000000,00142308,0033f458) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea774d3 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774d3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142308) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001422f0) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000000 ret=7ec54693 000d:Call shlwapi.AssocQueryStringW(00000000,00000004,00140a58,00000000,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=001422f0 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".ini",00000000,00020019,001422f8) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,001422fc) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f418) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=00142308 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00142308,0033f418) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegOpenKeyExW(80000000,00142308 L"inifile",00000000,00020019,0033f484) ret=7ea7737b 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7737b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142308) ret=7ea773a1 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea773a1 000d:Call advapi32.RegOpenKeyExW(00000048,7eaa23b4 L"shell",00000000,00020019,0033f480) ret=7ea773ed 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea773ed 000d:Call advapi32.RegCloseKey(00000048) ret=7ea773fd 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea773fd 000d:Call advapi32.RegQueryValueExW(0000004c,00000000,00000000,00000000,00000000,0033f418) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000002 ret=7ea7722c 000d:Call advapi32.RegQueryInfoKeyW(0000004c,00000000,00000000,00000000,00000000,0033f470,00000000,00000000,00000000,00000000,00000000,00000000) ret=7ea77568 000d:Ret advapi32.RegQueryInfoKeyW() retval=00000000 ret=7ea77568 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,0000000c) ret=7ea7759a 000d:Ret ntdll.RtlAllocateHeap() retval=00142308 ret=7ea7759a 000d:Call advapi32.RegEnumKeyExW(0000004c,00000000,00142308,0033f470,00000000,00000000,00000000,00000000) ret=7ea775df 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ea775df 000d:Call advapi32.RegOpenKeyExW(0000004c,00142308 L"open",00000000,00020019,0033f47c) ret=7ea77433 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea77433 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142308) ret=7ea77459 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77459 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea77467 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea77467 000d:Call advapi32.RegOpenKeyExW(00000048,7eaa23c0 L"command",00000000,00020019,0033f488) ret=7ea7749f 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7749f 000d:Call advapi32.RegCloseKey(00000048) ret=7ea774af 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774af 000d:Call advapi32.RegQueryValueExW(0000004c,00000000,00000000,00000000,00000000,0033f418) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000046) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=00142308 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(0000004c,00000000,00000000,00000000,00142308,0033f418) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea774d3 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774d3 000d:Call KERNEL32.SearchPathW(00000000,00142308 L"C:\\windows\\system32\\notepad.exe",00000000,00000104,0033f542,00000000) ret=7ea776c0 000d:Ret KERNEL32.SearchPathW() retval=0000001f ret=7ea776c0 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142308) ret=7ea776e6 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea776e6 000d:Call version.GetFileVersionInfoSizeW(0033f542 L"C:\\windows\\system32\\notepad.exe",0033f79c) ret=7ea77c71 000d:Call KERNEL32.GetModuleHandleExW(00000000,0033f542,0033f408) ret=7e23d460 000d:Ret KERNEL32.GetModuleHandleExW() retval=00000000 ret=7e23d460 000d:Call KERNEL32.LoadLibraryExW(0033f542 L"C:\\windows\\system32\\notepad.exe",00000000,00000002) ret=7e23d53c 000d:Ret KERNEL32.LoadLibraryExW() retval=00450001 ret=7e23d53c 000d:Call KERNEL32.FindResourceW(00450001,00000001,00000010) ret=7e23d48a 000d:Ret KERNEL32.FindResourceW() retval=00000000 ret=7e23d48a 000d:Call KERNEL32.FreeLibrary(00450001) ret=7e23d4af 000d:Ret KERNEL32.FreeLibrary() retval=00000001 ret=7e23d4af 000d:Ret version.GetFileVersionInfoSizeW() retval=00000000 ret=7ea77c71 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001422f0) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000001 ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec54661 000d:Ret ntdll.RtlAllocateHeap() retval=001422f0 ret=7ec54661 000d:Call shlwapi.AssocQueryStringW(00000000,00000004,00140a58,00000000,001422f0 L"\00f0\0011\00e0\0011D",0033f8c8) ret=7ec54693 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00142308 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".ini",00000000,00020019,00142310) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,00142314) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f418) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=00142320 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00142320,0033f418) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegOpenKeyExW(80000000,00142320 L"inifile",00000000,00020019,0033f484) ret=7ea7737b 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7737b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142320) ret=7ea773a1 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea773a1 000d:Call advapi32.RegOpenKeyExW(00000048,7eaa23b4 L"shell",00000000,00020019,0033f480) ret=7ea773ed 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea773ed 000d:Call advapi32.RegCloseKey(00000048) ret=7ea773fd 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea773fd 000d:Call advapi32.RegQueryValueExW(0000004c,00000000,00000000,00000000,00000000,0033f418) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000002 ret=7ea7722c 000d:Call advapi32.RegQueryInfoKeyW(0000004c,00000000,00000000,00000000,00000000,0033f470,00000000,00000000,00000000,00000000,00000000,00000000) ret=7ea77568 000d:Ret advapi32.RegQueryInfoKeyW() retval=00000000 ret=7ea77568 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,0000000c) ret=7ea7759a 000d:Ret ntdll.RtlAllocateHeap() retval=00142320 ret=7ea7759a 000d:Call advapi32.RegEnumKeyExW(0000004c,00000000,00142320,0033f470,00000000,00000000,00000000,00000000) ret=7ea775df 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ea775df 000d:Call advapi32.RegOpenKeyExW(0000004c,00142320 L"open",00000000,00020019,0033f47c) ret=7ea77433 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea77433 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142320) ret=7ea77459 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77459 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea77467 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea77467 000d:Call advapi32.RegOpenKeyExW(00000048,7eaa23c0 L"command",00000000,00020019,0033f488) ret=7ea7749f 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7749f 000d:Call advapi32.RegCloseKey(00000048) ret=7ea774af 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774af 000d:Call advapi32.RegQueryValueExW(0000004c,00000000,00000000,00000000,00000000,0033f418) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000046) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=00142320 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(0000004c,00000000,00000000,00000000,00142320,0033f418) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea774d3 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774d3 000d:Call KERNEL32.SearchPathW(00000000,00142320 L"C:\\windows\\system32\\notepad.exe",00000000,00000104,0033f542,00000000) ret=7ea776c0 000d:Ret KERNEL32.SearchPathW() retval=0000001f ret=7ea776c0 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142320) ret=7ea776e6 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea776e6 000d:Call version.GetFileVersionInfoSizeW(0033f542 L"C:\\windows\\system32\\notepad.exe",0033f79c) ret=7ea77c71 000d:Call KERNEL32.GetModuleHandleExW(00000000,0033f542,0033f408) ret=7e23d460 000d:Ret KERNEL32.GetModuleHandleExW() retval=00000000 ret=7e23d460 000d:Call KERNEL32.LoadLibraryExW(0033f542 L"C:\\windows\\system32\\notepad.exe",00000000,00000002) ret=7e23d53c 000d:Ret KERNEL32.LoadLibraryExW() retval=00450001 ret=7e23d53c 000d:Call KERNEL32.FindResourceW(00450001,00000001,00000010) ret=7e23d48a 000d:Ret KERNEL32.FindResourceW() retval=00000000 ret=7e23d48a 000d:Call KERNEL32.FreeLibrary(00450001) ret=7e23d4af 000d:Ret KERNEL32.FreeLibrary() retval=00000001 ret=7e23d4af 000d:Ret version.GetFileVersionInfoSizeW() retval=00000000 ret=7ea77c71 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142308) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000000 ret=7ec54693 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,001422f0 L"notepad",ffffffff,00000000,00000000,00000000,00000000) ret=7ec53b8b 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000008 ret=7ec53b8b 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000008) ret=7ec53bad 000d:Ret ntdll.RtlAllocateHeap() retval=00142308 ret=7ec53bad 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,001422f0 L"notepad",ffffffff,00142308,00000008,00000000,00000000) ret=7ec53bf1 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000008 ret=7ec53bf1 000d:Call advapi32.RegGetValueW(80000000,00140a58 L".ini",00000000,00000002,00000000,00000000,0033f8cc) ret=7ec54717 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ec54717 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec54747 000d:Ret ntdll.RtlAllocateHeap() retval=00142320 ret=7ec54747 000d:Call advapi32.RegGetValueW(80000000,00140a58 L".ini",00000000,00000002,00000000,00142320,0033f8cc) ret=7ec54781 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ec54781 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00142320 L"inifile",ffffffff,00000000,00000000,00000000,00000000) ret=7ec53b8b 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000008 ret=7ec53b8b 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000008) ret=7ec53bad 000d:Ret ntdll.RtlAllocateHeap() retval=00142338 ret=7ec53bad 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00142320 L"inifile",ffffffff,00142338,00000008,00000000,00000000) ret=7ec53bf1 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000008 ret=7ec53bf1 000d:Call advapi32.RegCreateKeyW(80000001,7ec5ee60 L"Software\\Wine\\FileOpenAssociations",0033f8d0) ret=7ec547ef 000d:Ret advapi32.RegCreateKeyW() retval=00000000 ret=7ec547ef 000d:Call advapi32.RegGetValueA(00000044,001424e8 ".ini",7ec5e310 "MimeType",00000002,00000000,00000000,0033f8cc) ret=7ec54887 000d:Ret advapi32.RegGetValueA() retval=00000000 ret=7ec54887 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000021) ret=7ec548b7 000d:Ret ntdll.RtlAllocateHeap() retval=00142350 ret=7ec548b7 000d:Call advapi32.RegGetValueA(00000044,001424e8 ".ini",7ec5e310 "MimeType",00000002,00000000,00142350,0033f8cc) ret=7ec548f1 000d:Ret advapi32.RegGetValueA() retval=00000000 ret=7ec548f1 000d:Call KERNEL32.lstrcmpA(00142350 "application/x-wine-extension-ini",00141298 "application/x-wine-extension-ini") ret=7ec594ae 000d:Ret KERNEL32.lstrcmpA() retval=00000000 ret=7ec594ae 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142350) ret=7ec594e0 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec594e0 000d:Call advapi32.RegGetValueW(00000044,00140a58 L".ini",7ec5ee4a L"ProgID",00000002,00000000,00000000,0033f8cc) ret=7ec54717 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ec54717 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec54747 000d:Ret ntdll.RtlAllocateHeap() retval=00142350 ret=7ec54747 000d:Call advapi32.RegGetValueW(00000044,00140a58 L".ini",7ec5ee4a L"ProgID",00000002,00000000,00142350,0033f8cc) ret=7ec54781 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ec54781 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142350) ret=7ec59557 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59557 000d:Call advapi32.RegGetValueA(00000044,001424e8 ".ini",7ec5e319 "AppName",00000002,00000000,00000000,0033f8cc) ret=7ec54887 000d:Ret advapi32.RegGetValueA() retval=00000000 ret=7ec54887 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000008) ret=7ec548b7 000d:Ret ntdll.RtlAllocateHeap() retval=00142350 ret=7ec548b7 000d:Call advapi32.RegGetValueA(00000044,001424e8 ".ini",7ec5e319 "AppName",00000002,00000000,00142350,0033f8cc) ret=7ec548f1 000d:Ret advapi32.RegGetValueA() retval=00000000 ret=7ec548f1 000d:Call KERNEL32.lstrcmpA(00142350 "notepad",00142308 "notepad") ret=7ec59580 000d:Ret KERNEL32.lstrcmpA() retval=00000000 ret=7ec59580 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142350) ret=7ec595ae 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec595ae 000d:Call advapi32.RegGetValueW(00000044,00140a58 L".ini",7ec5ee3a L"DocName",00000002,00000000,00000000,0033f8cc) ret=7ec54717 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ec54717 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,0000002e) ret=7ec54747 000d:Ret ntdll.RtlAllocateHeap() retval=00142350 ret=7ec54747 000d:Call advapi32.RegGetValueW(00000044,00140a58 L".ini",7ec5ee3a L"DocName",00000002,00000000,00142350,0033f8cc) ret=7ec54781 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ec54781 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142350) ret=7ec59641 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59641 000d:Call advapi32.RegCloseKey(00000044) ret=7ec5964f 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ec5964f 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001424e8) ret=7ec598ff 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec598ff 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001422a0) ret=7ec59922 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59922 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141260) ret=7ec59945 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59945 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142500) ret=7ec59968 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59968 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec5998b 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec5998b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec599ae 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec599ae 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec599d1 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec599d1 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141298) ret=7ec599f5 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec599f5 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001422f0) ret=7ec59a18 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a18 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142308) ret=7ec59a3b 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a3b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142320) ret=7ec59a5e 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a5e 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142338) ret=7ec59a81 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a81 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,00000010,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00140a58 L".its",ffffffff,00000000,00000000,00000000,00000000) ret=7ec53b8b 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000005 ret=7ec53b8b 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000005) ret=7ec53bad 000d:Ret ntdll.RtlAllocateHeap() retval=001424e8 ret=7ec53bad 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00140a58 L".its",ffffffff,001424e8,00000005,00000000,00000000) ret=7ec53bf1 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000005 ret=7ec53bf1 000d:Call shlwapi.AssocQueryStringW(00000000,00000003,00140a58,00000000,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00142500 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".its",00000000,00020019,00142508) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,0014250c) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f4c8) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000012) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=00141260 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00141260,0033f4c8) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegGetValueW(80000000,00141260 L"ITS File",00000000,00000002,00000000,00000000,0033f79c) ret=7ea77e3e 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77e3e 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,0000002c) ret=7ea77fc6 000d:Ret ntdll.RtlAllocateHeap() retval=00141280 ret=7ea77fc6 000d:Call advapi32.RegGetValueW(80000000,00141260 L"ITS File",00000000,00000002,00000000,00141280,0033f79c) ret=7ea7800c 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea7800c 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141280) ret=7ea78066 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea78066 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141260) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142500) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000001 ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,0000002c) ret=7ec54661 000d:Ret ntdll.RtlAllocateHeap() retval=00141260 ret=7ec54661 000d:Call shlwapi.AssocQueryStringW(00000000,00000003,00140a58,00000000,00141260 L"\2670\0014\0120\0011File",0033f8c8) ret=7ec54693 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00142500 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".its",00000000,00020019,00142508) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,0014250c) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f4c8) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000012) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=00141298 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00141298,0033f4c8) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegGetValueW(80000000,00141298 L"ITS File",00000000,00000002,00000000,00000000,0033f79c) ret=7ea77e3e 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77e3e 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,0000002c) ret=7ea77fc6 000d:Ret ntdll.RtlAllocateHeap() retval=001412b8 ret=7ea77fc6 000d:Call advapi32.RegGetValueW(80000000,00141298 L"ITS File",00000000,00000002,00000000,001412b8,0033f79c) ret=7ea7800c 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea7800c 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001412b8) ret=7ea78066 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea78066 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141298) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142500) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000000 ret=7ec54693 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00141260 L"Internet Document Set",ffffffff,00000000,00000000,00000000,00000000) ret=7ec53b8b 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000016 ret=7ec53b8b 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000016) ret=7ec53bad 000d:Ret ntdll.RtlAllocateHeap() retval=00142500 ret=7ec53bad 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00141260 L"Internet Document Set",ffffffff,00142500,00000016,00000000,00000000) ret=7ec53bf1 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000016 ret=7ec53bf1 000d:Call shlwapi.AssocQueryStringW(00000000,0000000f,00140a58,00000000,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00141298 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".its",00000000,00020019,001412a0) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,001412a4) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f4c8) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000012) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=001412b0 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,001412b0,0033f4c8) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegOpenKeyExW(80000000,001412b0 L"ITS File",00000000,00020019,0033f79c) ret=7ea77d33 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea77d33 000d:Call advapi32.RegGetValueW(00000048,7eaa22b6 L"DefaultIcon",00000000,00000002,00000000,00000000,0033f7a0) ret=7ea780bd 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea780bd 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000016) ret=7ea7818c 000d:Ret ntdll.RtlAllocateHeap() retval=001412d0 ret=7ea7818c 000d:Call advapi32.RegGetValueW(00000048,7eaa22b6 L"DefaultIcon",00000000,00000002,00000000,001412d0,0033f7a0) ret=7ea781d4 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea781d4 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001412d0) ret=7ea7822e 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea7822e 000d:Call advapi32.RegCloseKey(00000048) ret=7ea780e4 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea780e4 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001412b0) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141298) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000001 ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000016) ret=7ec54661 000d:Ret ntdll.RtlAllocateHeap() retval=00141298 ret=7ec54661 000d:Call shlwapi.AssocQueryStringW(00000000,0000000f,00140a58,00000000,00141298 L"\2670\0014\0120\0011D",0033f8c8) ret=7ec54693 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=001412b8 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".its",00000000,00020019,001412c0) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,001412c4) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f4c8) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000012) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=001412d0 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,001412d0,0033f4c8) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegOpenKeyExW(80000000,001412d0 L"ITS File",00000000,00020019,0033f79c) ret=7ea77d33 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea77d33 000d:Call advapi32.RegGetValueW(00000048,7eaa22b6 L"DefaultIcon",00000000,00000002,00000000,00000000,0033f7a0) ret=7ea780bd 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea780bd 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000016) ret=7ea7818c 000d:Ret ntdll.RtlAllocateHeap() retval=001412f0 ret=7ea7818c 000d:Call advapi32.RegGetValueW(00000048,7eaa22b6 L"DefaultIcon",00000000,00000002,00000000,001412f0,0033f7a0) ret=7ea781d4 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea781d4 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001412f0) ret=7ea7822e 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea7822e 000d:Call advapi32.RegCloseKey(00000048) ret=7ea780e4 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea780e4 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001412d0) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001412b8) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000000 ret=7ec54693 000d:Call shlwapi.AssocQueryStringW(00000000,0000000e,00140a58,00000000,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=001412b8 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".its",00000000,00020019,001412c0) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,001412c4) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegGetValueW(00000044,00000000,7eaa22ce L"Content Type",00000002,00000000,00000000,0033f7a4) ret=7ea77c08 000d:Ret advapi32.RegGetValueW() retval=00000002 ret=7ea77c08 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001412b8) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=80070002 ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=001412b8 ret=7ec55c75 000d:Call shlwapi.AssocQueryStringW(00000000,00000001,00140a58,7ec5ed44,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=001422c0 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".its",00000000,00020019,001422c8) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,001422cc) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f458) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000012) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=001422d8 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,001422d8,0033f458) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegOpenKeyExW(80000000,001422d8 L"ITS File",00000000,00020019,0033f4c4) ret=7ea7737b 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7737b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001422d8) ret=7ea773a1 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea773a1 000d:Call advapi32.RegOpenKeyExW(00000048,7eaa23b4 L"shell",00000000,00020019,0033f4c0) ret=7ea773ed 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea773ed 000d:Call advapi32.RegCloseKey(00000048) ret=7ea773fd 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea773fd 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001422c0) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=80070002 ret=7ec54638 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001424e8) ret=7ec598ff 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec598ff 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59922 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59922 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141260) ret=7ec59945 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59945 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142500) ret=7ec59968 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59968 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141298) ret=7ec5998b 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec5998b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec599ae 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec599ae 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec599d1 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec599d1 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001412b8) ret=7ec599f5 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec599f5 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59a18 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a18 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59a3b 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a3b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59a5e 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a5e 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59a81 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a81 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,00000011,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00140a58 L".jfif",ffffffff,00000000,00000000,00000000,00000000) ret=7ec53b8b 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000006 ret=7ec53b8b 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000006) ret=7ec53bad 000d:Ret ntdll.RtlAllocateHeap() retval=001424e8 ret=7ec53bad 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00140a58 L".jfif",ffffffff,001424e8,00000006,00000000,00000000) ret=7ec53bf1 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000006 ret=7ec53bf1 000d:Call shlwapi.AssocQueryStringW(00000000,00000003,00140a58,00000000,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00142500 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".jfif",00000000,00020019,00142508) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,0014250c) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f4c8) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000014) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=00141260 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00141260,0033f4c8) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegGetValueW(80000000,00141260 L"pjpegfile",00000000,00000002,00000000,00000000,0033f79c) ret=7ea77e3e 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77e3e 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000016) ret=7ea77fc6 000d:Ret ntdll.RtlAllocateHeap() retval=00141280 ret=7ea77fc6 000d:Call advapi32.RegGetValueW(80000000,00141260 L"pjpegfile",00000000,00000002,00000000,00141280,0033f79c) ret=7ea7800c 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea7800c 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141280) ret=7ea78066 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea78066 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141260) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142500) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000001 ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000016) ret=7ec54661 000d:Ret ntdll.RtlAllocateHeap() retval=00142500 ret=7ec54661 000d:Call shlwapi.AssocQueryStringW(00000000,00000003,00140a58,00000000,00142500 L"\00a0\0011\0090\0011D",0033f8c8) ret=7ec54693 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00141260 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".jfif",00000000,00020019,00141268) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,0014126c) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f4c8) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000014) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=00141278 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00141278,0033f4c8) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegGetValueW(80000000,00141278 L"pjpegfile",00000000,00000002,00000000,00000000,0033f79c) ret=7ea77e3e 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77e3e 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000016) ret=7ea77fc6 000d:Ret ntdll.RtlAllocateHeap() retval=00141298 ret=7ea77fc6 000d:Call advapi32.RegGetValueW(80000000,00141278 L"pjpegfile",00000000,00000002,00000000,00141298,0033f79c) ret=7ea7800c 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea7800c 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141298) ret=7ea78066 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea78066 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141278) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141260) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000000 ret=7ec54693 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00142500 L"JPEG Image",ffffffff,00000000,00000000,00000000,00000000) ret=7ec53b8b 000d:Ret KERNEL32.WideCharToMultiByte() retval=0000000b ret=7ec53b8b 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,0000000b) ret=7ec53bad 000d:Ret ntdll.RtlAllocateHeap() retval=00141260 ret=7ec53bad 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00142500 L"JPEG Image",ffffffff,00141260,0000000b,00000000,00000000) ret=7ec53bf1 000d:Ret KERNEL32.WideCharToMultiByte() retval=0000000b ret=7ec53bf1 000d:Call shlwapi.AssocQueryStringW(00000000,0000000f,00140a58,00000000,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00141278 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".jfif",00000000,00020019,00141280) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,00141284) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f4c8) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000014) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=00141290 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00141290,0033f4c8) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegOpenKeyExW(80000000,00141290 L"pjpegfile",00000000,00020019,0033f79c) ret=7ea77d33 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea77d33 000d:Call advapi32.RegGetValueW(00000048,7eaa22b6 L"DefaultIcon",00000000,00000002,00000000,00000000,0033f7a0) ret=7ea780bd 000d:Ret advapi32.RegGetValueW() retval=00000002 ret=7ea780bd 000d:Call advapi32.RegCloseKey(00000048) ret=7ea780e4 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea780e4 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141290) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141278) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=80070002 ret=7ec54638 000d:Call shlwapi.AssocQueryStringW(00000000,0000000e,00140a58,00000000,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00141278 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".jfif",00000000,00020019,00141280) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,00141284) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegGetValueW(00000044,00000000,7eaa22ce L"Content Type",00000002,00000000,00000000,0033f7a4) ret=7ea77c08 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77c08 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000016) ret=7ea77f05 000d:Ret ntdll.RtlAllocateHeap() retval=00141290 ret=7ea77f05 000d:Call advapi32.RegGetValueW(00000044,00000000,7eaa22ce L"Content Type",00000002,00000000,00141290,0033f7a4) ret=7ea77f50 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77f50 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141290) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141278) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000001 ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000016) ret=7ec54661 000d:Ret ntdll.RtlAllocateHeap() retval=00141278 ret=7ec54661 000d:Call shlwapi.AssocQueryStringW(00000000,0000000e,00140a58,00000000,00141278 L"\2670\0014\0120\0011D",0033f8c8) ret=7ec54693 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00141298 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".jfif",00000000,00020019,001412a0) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,001412a4) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegGetValueW(00000044,00000000,7eaa22ce L"Content Type",00000002,00000000,00000000,0033f7a4) ret=7ea77c08 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77c08 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000016) ret=7ea77f05 000d:Ret ntdll.RtlAllocateHeap() retval=001412b0 ret=7ea77f05 000d:Call advapi32.RegGetValueW(00000044,00000000,7eaa22ce L"Content Type",00000002,00000000,001412b0,0033f7a4) ret=7ea77f50 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77f50 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001412b0) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141298) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000000 ret=7ec54693 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00141298 ret=7ec55c75 000d:Call shlwapi.AssocQueryStringW(00000000,00000001,00140a58,7ec5ed44,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=001422a0 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".jfif",00000000,00020019,001422a8) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,001422ac) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f458) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000014) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=001422b8 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,001422b8,0033f458) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegOpenKeyExW(80000000,001422b8 L"pjpegfile",00000000,00020019,0033f4c4) ret=7ea7737b 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7737b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001422b8) ret=7ea773a1 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea773a1 000d:Call advapi32.RegOpenKeyExW(00000048,7eaa23b4 L"shell",00000000,00020019,0033f4c0) ret=7ea773ed 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea773ed 000d:Call advapi32.RegCloseKey(00000048) ret=7ea773fd 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea773fd 000d:Call advapi32.RegOpenKeyExW(0000004c,7ec5ed44 L"open",00000000,00020019,0033f4bc) ret=7ea77433 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea77433 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ea77459 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77459 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea77467 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea77467 000d:Call advapi32.RegOpenKeyExW(00000048,7eaa23c0 L"command",00000000,00020019,0033f4c8) ret=7ea7749f 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea7749f 000d:Call advapi32.RegCloseKey(00000048) ret=7ea774af 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774af 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001422a0) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=80070002 ret=7ec54638 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001424e8) ret=7ec598ff 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec598ff 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59922 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59922 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142500) ret=7ec59945 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59945 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141260) ret=7ec59968 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59968 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec5998b 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec5998b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec599ae 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec599ae 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141278) ret=7ec599d1 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec599d1 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141298) ret=7ec599f5 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec599f5 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59a18 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a18 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59a3b 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a3b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59a5e 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a5e 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59a81 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a81 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,00000012,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00140a58 L".jpe",ffffffff,00000000,00000000,00000000,00000000) ret=7ec53b8b 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000005 ret=7ec53b8b 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000005) ret=7ec53bad 000d:Ret ntdll.RtlAllocateHeap() retval=001424e8 ret=7ec53bad 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00140a58 L".jpe",ffffffff,001424e8,00000005,00000000,00000000) ret=7ec53bf1 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000005 ret=7ec53bf1 000d:Call shlwapi.AssocQueryStringW(00000000,00000003,00140a58,00000000,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00142500 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".jpe",00000000,00020019,00142508) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,0014250c) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f4c8) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000012) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=00141260 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00141260,0033f4c8) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegGetValueW(80000000,00141260 L"jpegfile",00000000,00000002,00000000,00000000,0033f79c) ret=7ea77e3e 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77e3e 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000016) ret=7ea77fc6 000d:Ret ntdll.RtlAllocateHeap() retval=00141280 ret=7ea77fc6 000d:Call advapi32.RegGetValueW(80000000,00141260 L"jpegfile",00000000,00000002,00000000,00141280,0033f79c) ret=7ea7800c 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea7800c 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141280) ret=7ea78066 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea78066 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141260) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142500) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000001 ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000016) ret=7ec54661 000d:Ret ntdll.RtlAllocateHeap() retval=00142500 ret=7ec54661 000d:Call shlwapi.AssocQueryStringW(00000000,00000003,00140a58,00000000,00142500 L"\00a0\0011\0090\0011D",0033f8c8) ret=7ec54693 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00141260 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".jpe",00000000,00020019,00141268) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,0014126c) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f4c8) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000012) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=00141278 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00141278,0033f4c8) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegGetValueW(80000000,00141278 L"jpegfile",00000000,00000002,00000000,00000000,0033f79c) ret=7ea77e3e 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77e3e 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000016) ret=7ea77fc6 000d:Ret ntdll.RtlAllocateHeap() retval=00141298 ret=7ea77fc6 000d:Call advapi32.RegGetValueW(80000000,00141278 L"jpegfile",00000000,00000002,00000000,00141298,0033f79c) ret=7ea7800c 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea7800c 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141298) ret=7ea78066 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea78066 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141278) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141260) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000000 ret=7ec54693 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00142500 L"JPEG Image",ffffffff,00000000,00000000,00000000,00000000) ret=7ec53b8b 000d:Ret KERNEL32.WideCharToMultiByte() retval=0000000b ret=7ec53b8b 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,0000000b) ret=7ec53bad 000d:Ret ntdll.RtlAllocateHeap() retval=00141260 ret=7ec53bad 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00142500 L"JPEG Image",ffffffff,00141260,0000000b,00000000,00000000) ret=7ec53bf1 000d:Ret KERNEL32.WideCharToMultiByte() retval=0000000b ret=7ec53bf1 000d:Call shlwapi.AssocQueryStringW(00000000,0000000f,00140a58,00000000,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00141278 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".jpe",00000000,00020019,00141280) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,00141284) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f4c8) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000012) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=00141290 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00141290,0033f4c8) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegOpenKeyExW(80000000,00141290 L"jpegfile",00000000,00020019,0033f79c) ret=7ea77d33 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea77d33 000d:Call advapi32.RegGetValueW(00000048,7eaa22b6 L"DefaultIcon",00000000,00000002,00000000,00000000,0033f7a0) ret=7ea780bd 000d:Ret advapi32.RegGetValueW() retval=00000002 ret=7ea780bd 000d:Call advapi32.RegCloseKey(00000048) ret=7ea780e4 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea780e4 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141290) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141278) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=80070002 ret=7ec54638 000d:Call shlwapi.AssocQueryStringW(00000000,0000000e,00140a58,00000000,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00141278 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".jpe",00000000,00020019,00141280) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,00141284) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegGetValueW(00000044,00000000,7eaa22ce L"Content Type",00000002,00000000,00000000,0033f7a4) ret=7ea77c08 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77c08 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000016) ret=7ea77f05 000d:Ret ntdll.RtlAllocateHeap() retval=00141290 ret=7ea77f05 000d:Call advapi32.RegGetValueW(00000044,00000000,7eaa22ce L"Content Type",00000002,00000000,00141290,0033f7a4) ret=7ea77f50 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77f50 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141290) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141278) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000001 ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000016) ret=7ec54661 000d:Ret ntdll.RtlAllocateHeap() retval=00141278 ret=7ec54661 000d:Call shlwapi.AssocQueryStringW(00000000,0000000e,00140a58,00000000,00141278 L"\2670\0014\0120\0011D",0033f8c8) ret=7ec54693 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00141298 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".jpe",00000000,00020019,001412a0) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,001412a4) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegGetValueW(00000044,00000000,7eaa22ce L"Content Type",00000002,00000000,00000000,0033f7a4) ret=7ea77c08 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77c08 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000016) ret=7ea77f05 000d:Ret ntdll.RtlAllocateHeap() retval=001412b0 ret=7ea77f05 000d:Call advapi32.RegGetValueW(00000044,00000000,7eaa22ce L"Content Type",00000002,00000000,001412b0,0033f7a4) ret=7ea77f50 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77f50 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001412b0) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141298) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000000 ret=7ec54693 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00141298 ret=7ec55c75 000d:Call shlwapi.AssocQueryStringW(00000000,00000001,00140a58,7ec5ed44,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=001422a0 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".jpe",00000000,00020019,001422a8) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,001422ac) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f458) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000012) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=001422b8 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,001422b8,0033f458) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegOpenKeyExW(80000000,001422b8 L"jpegfile",00000000,00020019,0033f4c4) ret=7ea7737b 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7737b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001422b8) ret=7ea773a1 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea773a1 000d:Call advapi32.RegOpenKeyExW(00000048,7eaa23b4 L"shell",00000000,00020019,0033f4c0) ret=7ea773ed 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea773ed 000d:Call advapi32.RegCloseKey(00000048) ret=7ea773fd 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea773fd 000d:Call advapi32.RegOpenKeyExW(0000004c,7ec5ed44 L"open",00000000,00020019,0033f4bc) ret=7ea77433 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea77433 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ea77459 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77459 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea77467 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea77467 000d:Call advapi32.RegOpenKeyExW(00000048,7eaa23c0 L"command",00000000,00020019,0033f4c8) ret=7ea7749f 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea7749f 000d:Call advapi32.RegCloseKey(00000048) ret=7ea774af 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774af 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001422a0) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=80070002 ret=7ec54638 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001424e8) ret=7ec598ff 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec598ff 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59922 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59922 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142500) ret=7ec59945 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59945 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141260) ret=7ec59968 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59968 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec5998b 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec5998b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec599ae 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec599ae 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141278) ret=7ec599d1 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec599d1 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141298) ret=7ec599f5 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec599f5 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59a18 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a18 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59a3b 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a3b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59a5e 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a5e 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59a81 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a81 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,00000013,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00140a58 L".jpeg",ffffffff,00000000,00000000,00000000,00000000) ret=7ec53b8b 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000006 ret=7ec53b8b 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000006) ret=7ec53bad 000d:Ret ntdll.RtlAllocateHeap() retval=001424e8 ret=7ec53bad 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00140a58 L".jpeg",ffffffff,001424e8,00000006,00000000,00000000) ret=7ec53bf1 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000006 ret=7ec53bf1 000d:Call shlwapi.AssocQueryStringW(00000000,00000003,00140a58,00000000,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00142500 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".jpeg",00000000,00020019,00142508) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,0014250c) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f4c8) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000012) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=00141260 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00141260,0033f4c8) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegGetValueW(80000000,00141260 L"jpegfile",00000000,00000002,00000000,00000000,0033f79c) ret=7ea77e3e 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77e3e 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000016) ret=7ea77fc6 000d:Ret ntdll.RtlAllocateHeap() retval=00141280 ret=7ea77fc6 000d:Call advapi32.RegGetValueW(80000000,00141260 L"jpegfile",00000000,00000002,00000000,00141280,0033f79c) ret=7ea7800c 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea7800c 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141280) ret=7ea78066 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea78066 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141260) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142500) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000001 ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000016) ret=7ec54661 000d:Ret ntdll.RtlAllocateHeap() retval=00142500 ret=7ec54661 000d:Call shlwapi.AssocQueryStringW(00000000,00000003,00140a58,00000000,00142500 L"\00a0\0011\0090\0011D",0033f8c8) ret=7ec54693 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00141260 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".jpeg",00000000,00020019,00141268) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,0014126c) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f4c8) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000012) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=00141278 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00141278,0033f4c8) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegGetValueW(80000000,00141278 L"jpegfile",00000000,00000002,00000000,00000000,0033f79c) ret=7ea77e3e 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77e3e 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000016) ret=7ea77fc6 000d:Ret ntdll.RtlAllocateHeap() retval=00141298 ret=7ea77fc6 000d:Call advapi32.RegGetValueW(80000000,00141278 L"jpegfile",00000000,00000002,00000000,00141298,0033f79c) ret=7ea7800c 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea7800c 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141298) ret=7ea78066 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea78066 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141278) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141260) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000000 ret=7ec54693 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00142500 L"JPEG Image",ffffffff,00000000,00000000,00000000,00000000) ret=7ec53b8b 000d:Ret KERNEL32.WideCharToMultiByte() retval=0000000b ret=7ec53b8b 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,0000000b) ret=7ec53bad 000d:Ret ntdll.RtlAllocateHeap() retval=00141260 ret=7ec53bad 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00142500 L"JPEG Image",ffffffff,00141260,0000000b,00000000,00000000) ret=7ec53bf1 000d:Ret KERNEL32.WideCharToMultiByte() retval=0000000b ret=7ec53bf1 000d:Call shlwapi.AssocQueryStringW(00000000,0000000f,00140a58,00000000,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00141278 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".jpeg",00000000,00020019,00141280) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,00141284) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f4c8) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000012) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=00141290 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00141290,0033f4c8) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegOpenKeyExW(80000000,00141290 L"jpegfile",00000000,00020019,0033f79c) ret=7ea77d33 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea77d33 000d:Call advapi32.RegGetValueW(00000048,7eaa22b6 L"DefaultIcon",00000000,00000002,00000000,00000000,0033f7a0) ret=7ea780bd 000d:Ret advapi32.RegGetValueW() retval=00000002 ret=7ea780bd 000d:Call advapi32.RegCloseKey(00000048) ret=7ea780e4 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea780e4 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141290) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141278) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=80070002 ret=7ec54638 000d:Call shlwapi.AssocQueryStringW(00000000,0000000e,00140a58,00000000,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00141278 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".jpeg",00000000,00020019,00141280) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,00141284) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegGetValueW(00000044,00000000,7eaa22ce L"Content Type",00000002,00000000,00000000,0033f7a4) ret=7ea77c08 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77c08 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000016) ret=7ea77f05 000d:Ret ntdll.RtlAllocateHeap() retval=00141290 ret=7ea77f05 000d:Call advapi32.RegGetValueW(00000044,00000000,7eaa22ce L"Content Type",00000002,00000000,00141290,0033f7a4) ret=7ea77f50 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77f50 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141290) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141278) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000001 ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000016) ret=7ec54661 000d:Ret ntdll.RtlAllocateHeap() retval=00141278 ret=7ec54661 000d:Call shlwapi.AssocQueryStringW(00000000,0000000e,00140a58,00000000,00141278 L"\2670\0014\0120\0011D",0033f8c8) ret=7ec54693 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00141298 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".jpeg",00000000,00020019,001412a0) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,001412a4) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegGetValueW(00000044,00000000,7eaa22ce L"Content Type",00000002,00000000,00000000,0033f7a4) ret=7ea77c08 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77c08 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000016) ret=7ea77f05 000d:Ret ntdll.RtlAllocateHeap() retval=001412b0 ret=7ea77f05 000d:Call advapi32.RegGetValueW(00000044,00000000,7eaa22ce L"Content Type",00000002,00000000,001412b0,0033f7a4) ret=7ea77f50 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77f50 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001412b0) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141298) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000000 ret=7ec54693 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00141298 ret=7ec55c75 000d:Call shlwapi.AssocQueryStringW(00000000,00000001,00140a58,7ec5ed44,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=001422a0 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".jpeg",00000000,00020019,001422a8) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,001422ac) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f458) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000012) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=001422b8 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,001422b8,0033f458) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegOpenKeyExW(80000000,001422b8 L"jpegfile",00000000,00020019,0033f4c4) ret=7ea7737b 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7737b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001422b8) ret=7ea773a1 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea773a1 000d:Call advapi32.RegOpenKeyExW(00000048,7eaa23b4 L"shell",00000000,00020019,0033f4c0) ret=7ea773ed 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea773ed 000d:Call advapi32.RegCloseKey(00000048) ret=7ea773fd 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea773fd 000d:Call advapi32.RegOpenKeyExW(0000004c,7ec5ed44 L"open",00000000,00020019,0033f4bc) ret=7ea77433 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea77433 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ea77459 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77459 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea77467 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea77467 000d:Call advapi32.RegOpenKeyExW(00000048,7eaa23c0 L"command",00000000,00020019,0033f4c8) ret=7ea7749f 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea7749f 000d:Call advapi32.RegCloseKey(00000048) ret=7ea774af 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774af 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001422a0) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=80070002 ret=7ec54638 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001424e8) ret=7ec598ff 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec598ff 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59922 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59922 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142500) ret=7ec59945 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59945 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141260) ret=7ec59968 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59968 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec5998b 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec5998b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec599ae 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec599ae 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141278) ret=7ec599d1 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec599d1 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141298) ret=7ec599f5 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec599f5 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59a18 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a18 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59a3b 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a3b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59a5e 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a5e 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59a81 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a81 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,00000014,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00140a58 L".jpg",ffffffff,00000000,00000000,00000000,00000000) ret=7ec53b8b 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000005 ret=7ec53b8b 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000005) ret=7ec53bad 000d:Ret ntdll.RtlAllocateHeap() retval=001424e8 ret=7ec53bad 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00140a58 L".jpg",ffffffff,001424e8,00000005,00000000,00000000) ret=7ec53bf1 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000005 ret=7ec53bf1 000d:Call shlwapi.AssocQueryStringW(00000000,00000003,00140a58,00000000,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00142500 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".jpg",00000000,00020019,00142508) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,0014250c) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f4c8) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000012) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=00141260 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00141260,0033f4c8) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegGetValueW(80000000,00141260 L"jpegfile",00000000,00000002,00000000,00000000,0033f79c) ret=7ea77e3e 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77e3e 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000016) ret=7ea77fc6 000d:Ret ntdll.RtlAllocateHeap() retval=00141280 ret=7ea77fc6 000d:Call advapi32.RegGetValueW(80000000,00141260 L"jpegfile",00000000,00000002,00000000,00141280,0033f79c) ret=7ea7800c 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea7800c 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141280) ret=7ea78066 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea78066 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141260) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142500) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000001 ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000016) ret=7ec54661 000d:Ret ntdll.RtlAllocateHeap() retval=00142500 ret=7ec54661 000d:Call shlwapi.AssocQueryStringW(00000000,00000003,00140a58,00000000,00142500 L"\00a0\0011\0090\0011D",0033f8c8) ret=7ec54693 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00141260 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".jpg",00000000,00020019,00141268) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,0014126c) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f4c8) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000012) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=00141278 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00141278,0033f4c8) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegGetValueW(80000000,00141278 L"jpegfile",00000000,00000002,00000000,00000000,0033f79c) ret=7ea77e3e 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77e3e 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000016) ret=7ea77fc6 000d:Ret ntdll.RtlAllocateHeap() retval=00141298 ret=7ea77fc6 000d:Call advapi32.RegGetValueW(80000000,00141278 L"jpegfile",00000000,00000002,00000000,00141298,0033f79c) ret=7ea7800c 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea7800c 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141298) ret=7ea78066 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea78066 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141278) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141260) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000000 ret=7ec54693 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00142500 L"JPEG Image",ffffffff,00000000,00000000,00000000,00000000) ret=7ec53b8b 000d:Ret KERNEL32.WideCharToMultiByte() retval=0000000b ret=7ec53b8b 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,0000000b) ret=7ec53bad 000d:Ret ntdll.RtlAllocateHeap() retval=00141260 ret=7ec53bad 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00142500 L"JPEG Image",ffffffff,00141260,0000000b,00000000,00000000) ret=7ec53bf1 000d:Ret KERNEL32.WideCharToMultiByte() retval=0000000b ret=7ec53bf1 000d:Call shlwapi.AssocQueryStringW(00000000,0000000f,00140a58,00000000,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00141278 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".jpg",00000000,00020019,00141280) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,00141284) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f4c8) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000012) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=00141290 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00141290,0033f4c8) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegOpenKeyExW(80000000,00141290 L"jpegfile",00000000,00020019,0033f79c) ret=7ea77d33 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea77d33 000d:Call advapi32.RegGetValueW(00000048,7eaa22b6 L"DefaultIcon",00000000,00000002,00000000,00000000,0033f7a0) ret=7ea780bd 000d:Ret advapi32.RegGetValueW() retval=00000002 ret=7ea780bd 000d:Call advapi32.RegCloseKey(00000048) ret=7ea780e4 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea780e4 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141290) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141278) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=80070002 ret=7ec54638 000d:Call shlwapi.AssocQueryStringW(00000000,0000000e,00140a58,00000000,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00141278 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".jpg",00000000,00020019,00141280) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,00141284) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegGetValueW(00000044,00000000,7eaa22ce L"Content Type",00000002,00000000,00000000,0033f7a4) ret=7ea77c08 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77c08 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000016) ret=7ea77f05 000d:Ret ntdll.RtlAllocateHeap() retval=00141290 ret=7ea77f05 000d:Call advapi32.RegGetValueW(00000044,00000000,7eaa22ce L"Content Type",00000002,00000000,00141290,0033f7a4) ret=7ea77f50 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77f50 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141290) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141278) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000001 ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000016) ret=7ec54661 000d:Ret ntdll.RtlAllocateHeap() retval=00141278 ret=7ec54661 000d:Call shlwapi.AssocQueryStringW(00000000,0000000e,00140a58,00000000,00141278 L"\2670\0014\0120\0011D",0033f8c8) ret=7ec54693 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00141298 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".jpg",00000000,00020019,001412a0) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,001412a4) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegGetValueW(00000044,00000000,7eaa22ce L"Content Type",00000002,00000000,00000000,0033f7a4) ret=7ea77c08 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77c08 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000016) ret=7ea77f05 000d:Ret ntdll.RtlAllocateHeap() retval=001412b0 ret=7ea77f05 000d:Call advapi32.RegGetValueW(00000044,00000000,7eaa22ce L"Content Type",00000002,00000000,001412b0,0033f7a4) ret=7ea77f50 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77f50 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001412b0) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141298) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000000 ret=7ec54693 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00141298 ret=7ec55c75 000d:Call shlwapi.AssocQueryStringW(00000000,00000001,00140a58,7ec5ed44,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=001422a0 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".jpg",00000000,00020019,001422a8) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,001422ac) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f458) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000012) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=001422b8 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,001422b8,0033f458) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegOpenKeyExW(80000000,001422b8 L"jpegfile",00000000,00020019,0033f4c4) ret=7ea7737b 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7737b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001422b8) ret=7ea773a1 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea773a1 000d:Call advapi32.RegOpenKeyExW(00000048,7eaa23b4 L"shell",00000000,00020019,0033f4c0) ret=7ea773ed 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea773ed 000d:Call advapi32.RegCloseKey(00000048) ret=7ea773fd 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea773fd 000d:Call advapi32.RegOpenKeyExW(0000004c,7ec5ed44 L"open",00000000,00020019,0033f4bc) ret=7ea77433 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea77433 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ea77459 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77459 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea77467 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea77467 000d:Call advapi32.RegOpenKeyExW(00000048,7eaa23c0 L"command",00000000,00020019,0033f4c8) ret=7ea7749f 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea7749f 000d:Call advapi32.RegCloseKey(00000048) ret=7ea774af 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774af 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001422a0) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=80070002 ret=7ec54638 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001424e8) ret=7ec598ff 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec598ff 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59922 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59922 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142500) ret=7ec59945 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59945 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141260) ret=7ec59968 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59968 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec5998b 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec5998b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec599ae 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec599ae 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141278) ret=7ec599d1 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec599d1 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141298) ret=7ec599f5 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec599f5 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59a18 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a18 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59a3b 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a3b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59a5e 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a5e 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59a81 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a81 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,00000015,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00140a58 L".lnk",ffffffff,00000000,00000000,00000000,00000000) ret=7ec53b8b 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000005 ret=7ec53b8b 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000005) ret=7ec53bad 000d:Ret ntdll.RtlAllocateHeap() retval=001424e8 ret=7ec53bad 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00140a58 L".lnk",ffffffff,001424e8,00000005,00000000,00000000) ret=7ec53bf1 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000005 ret=7ec53bf1 000d:Call shlwapi.AssocQueryStringW(00000000,00000003,00140a58,00000000,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00142500 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".lnk",00000000,00020019,00142508) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,0014250c) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f4c8) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=00141260 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00141260,0033f4c8) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegGetValueW(80000000,00141260 L"lnkfile",00000000,00000002,00000000,00000000,0033f79c) ret=7ea77e3e 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77e3e 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000012) ret=7ea77fc6 000d:Ret ntdll.RtlAllocateHeap() retval=00141278 ret=7ea77fc6 000d:Call advapi32.RegGetValueW(80000000,00141260 L"lnkfile",00000000,00000002,00000000,00141278,0033f79c) ret=7ea7800c 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea7800c 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141278) ret=7ea78066 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea78066 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141260) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142500) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000001 ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000012) ret=7ec54661 000d:Ret ntdll.RtlAllocateHeap() retval=00142500 ret=7ec54661 000d:Call shlwapi.AssocQueryStringW(00000000,00000003,00140a58,00000000,00142500 L"\00a0\0011\0090\0011D",0033f8c8) ret=7ec54693 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00141260 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".lnk",00000000,00020019,00141268) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,0014126c) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f4c8) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=00141278 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00141278,0033f4c8) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegGetValueW(80000000,00141278 L"lnkfile",00000000,00000002,00000000,00000000,0033f79c) ret=7ea77e3e 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77e3e 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000012) ret=7ea77fc6 000d:Ret ntdll.RtlAllocateHeap() retval=00141290 ret=7ea77fc6 000d:Call advapi32.RegGetValueW(80000000,00141278 L"lnkfile",00000000,00000002,00000000,00141290,0033f79c) ret=7ea7800c 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea7800c 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141290) ret=7ea78066 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea78066 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141278) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141260) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000000 ret=7ec54693 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00142500 L"Shortcut",ffffffff,00000000,00000000,00000000,00000000) ret=7ec53b8b 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000009 ret=7ec53b8b 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000009) ret=7ec53bad 000d:Ret ntdll.RtlAllocateHeap() retval=00141260 ret=7ec53bad 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00142500 L"Shortcut",ffffffff,00141260,00000009,00000000,00000000) ret=7ec53bf1 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000009 ret=7ec53bf1 000d:Call shlwapi.AssocQueryStringW(00000000,0000000f,00140a58,00000000,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00141278 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".lnk",00000000,00020019,00141280) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,00141284) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f4c8) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=00141290 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00141290,0033f4c8) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegOpenKeyExW(80000000,00141290 L"lnkfile",00000000,00020019,0033f79c) ret=7ea77d33 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea77d33 000d:Call advapi32.RegGetValueW(00000048,7eaa22b6 L"DefaultIcon",00000000,00000002,00000000,00000000,0033f7a0) ret=7ea780bd 000d:Ret advapi32.RegGetValueW() retval=00000002 ret=7ea780bd 000d:Call advapi32.RegCloseKey(00000048) ret=7ea780e4 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea780e4 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141290) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141278) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=80070002 ret=7ec54638 000d:Call shlwapi.AssocQueryStringW(00000000,0000000e,00140a58,00000000,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00141278 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".lnk",00000000,00020019,00141280) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,00141284) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegGetValueW(00000044,00000000,7eaa22ce L"Content Type",00000002,00000000,00000000,0033f7a4) ret=7ea77c08 000d:Ret advapi32.RegGetValueW() retval=00000002 ret=7ea77c08 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141278) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=80070002 ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00141278 ret=7ec55c75 000d:Call shlwapi.AssocQueryStringW(00000000,00000001,00140a58,7ec5ed44,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00142280 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".lnk",00000000,00020019,00142288) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,0014228c) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f458) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=00142298 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00142298,0033f458) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegOpenKeyExW(80000000,00142298 L"lnkfile",00000000,00020019,0033f4c4) ret=7ea7737b 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7737b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142298) ret=7ea773a1 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea773a1 000d:Call advapi32.RegOpenKeyExW(00000048,7eaa23b4 L"shell",00000000,00020019,0033f4c0) ret=7ea773ed 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea773ed 000d:Call advapi32.RegCloseKey(00000048) ret=7ea773fd 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea773fd 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142280) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=80070002 ret=7ec54638 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001424e8) ret=7ec598ff 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec598ff 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59922 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59922 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142500) ret=7ec59945 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59945 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141260) ret=7ec59968 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59968 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec5998b 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec5998b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec599ae 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec599ae 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec599d1 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec599d1 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141278) ret=7ec599f5 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec599f5 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59a18 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a18 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59a3b 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a3b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59a5e 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a5e 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59a81 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a81 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,00000016,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00140a58 L".mht",ffffffff,00000000,00000000,00000000,00000000) ret=7ec53b8b 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000005 ret=7ec53b8b 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000005) ret=7ec53bad 000d:Ret ntdll.RtlAllocateHeap() retval=001424e8 ret=7ec53bad 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00140a58 L".mht",ffffffff,001424e8,00000005,00000000,00000000) ret=7ec53bf1 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000005 ret=7ec53bf1 000d:Call shlwapi.AssocQueryStringW(00000000,00000003,00140a58,00000000,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00142500 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".mht",00000000,00020019,00142508) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,0014250c) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f4c8) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000014) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=00141260 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00141260,0033f4c8) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegGetValueW(80000000,00141260 L"mhtmlfile",00000000,00000002,00000000,00000000,0033f79c) ret=7ea77e3e 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77e3e 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,0000001e) ret=7ea77fc6 000d:Ret ntdll.RtlAllocateHeap() retval=00141280 ret=7ea77fc6 000d:Call advapi32.RegGetValueW(80000000,00141260 L"mhtmlfile",00000000,00000002,00000000,00141280,0033f79c) ret=7ea7800c 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea7800c 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141280) ret=7ea78066 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea78066 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141260) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142500) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000001 ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,0000001e) ret=7ec54661 000d:Ret ntdll.RtlAllocateHeap() retval=00142500 ret=7ec54661 000d:Call shlwapi.AssocQueryStringW(00000000,00000003,00140a58,00000000,00142500 L"\00a0\0011\0090\0011D",0033f8c8) ret=7ec54693 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00141260 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".mht",00000000,00020019,00141268) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,0014126c) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f4c8) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000014) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=00141278 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00141278,0033f4c8) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegGetValueW(80000000,00141278 L"mhtmlfile",00000000,00000002,00000000,00000000,0033f79c) ret=7ea77e3e 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77e3e 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,0000001e) ret=7ea77fc6 000d:Ret ntdll.RtlAllocateHeap() retval=00141298 ret=7ea77fc6 000d:Call advapi32.RegGetValueW(80000000,00141278 L"mhtmlfile",00000000,00000002,00000000,00141298,0033f79c) ret=7ea7800c 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea7800c 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141298) ret=7ea78066 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea78066 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141278) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141260) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000000 ret=7ec54693 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00142500 L"MHTML Document",ffffffff,00000000,00000000,00000000,00000000) ret=7ec53b8b 000d:Ret KERNEL32.WideCharToMultiByte() retval=0000000f ret=7ec53b8b 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,0000000f) ret=7ec53bad 000d:Ret ntdll.RtlAllocateHeap() retval=00141260 ret=7ec53bad 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00142500 L"MHTML Document",ffffffff,00141260,0000000f,00000000,00000000) ret=7ec53bf1 000d:Ret KERNEL32.WideCharToMultiByte() retval=0000000f ret=7ec53bf1 000d:Call shlwapi.AssocQueryStringW(00000000,0000000f,00140a58,00000000,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00141278 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".mht",00000000,00020019,00141280) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,00141284) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f4c8) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000014) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=00141290 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00141290,0033f4c8) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegOpenKeyExW(80000000,00141290 L"mhtmlfile",00000000,00020019,0033f79c) ret=7ea77d33 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea77d33 000d:Call advapi32.RegGetValueW(00000048,7eaa22b6 L"DefaultIcon",00000000,00000002,00000000,00000000,0033f7a0) ret=7ea780bd 000d:Ret advapi32.RegGetValueW() retval=00000002 ret=7ea780bd 000d:Call advapi32.RegCloseKey(00000048) ret=7ea780e4 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea780e4 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141290) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141278) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=80070002 ret=7ec54638 000d:Call shlwapi.AssocQueryStringW(00000000,0000000e,00140a58,00000000,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00141278 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".mht",00000000,00020019,00141280) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,00141284) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegGetValueW(00000044,00000000,7eaa22ce L"Content Type",00000002,00000000,00000000,0033f7a4) ret=7ea77c08 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77c08 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,0000001e) ret=7ea77f05 000d:Ret ntdll.RtlAllocateHeap() retval=00141290 ret=7ea77f05 000d:Call advapi32.RegGetValueW(00000044,00000000,7eaa22ce L"Content Type",00000002,00000000,00141290,0033f7a4) ret=7ea77f50 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77f50 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141290) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141278) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000001 ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,0000001e) ret=7ec54661 000d:Ret ntdll.RtlAllocateHeap() retval=00141278 ret=7ec54661 000d:Call shlwapi.AssocQueryStringW(00000000,0000000e,00140a58,00000000,00141278 L"\2670\0014\0120\0011D",0033f8c8) ret=7ec54693 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=001412a0 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".mht",00000000,00020019,001412a8) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,001412ac) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegGetValueW(00000044,00000000,7eaa22ce L"Content Type",00000002,00000000,00000000,0033f7a4) ret=7ea77c08 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77c08 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,0000001e) ret=7ea77f05 000d:Ret ntdll.RtlAllocateHeap() retval=001412b8 ret=7ea77f05 000d:Call advapi32.RegGetValueW(00000044,00000000,7eaa22ce L"Content Type",00000002,00000000,001412b8,0033f7a4) ret=7ea77f50 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77f50 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001412b8) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001412a0) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000000 ret=7ec54693 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=001412a0 ret=7ec55c75 000d:Call shlwapi.AssocQueryStringW(00000000,00000001,00140a58,7ec5ed44,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=001422a8 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".mht",00000000,00020019,001422b0) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,001422b4) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f458) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000014) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=001422c0 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,001422c0,0033f458) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegOpenKeyExW(80000000,001422c0 L"mhtmlfile",00000000,00020019,0033f4c4) ret=7ea7737b 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7737b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001422c0) ret=7ea773a1 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea773a1 000d:Call advapi32.RegOpenKeyExW(00000048,7eaa23b4 L"shell",00000000,00020019,0033f4c0) ret=7ea773ed 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea773ed 000d:Call advapi32.RegCloseKey(00000048) ret=7ea773fd 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea773fd 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001422a8) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=80070002 ret=7ec54638 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001424e8) ret=7ec598ff 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec598ff 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59922 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59922 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142500) ret=7ec59945 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59945 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141260) ret=7ec59968 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59968 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec5998b 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec5998b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec599ae 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec599ae 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141278) ret=7ec599d1 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec599d1 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001412a0) ret=7ec599f5 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec599f5 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59a18 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a18 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59a3b 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a3b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59a5e 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a5e 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59a81 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a81 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,00000017,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00140a58 L".mhtml",ffffffff,00000000,00000000,00000000,00000000) ret=7ec53b8b 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000007 ret=7ec53b8b 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000007) ret=7ec53bad 000d:Ret ntdll.RtlAllocateHeap() retval=001424e8 ret=7ec53bad 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00140a58 L".mhtml",ffffffff,001424e8,00000007,00000000,00000000) ret=7ec53bf1 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000007 ret=7ec53bf1 000d:Call shlwapi.AssocQueryStringW(00000000,00000003,00140a58,00000000,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00142500 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".mhtml",00000000,00020019,00142508) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,0014250c) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f4c8) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000014) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=00141260 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00141260,0033f4c8) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegGetValueW(80000000,00141260 L"mhtmlfile",00000000,00000002,00000000,00000000,0033f79c) ret=7ea77e3e 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77e3e 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,0000001e) ret=7ea77fc6 000d:Ret ntdll.RtlAllocateHeap() retval=00141280 ret=7ea77fc6 000d:Call advapi32.RegGetValueW(80000000,00141260 L"mhtmlfile",00000000,00000002,00000000,00141280,0033f79c) ret=7ea7800c 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea7800c 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141280) ret=7ea78066 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea78066 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141260) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142500) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000001 ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,0000001e) ret=7ec54661 000d:Ret ntdll.RtlAllocateHeap() retval=00142500 ret=7ec54661 000d:Call shlwapi.AssocQueryStringW(00000000,00000003,00140a58,00000000,00142500 L"\00a0\0011\0090\0011D",0033f8c8) ret=7ec54693 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00141260 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".mhtml",00000000,00020019,00141268) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,0014126c) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f4c8) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000014) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=00141278 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00141278,0033f4c8) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegGetValueW(80000000,00141278 L"mhtmlfile",00000000,00000002,00000000,00000000,0033f79c) ret=7ea77e3e 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77e3e 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,0000001e) ret=7ea77fc6 000d:Ret ntdll.RtlAllocateHeap() retval=00141298 ret=7ea77fc6 000d:Call advapi32.RegGetValueW(80000000,00141278 L"mhtmlfile",00000000,00000002,00000000,00141298,0033f79c) ret=7ea7800c 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea7800c 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141298) ret=7ea78066 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea78066 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141278) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141260) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000000 ret=7ec54693 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00142500 L"MHTML Document",ffffffff,00000000,00000000,00000000,00000000) ret=7ec53b8b 000d:Ret KERNEL32.WideCharToMultiByte() retval=0000000f ret=7ec53b8b 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,0000000f) ret=7ec53bad 000d:Ret ntdll.RtlAllocateHeap() retval=00141260 ret=7ec53bad 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00142500 L"MHTML Document",ffffffff,00141260,0000000f,00000000,00000000) ret=7ec53bf1 000d:Ret KERNEL32.WideCharToMultiByte() retval=0000000f ret=7ec53bf1 000d:Call shlwapi.AssocQueryStringW(00000000,0000000f,00140a58,00000000,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00141278 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".mhtml",00000000,00020019,00141280) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,00141284) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f4c8) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000014) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=00141290 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00141290,0033f4c8) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegOpenKeyExW(80000000,00141290 L"mhtmlfile",00000000,00020019,0033f79c) ret=7ea77d33 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea77d33 000d:Call advapi32.RegGetValueW(00000048,7eaa22b6 L"DefaultIcon",00000000,00000002,00000000,00000000,0033f7a0) ret=7ea780bd 000d:Ret advapi32.RegGetValueW() retval=00000002 ret=7ea780bd 000d:Call advapi32.RegCloseKey(00000048) ret=7ea780e4 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea780e4 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141290) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141278) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=80070002 ret=7ec54638 000d:Call shlwapi.AssocQueryStringW(00000000,0000000e,00140a58,00000000,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00141278 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".mhtml",00000000,00020019,00141280) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,00141284) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegGetValueW(00000044,00000000,7eaa22ce L"Content Type",00000002,00000000,00000000,0033f7a4) ret=7ea77c08 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77c08 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,0000001e) ret=7ea77f05 000d:Ret ntdll.RtlAllocateHeap() retval=00141290 ret=7ea77f05 000d:Call advapi32.RegGetValueW(00000044,00000000,7eaa22ce L"Content Type",00000002,00000000,00141290,0033f7a4) ret=7ea77f50 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77f50 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141290) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141278) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000001 ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,0000001e) ret=7ec54661 000d:Ret ntdll.RtlAllocateHeap() retval=00141278 ret=7ec54661 000d:Call shlwapi.AssocQueryStringW(00000000,0000000e,00140a58,00000000,00141278 L"\2670\0014\0120\0011D",0033f8c8) ret=7ec54693 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=001412a0 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".mhtml",00000000,00020019,001412a8) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,001412ac) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegGetValueW(00000044,00000000,7eaa22ce L"Content Type",00000002,00000000,00000000,0033f7a4) ret=7ea77c08 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77c08 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,0000001e) ret=7ea77f05 000d:Ret ntdll.RtlAllocateHeap() retval=001412b8 ret=7ea77f05 000d:Call advapi32.RegGetValueW(00000044,00000000,7eaa22ce L"Content Type",00000002,00000000,001412b8,0033f7a4) ret=7ea77f50 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77f50 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001412b8) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001412a0) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000000 ret=7ec54693 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=001412a0 ret=7ec55c75 000d:Call shlwapi.AssocQueryStringW(00000000,00000001,00140a58,7ec5ed44,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=001422a8 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".mhtml",00000000,00020019,001422b0) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,001422b4) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f458) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000014) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=001422c0 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,001422c0,0033f458) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegOpenKeyExW(80000000,001422c0 L"mhtmlfile",00000000,00020019,0033f4c4) ret=7ea7737b 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7737b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001422c0) ret=7ea773a1 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea773a1 000d:Call advapi32.RegOpenKeyExW(00000048,7eaa23b4 L"shell",00000000,00020019,0033f4c0) ret=7ea773ed 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea773ed 000d:Call advapi32.RegCloseKey(00000048) ret=7ea773fd 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea773fd 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001422a8) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=80070002 ret=7ec54638 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001424e8) ret=7ec598ff 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec598ff 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59922 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59922 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142500) ret=7ec59945 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59945 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141260) ret=7ec59968 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59968 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec5998b 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec5998b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec599ae 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec599ae 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141278) ret=7ec599d1 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec599d1 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001412a0) ret=7ec599f5 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec599f5 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59a18 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a18 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59a3b 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a3b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59a5e 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a5e 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59a81 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a81 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,00000018,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,00000019,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00140a58 L".png",ffffffff,00000000,00000000,00000000,00000000) ret=7ec53b8b 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000005 ret=7ec53b8b 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000005) ret=7ec53bad 000d:Ret ntdll.RtlAllocateHeap() retval=001424e8 ret=7ec53bad 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00140a58 L".png",ffffffff,001424e8,00000005,00000000,00000000) ret=7ec53bf1 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000005 ret=7ec53bf1 000d:Call shlwapi.AssocQueryStringW(00000000,00000003,00140a58,00000000,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00142500 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".png",00000000,00020019,00142508) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,0014250c) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f4c8) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=00141260 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00141260,0033f4c8) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegGetValueW(80000000,00141260 L"pngfile",00000000,00000002,00000000,00000000,0033f79c) ret=7ea77e3e 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77e3e 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000014) ret=7ea77fc6 000d:Ret ntdll.RtlAllocateHeap() retval=00141278 ret=7ea77fc6 000d:Call advapi32.RegGetValueW(80000000,00141260 L"pngfile",00000000,00000002,00000000,00141278,0033f79c) ret=7ea7800c 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea7800c 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141278) ret=7ea78066 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea78066 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141260) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142500) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000001 ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000014) ret=7ec54661 000d:Ret ntdll.RtlAllocateHeap() retval=00142500 ret=7ec54661 000d:Call shlwapi.AssocQueryStringW(00000000,00000003,00140a58,00000000,00142500 L"\00a0\0011\0090\0011D",0033f8c8) ret=7ec54693 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00141260 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".png",00000000,00020019,00141268) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,0014126c) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f4c8) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=00141278 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00141278,0033f4c8) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegGetValueW(80000000,00141278 L"pngfile",00000000,00000002,00000000,00000000,0033f79c) ret=7ea77e3e 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77e3e 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000014) ret=7ea77fc6 000d:Ret ntdll.RtlAllocateHeap() retval=00141290 ret=7ea77fc6 000d:Call advapi32.RegGetValueW(80000000,00141278 L"pngfile",00000000,00000002,00000000,00141290,0033f79c) ret=7ea7800c 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea7800c 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141290) ret=7ea78066 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea78066 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141278) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141260) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000000 ret=7ec54693 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00142500 L"PNG Image",ffffffff,00000000,00000000,00000000,00000000) ret=7ec53b8b 000d:Ret KERNEL32.WideCharToMultiByte() retval=0000000a ret=7ec53b8b 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,0000000a) ret=7ec53bad 000d:Ret ntdll.RtlAllocateHeap() retval=00141260 ret=7ec53bad 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00142500 L"PNG Image",ffffffff,00141260,0000000a,00000000,00000000) ret=7ec53bf1 000d:Ret KERNEL32.WideCharToMultiByte() retval=0000000a ret=7ec53bf1 000d:Call shlwapi.AssocQueryStringW(00000000,0000000f,00140a58,00000000,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00141278 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".png",00000000,00020019,00141280) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,00141284) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f4c8) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=00141290 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00141290,0033f4c8) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegOpenKeyExW(80000000,00141290 L"pngfile",00000000,00020019,0033f79c) ret=7ea77d33 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea77d33 000d:Call advapi32.RegGetValueW(00000048,7eaa22b6 L"DefaultIcon",00000000,00000002,00000000,00000000,0033f7a0) ret=7ea780bd 000d:Ret advapi32.RegGetValueW() retval=00000002 ret=7ea780bd 000d:Call advapi32.RegCloseKey(00000048) ret=7ea780e4 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea780e4 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141290) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141278) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=80070002 ret=7ec54638 000d:Call shlwapi.AssocQueryStringW(00000000,0000000e,00140a58,00000000,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00141278 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".png",00000000,00020019,00141280) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,00141284) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegGetValueW(00000044,00000000,7eaa22ce L"Content Type",00000002,00000000,00000000,0033f7a4) ret=7ea77c08 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77c08 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000014) ret=7ea77f05 000d:Ret ntdll.RtlAllocateHeap() retval=00141290 ret=7ea77f05 000d:Call advapi32.RegGetValueW(00000044,00000000,7eaa22ce L"Content Type",00000002,00000000,00141290,0033f7a4) ret=7ea77f50 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77f50 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141290) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141278) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000001 ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000014) ret=7ec54661 000d:Ret ntdll.RtlAllocateHeap() retval=00141278 ret=7ec54661 000d:Call shlwapi.AssocQueryStringW(00000000,0000000e,00140a58,00000000,00141278 L"\2670\0014\0120\0011D",0033f8c8) ret=7ec54693 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00141298 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".png",00000000,00020019,001412a0) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,001412a4) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegGetValueW(00000044,00000000,7eaa22ce L"Content Type",00000002,00000000,00000000,0033f7a4) ret=7ea77c08 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77c08 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000014) ret=7ea77f05 000d:Ret ntdll.RtlAllocateHeap() retval=001412b0 ret=7ea77f05 000d:Call advapi32.RegGetValueW(00000044,00000000,7eaa22ce L"Content Type",00000002,00000000,001412b0,0033f7a4) ret=7ea77f50 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77f50 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001412b0) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141298) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000000 ret=7ec54693 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00141298 ret=7ec55c75 000d:Call shlwapi.AssocQueryStringW(00000000,00000001,00140a58,7ec5ed44,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=001422a0 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".png",00000000,00020019,001422a8) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,001422ac) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f458) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=001422b8 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,001422b8,0033f458) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegOpenKeyExW(80000000,001422b8 L"pngfile",00000000,00020019,0033f4c4) ret=7ea7737b 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7737b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001422b8) ret=7ea773a1 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea773a1 000d:Call advapi32.RegOpenKeyExW(00000048,7eaa23b4 L"shell",00000000,00020019,0033f4c0) ret=7ea773ed 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea773ed 000d:Call advapi32.RegCloseKey(00000048) ret=7ea773fd 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea773fd 000d:Call advapi32.RegOpenKeyExW(0000004c,7ec5ed44 L"open",00000000,00020019,0033f4bc) ret=7ea77433 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea77433 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ea77459 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77459 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea77467 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea77467 000d:Call advapi32.RegOpenKeyExW(00000048,7eaa23c0 L"command",00000000,00020019,0033f4c8) ret=7ea7749f 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea7749f 000d:Call advapi32.RegCloseKey(00000048) ret=7ea774af 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774af 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001422a0) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=80070002 ret=7ec54638 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001424e8) ret=7ec598ff 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec598ff 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59922 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59922 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142500) ret=7ec59945 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59945 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141260) ret=7ec59968 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59968 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec5998b 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec5998b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec599ae 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec599ae 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141278) ret=7ec599d1 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec599d1 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141298) ret=7ec599f5 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec599f5 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59a18 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a18 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59a3b 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a3b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59a5e 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a5e 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59a81 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a81 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,0000001a,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00140a58 L".rtf",ffffffff,00000000,00000000,00000000,00000000) ret=7ec53b8b 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000005 ret=7ec53b8b 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000005) ret=7ec53bad 000d:Ret ntdll.RtlAllocateHeap() retval=001424e8 ret=7ec53bad 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00140a58 L".rtf",ffffffff,001424e8,00000005,00000000,00000000) ret=7ec53bf1 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000005 ret=7ec53bf1 000d:Call shlwapi.AssocQueryStringW(00000000,00000003,00140a58,00000000,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00142500 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".rtf",00000000,00020019,00142508) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,0014250c) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f4c8) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=00141260 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00141260,0033f4c8) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegGetValueW(80000000,00141260 L"rtffile",00000000,00000002,00000000,00000000,0033f79c) ret=7ea77e3e 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77e3e 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000026) ret=7ea77fc6 000d:Ret ntdll.RtlAllocateHeap() retval=00141278 ret=7ea77fc6 000d:Call advapi32.RegGetValueW(80000000,00141260 L"rtffile",00000000,00000002,00000000,00141278,0033f79c) ret=7ea7800c 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea7800c 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141278) ret=7ea78066 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea78066 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141260) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142500) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000001 ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000026) ret=7ec54661 000d:Ret ntdll.RtlAllocateHeap() retval=00142500 ret=7ec54661 000d:Call shlwapi.AssocQueryStringW(00000000,00000003,00140a58,00000000,00142500 L"\00a0\0011\0090\0011D",0033f8c8) ret=7ec54693 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00141260 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".rtf",00000000,00020019,00141268) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,0014126c) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f4c8) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=00141278 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00141278,0033f4c8) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegGetValueW(80000000,00141278 L"rtffile",00000000,00000002,00000000,00000000,0033f79c) ret=7ea77e3e 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77e3e 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000026) ret=7ea77fc6 000d:Ret ntdll.RtlAllocateHeap() retval=00141290 ret=7ea77fc6 000d:Call advapi32.RegGetValueW(80000000,00141278 L"rtffile",00000000,00000002,00000000,00141290,0033f79c) ret=7ea7800c 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea7800c 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141290) ret=7ea78066 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea78066 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141278) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141260) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000000 ret=7ec54693 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00142500 L"Rich Text Document",ffffffff,00000000,00000000,00000000,00000000) ret=7ec53b8b 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000013 ret=7ec53b8b 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000013) ret=7ec53bad 000d:Ret ntdll.RtlAllocateHeap() retval=00141260 ret=7ec53bad 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00142500 L"Rich Text Document",ffffffff,00141260,00000013,00000000,00000000) ret=7ec53bf1 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000013 ret=7ec53bf1 000d:Call shlwapi.AssocQueryStringW(00000000,0000000f,00140a58,00000000,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00141280 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".rtf",00000000,00020019,00141288) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,0014128c) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f4c8) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=00141298 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00141298,0033f4c8) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegOpenKeyExW(80000000,00141298 L"rtffile",00000000,00020019,0033f79c) ret=7ea77d33 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea77d33 000d:Call advapi32.RegGetValueW(00000048,7eaa22b6 L"DefaultIcon",00000000,00000002,00000000,00000000,0033f7a0) ret=7ea780bd 000d:Ret advapi32.RegGetValueW() retval=00000002 ret=7ea780bd 000d:Call advapi32.RegCloseKey(00000048) ret=7ea780e4 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea780e4 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141298) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141280) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=80070002 ret=7ec54638 000d:Call shlwapi.AssocQueryStringW(00000000,0000000e,00140a58,00000000,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00141280 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".rtf",00000000,00020019,00141288) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,0014128c) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegGetValueW(00000044,00000000,7eaa22ce L"Content Type",00000002,00000000,00000000,0033f7a4) ret=7ea77c08 000d:Ret advapi32.RegGetValueW() retval=00000002 ret=7ea77c08 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141280) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=80070002 ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00141280 ret=7ec55c75 000d:Call shlwapi.AssocQueryStringW(00000000,00000001,00140a58,7ec5ed44,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00142288 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".rtf",00000000,00020019,00142290) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,00142294) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f458) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=001422a0 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,001422a0,0033f458) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegOpenKeyExW(80000000,001422a0 L"rtffile",00000000,00020019,0033f4c4) ret=7ea7737b 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7737b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001422a0) ret=7ea773a1 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea773a1 000d:Call advapi32.RegOpenKeyExW(00000048,7eaa23b4 L"shell",00000000,00020019,0033f4c0) ret=7ea773ed 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea773ed 000d:Call advapi32.RegCloseKey(00000048) ret=7ea773fd 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea773fd 000d:Call advapi32.RegOpenKeyExW(0000004c,7ec5ed44 L"open",00000000,00020019,0033f4bc) ret=7ea77433 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea77433 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ea77459 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77459 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea77467 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea77467 000d:Call advapi32.RegOpenKeyExW(00000048,7eaa23c0 L"command",00000000,00020019,0033f4c8) ret=7ea7749f 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7749f 000d:Call advapi32.RegCloseKey(00000048) ret=7ea774af 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774af 000d:Call advapi32.RegQueryValueExW(0000004c,00000000,00000000,00000000,00000000,0033f458) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000046) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=001422a0 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(0000004c,00000000,00000000,00000000,001422a0,0033f458) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea774d3 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774d3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001422a0) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142288) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000001 ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000046) ret=7ec54661 000d:Ret ntdll.RtlAllocateHeap() retval=00142288 ret=7ec54661 000d:Call shlwapi.AssocQueryStringW(00000000,00000001,00140a58,7ec5ed44,00142288 L"\0100\0011\00f0\0011D",0033f8c8) ret=7ec54693 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=001422d8 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".rtf",00000000,00020019,001422e0) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,001422e4) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f458) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=001422f0 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,001422f0,0033f458) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegOpenKeyExW(80000000,001422f0 L"rtffile",00000000,00020019,0033f4c4) ret=7ea7737b 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7737b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001422f0) ret=7ea773a1 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea773a1 000d:Call advapi32.RegOpenKeyExW(00000048,7eaa23b4 L"shell",00000000,00020019,0033f4c0) ret=7ea773ed 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea773ed 000d:Call advapi32.RegCloseKey(00000048) ret=7ea773fd 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea773fd 000d:Call advapi32.RegOpenKeyExW(0000004c,7ec5ed44 L"open",00000000,00020019,0033f4bc) ret=7ea77433 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea77433 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ea77459 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77459 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea77467 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea77467 000d:Call advapi32.RegOpenKeyExW(00000048,7eaa23c0 L"command",00000000,00020019,0033f4c8) ret=7ea7749f 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7749f 000d:Call advapi32.RegCloseKey(00000048) ret=7ea774af 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774af 000d:Call advapi32.RegQueryValueExW(0000004c,00000000,00000000,00000000,00000000,0033f458) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000046) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=001422f0 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(0000004c,00000000,00000000,00000000,001422f0,0033f458) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea774d3 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774d3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001422f0) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001422d8) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000000 ret=7ec54693 000d:Call shlwapi.AssocQueryStringW(00000000,00000004,00140a58,00000000,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=001422d8 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".rtf",00000000,00020019,001422e0) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,001422e4) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f418) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=001422f0 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,001422f0,0033f418) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegOpenKeyExW(80000000,001422f0 L"rtffile",00000000,00020019,0033f484) ret=7ea7737b 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7737b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001422f0) ret=7ea773a1 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea773a1 000d:Call advapi32.RegOpenKeyExW(00000048,7eaa23b4 L"shell",00000000,00020019,0033f480) ret=7ea773ed 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea773ed 000d:Call advapi32.RegCloseKey(00000048) ret=7ea773fd 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea773fd 000d:Call advapi32.RegQueryValueExW(0000004c,00000000,00000000,00000000,00000000,0033f418) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000002 ret=7ea7722c 000d:Call advapi32.RegQueryInfoKeyW(0000004c,00000000,00000000,00000000,00000000,0033f470,00000000,00000000,00000000,00000000,00000000,00000000) ret=7ea77568 000d:Ret advapi32.RegQueryInfoKeyW() retval=00000000 ret=7ea77568 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,0000000c) ret=7ea7759a 000d:Ret ntdll.RtlAllocateHeap() retval=001422f0 ret=7ea7759a 000d:Call advapi32.RegEnumKeyExW(0000004c,00000000,001422f0,0033f470,00000000,00000000,00000000,00000000) ret=7ea775df 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ea775df 000d:Call advapi32.RegOpenKeyExW(0000004c,001422f0 L"open",00000000,00020019,0033f47c) ret=7ea77433 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea77433 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001422f0) ret=7ea77459 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77459 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea77467 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea77467 000d:Call advapi32.RegOpenKeyExW(00000048,7eaa23c0 L"command",00000000,00020019,0033f488) ret=7ea7749f 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7749f 000d:Call advapi32.RegCloseKey(00000048) ret=7ea774af 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774af 000d:Call advapi32.RegQueryValueExW(0000004c,00000000,00000000,00000000,00000000,0033f418) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000046) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=001422f0 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(0000004c,00000000,00000000,00000000,001422f0,0033f418) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea774d3 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774d3 000d:Call KERNEL32.SearchPathW(00000000,001422f0 L"C:\\windows\\system32\\wordpad.exe",00000000,00000104,0033f542,00000000) ret=7ea776c0 000d:Ret KERNEL32.SearchPathW() retval=0000001f ret=7ea776c0 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001422f0) ret=7ea776e6 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea776e6 000d:Call version.GetFileVersionInfoSizeW(0033f542 L"C:\\windows\\system32\\wordpad.exe",0033f79c) ret=7ea77c71 000d:Call KERNEL32.GetModuleHandleExW(00000000,0033f542,0033f408) ret=7e23d460 000d:Ret KERNEL32.GetModuleHandleExW() retval=00000000 ret=7e23d460 000d:Call KERNEL32.LoadLibraryExW(0033f542 L"C:\\windows\\system32\\wordpad.exe",00000000,00000002) ret=7e23d53c 000d:Ret KERNEL32.LoadLibraryExW() retval=00450001 ret=7e23d53c 000d:Call KERNEL32.FindResourceW(00450001,00000001,00000010) ret=7e23d48a 000d:Ret KERNEL32.FindResourceW() retval=00000000 ret=7e23d48a 000d:Call KERNEL32.FreeLibrary(00450001) ret=7e23d4af 000d:Ret KERNEL32.FreeLibrary() retval=00000001 ret=7e23d4af 000d:Ret version.GetFileVersionInfoSizeW() retval=00000000 ret=7ea77c71 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001422d8) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000001 ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec54661 000d:Ret ntdll.RtlAllocateHeap() retval=001422d8 ret=7ec54661 000d:Call shlwapi.AssocQueryStringW(00000000,00000004,00140a58,00000000,001422d8 L"\0100\0011\00f0\0011D",0033f8c8) ret=7ec54693 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=001422f0 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".rtf",00000000,00020019,001422f8) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,001422fc) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f418) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=00142308 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00142308,0033f418) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegOpenKeyExW(80000000,00142308 L"rtffile",00000000,00020019,0033f484) ret=7ea7737b 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7737b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142308) ret=7ea773a1 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea773a1 000d:Call advapi32.RegOpenKeyExW(00000048,7eaa23b4 L"shell",00000000,00020019,0033f480) ret=7ea773ed 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea773ed 000d:Call advapi32.RegCloseKey(00000048) ret=7ea773fd 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea773fd 000d:Call advapi32.RegQueryValueExW(0000004c,00000000,00000000,00000000,00000000,0033f418) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000002 ret=7ea7722c 000d:Call advapi32.RegQueryInfoKeyW(0000004c,00000000,00000000,00000000,00000000,0033f470,00000000,00000000,00000000,00000000,00000000,00000000) ret=7ea77568 000d:Ret advapi32.RegQueryInfoKeyW() retval=00000000 ret=7ea77568 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,0000000c) ret=7ea7759a 000d:Ret ntdll.RtlAllocateHeap() retval=00142308 ret=7ea7759a 000d:Call advapi32.RegEnumKeyExW(0000004c,00000000,00142308,0033f470,00000000,00000000,00000000,00000000) ret=7ea775df 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ea775df 000d:Call advapi32.RegOpenKeyExW(0000004c,00142308 L"open",00000000,00020019,0033f47c) ret=7ea77433 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea77433 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142308) ret=7ea77459 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77459 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea77467 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea77467 000d:Call advapi32.RegOpenKeyExW(00000048,7eaa23c0 L"command",00000000,00020019,0033f488) ret=7ea7749f 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7749f 000d:Call advapi32.RegCloseKey(00000048) ret=7ea774af 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774af 000d:Call advapi32.RegQueryValueExW(0000004c,00000000,00000000,00000000,00000000,0033f418) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000046) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=00142308 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(0000004c,00000000,00000000,00000000,00142308,0033f418) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea774d3 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774d3 000d:Call KERNEL32.SearchPathW(00000000,00142308 L"C:\\windows\\system32\\wordpad.exe",00000000,00000104,0033f542,00000000) ret=7ea776c0 000d:Ret KERNEL32.SearchPathW() retval=0000001f ret=7ea776c0 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142308) ret=7ea776e6 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea776e6 000d:Call version.GetFileVersionInfoSizeW(0033f542 L"C:\\windows\\system32\\wordpad.exe",0033f79c) ret=7ea77c71 000d:Call KERNEL32.GetModuleHandleExW(00000000,0033f542,0033f408) ret=7e23d460 000d:Ret KERNEL32.GetModuleHandleExW() retval=00000000 ret=7e23d460 000d:Call KERNEL32.LoadLibraryExW(0033f542 L"C:\\windows\\system32\\wordpad.exe",00000000,00000002) ret=7e23d53c 000d:Ret KERNEL32.LoadLibraryExW() retval=00450001 ret=7e23d53c 000d:Call KERNEL32.FindResourceW(00450001,00000001,00000010) ret=7e23d48a 000d:Ret KERNEL32.FindResourceW() retval=00000000 ret=7e23d48a 000d:Call KERNEL32.FreeLibrary(00450001) ret=7e23d4af 000d:Ret KERNEL32.FreeLibrary() retval=00000001 ret=7e23d4af 000d:Ret version.GetFileVersionInfoSizeW() retval=00000000 ret=7ea77c71 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001422f0) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000000 ret=7ec54693 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,001422d8 L"wordpad",ffffffff,00000000,00000000,00000000,00000000) ret=7ec53b8b 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000008 ret=7ec53b8b 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000008) ret=7ec53bad 000d:Ret ntdll.RtlAllocateHeap() retval=001422f0 ret=7ec53bad 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,001422d8 L"wordpad",ffffffff,001422f0,00000008,00000000,00000000) ret=7ec53bf1 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000008 ret=7ec53bf1 000d:Call advapi32.RegGetValueW(80000000,00140a58 L".rtf",00000000,00000002,00000000,00000000,0033f8cc) ret=7ec54717 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ec54717 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec54747 000d:Ret ntdll.RtlAllocateHeap() retval=00142308 ret=7ec54747 000d:Call advapi32.RegGetValueW(80000000,00140a58 L".rtf",00000000,00000002,00000000,00142308,0033f8cc) ret=7ec54781 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ec54781 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00142308 L"rtffile",ffffffff,00000000,00000000,00000000,00000000) ret=7ec53b8b 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000008 ret=7ec53b8b 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000008) ret=7ec53bad 000d:Ret ntdll.RtlAllocateHeap() retval=00142320 ret=7ec53bad 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00142308 L"rtffile",ffffffff,00142320,00000008,00000000,00000000) ret=7ec53bf1 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000008 ret=7ec53bf1 000d:Call advapi32.RegCreateKeyW(80000001,7ec5ee60 L"Software\\Wine\\FileOpenAssociations",0033f8d0) ret=7ec547ef 000d:Ret advapi32.RegCreateKeyW() retval=00000000 ret=7ec547ef 000d:Call advapi32.RegGetValueA(00000044,001424e8 ".rtf",7ec5e310 "MimeType",00000002,00000000,00000000,0033f8cc) ret=7ec54887 000d:Ret advapi32.RegGetValueA() retval=00000000 ret=7ec54887 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec548b7 000d:Ret ntdll.RtlAllocateHeap() retval=00142338 ret=7ec548b7 000d:Call advapi32.RegGetValueA(00000044,001424e8 ".rtf",7ec5e310 "MimeType",00000002,00000000,00142338,0033f8cc) ret=7ec548f1 000d:Ret advapi32.RegGetValueA() retval=00000000 ret=7ec548f1 000d:Call KERNEL32.lstrcmpA(00142338 "application/rtf",00141280 "application/rtf") ret=7ec594ae 000d:Ret KERNEL32.lstrcmpA() retval=00000000 ret=7ec594ae 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142338) ret=7ec594e0 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec594e0 000d:Call advapi32.RegGetValueW(00000044,00140a58 L".rtf",7ec5ee4a L"ProgID",00000002,00000000,00000000,0033f8cc) ret=7ec54717 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ec54717 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec54747 000d:Ret ntdll.RtlAllocateHeap() retval=00142338 ret=7ec54747 000d:Call advapi32.RegGetValueW(00000044,00140a58 L".rtf",7ec5ee4a L"ProgID",00000002,00000000,00142338,0033f8cc) ret=7ec54781 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ec54781 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142338) ret=7ec59557 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59557 000d:Call advapi32.RegGetValueA(00000044,001424e8 ".rtf",7ec5e319 "AppName",00000002,00000000,00000000,0033f8cc) ret=7ec54887 000d:Ret advapi32.RegGetValueA() retval=00000000 ret=7ec54887 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000008) ret=7ec548b7 000d:Ret ntdll.RtlAllocateHeap() retval=00142338 ret=7ec548b7 000d:Call advapi32.RegGetValueA(00000044,001424e8 ".rtf",7ec5e319 "AppName",00000002,00000000,00142338,0033f8cc) ret=7ec548f1 000d:Ret advapi32.RegGetValueA() retval=00000000 ret=7ec548f1 000d:Call KERNEL32.lstrcmpA(00142338 "wordpad",001422f0 "wordpad") ret=7ec59580 000d:Ret KERNEL32.lstrcmpA() retval=00000000 ret=7ec59580 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142338) ret=7ec595ae 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec595ae 000d:Call advapi32.RegGetValueW(00000044,00140a58 L".rtf",7ec5ee3a L"DocName",00000002,00000000,00000000,0033f8cc) ret=7ec54717 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ec54717 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000026) ret=7ec54747 000d:Ret ntdll.RtlAllocateHeap() retval=00142338 ret=7ec54747 000d:Call advapi32.RegGetValueW(00000044,00140a58 L".rtf",7ec5ee3a L"DocName",00000002,00000000,00142338,0033f8cc) ret=7ec54781 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ec54781 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142338) ret=7ec59641 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59641 000d:Call advapi32.RegCloseKey(00000044) ret=7ec5964f 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ec5964f 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001424e8) ret=7ec598ff 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec598ff 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142288) ret=7ec59922 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59922 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142500) ret=7ec59945 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59945 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141260) ret=7ec59968 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59968 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec5998b 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec5998b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec599ae 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec599ae 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec599d1 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec599d1 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141280) ret=7ec599f5 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec599f5 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001422d8) ret=7ec59a18 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a18 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001422f0) ret=7ec59a3b 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a3b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142308) ret=7ec59a5e 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a5e 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142320) ret=7ec59a81 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a81 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,0000001b,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00140a58 L".tif",ffffffff,00000000,00000000,00000000,00000000) ret=7ec53b8b 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000005 ret=7ec53b8b 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000005) ret=7ec53bad 000d:Ret ntdll.RtlAllocateHeap() retval=001424e8 ret=7ec53bad 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00140a58 L".tif",ffffffff,001424e8,00000005,00000000,00000000) ret=7ec53bf1 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000005 ret=7ec53bf1 000d:Call shlwapi.AssocQueryStringW(00000000,00000003,00140a58,00000000,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00142500 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".tif",00000000,00020019,00142508) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,0014250c) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f4c8) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000002 ret=7ea7722c 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142500) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=80070002 ret=7ec54638 000d:Call shlwapi.AssocQueryStringW(00000000,0000000f,00140a58,00000000,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00142500 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".tif",00000000,00020019,00142508) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,0014250c) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f4c8) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000002 ret=7ea7722c 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142500) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=80070002 ret=7ec54638 000d:Call shlwapi.AssocQueryStringW(00000000,0000000e,00140a58,00000000,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00142500 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".tif",00000000,00020019,00142508) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,0014250c) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegGetValueW(00000044,00000000,7eaa22ce L"Content Type",00000002,00000000,00000000,0033f7a4) ret=7ea77c08 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77c08 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000016) ret=7ea77f05 000d:Ret ntdll.RtlAllocateHeap() retval=00141260 ret=7ea77f05 000d:Call advapi32.RegGetValueW(00000044,00000000,7eaa22ce L"Content Type",00000002,00000000,00141260,0033f7a4) ret=7ea77f50 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77f50 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141260) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142500) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000001 ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000016) ret=7ec54661 000d:Ret ntdll.RtlAllocateHeap() retval=00142500 ret=7ec54661 000d:Call shlwapi.AssocQueryStringW(00000000,0000000e,00140a58,00000000,00142500 L"\00a0\0011\0090\0011D",0033f8c8) ret=7ec54693 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00141260 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".tif",00000000,00020019,00141268) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,0014126c) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegGetValueW(00000044,00000000,7eaa22ce L"Content Type",00000002,00000000,00000000,0033f7a4) ret=7ea77c08 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77c08 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000016) ret=7ea77f05 000d:Ret ntdll.RtlAllocateHeap() retval=00141278 ret=7ea77f05 000d:Call advapi32.RegGetValueW(00000044,00000000,7eaa22ce L"Content Type",00000002,00000000,00141278,0033f7a4) ret=7ea77f50 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77f50 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141278) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141260) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000000 ret=7ec54693 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00141260 ret=7ec55c75 000d:Call shlwapi.AssocQueryStringW(00000000,00000001,00140a58,7ec5ed44,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00142268 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".tif",00000000,00020019,00142270) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,00142274) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f458) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000002 ret=7ea7722c 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142268) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=80070002 ret=7ec54638 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001424e8) ret=7ec598ff 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec598ff 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59922 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59922 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59945 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59945 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59968 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59968 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec5998b 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec5998b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec599ae 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec599ae 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142500) ret=7ec599d1 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec599d1 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141260) ret=7ec599f5 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec599f5 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59a18 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a18 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59a3b 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a3b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59a5e 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a5e 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59a81 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a81 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,0000001c,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00140a58 L".tiff",ffffffff,00000000,00000000,00000000,00000000) ret=7ec53b8b 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000006 ret=7ec53b8b 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000006) ret=7ec53bad 000d:Ret ntdll.RtlAllocateHeap() retval=001424e8 ret=7ec53bad 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00140a58 L".tiff",ffffffff,001424e8,00000006,00000000,00000000) ret=7ec53bf1 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000006 ret=7ec53bf1 000d:Call shlwapi.AssocQueryStringW(00000000,00000003,00140a58,00000000,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00142500 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".tiff",00000000,00020019,00142508) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,0014250c) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f4c8) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000002 ret=7ea7722c 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142500) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=80070002 ret=7ec54638 000d:Call shlwapi.AssocQueryStringW(00000000,0000000f,00140a58,00000000,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00142500 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".tiff",00000000,00020019,00142508) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,0014250c) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f4c8) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000002 ret=7ea7722c 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142500) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=80070002 ret=7ec54638 000d:Call shlwapi.AssocQueryStringW(00000000,0000000e,00140a58,00000000,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00142500 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".tiff",00000000,00020019,00142508) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,0014250c) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegGetValueW(00000044,00000000,7eaa22ce L"Content Type",00000002,00000000,00000000,0033f7a4) ret=7ea77c08 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77c08 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000016) ret=7ea77f05 000d:Ret ntdll.RtlAllocateHeap() retval=00141260 ret=7ea77f05 000d:Call advapi32.RegGetValueW(00000044,00000000,7eaa22ce L"Content Type",00000002,00000000,00141260,0033f7a4) ret=7ea77f50 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77f50 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141260) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142500) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000001 ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000016) ret=7ec54661 000d:Ret ntdll.RtlAllocateHeap() retval=00142500 ret=7ec54661 000d:Call shlwapi.AssocQueryStringW(00000000,0000000e,00140a58,00000000,00142500 L"\00a0\0011\0090\0011D",0033f8c8) ret=7ec54693 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00141260 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".tiff",00000000,00020019,00141268) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,0014126c) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegGetValueW(00000044,00000000,7eaa22ce L"Content Type",00000002,00000000,00000000,0033f7a4) ret=7ea77c08 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77c08 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000016) ret=7ea77f05 000d:Ret ntdll.RtlAllocateHeap() retval=00141278 ret=7ea77f05 000d:Call advapi32.RegGetValueW(00000044,00000000,7eaa22ce L"Content Type",00000002,00000000,00141278,0033f7a4) ret=7ea77f50 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77f50 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141278) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141260) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000000 ret=7ec54693 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00141260 ret=7ec55c75 000d:Call shlwapi.AssocQueryStringW(00000000,00000001,00140a58,7ec5ed44,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00142268 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".tiff",00000000,00020019,00142270) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,00142274) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f458) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000002 ret=7ea7722c 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142268) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=80070002 ret=7ec54638 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001424e8) ret=7ec598ff 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec598ff 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59922 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59922 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59945 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59945 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59968 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59968 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec5998b 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec5998b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec599ae 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec599ae 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142500) ret=7ec599d1 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec599d1 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141260) ret=7ec599f5 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec599f5 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59a18 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a18 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59a3b 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a3b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59a5e 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a5e 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59a81 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a81 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,0000001d,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00140a58 L".txt",ffffffff,00000000,00000000,00000000,00000000) ret=7ec53b8b 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000005 ret=7ec53b8b 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000005) ret=7ec53bad 000d:Ret ntdll.RtlAllocateHeap() retval=001424e8 ret=7ec53bad 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00140a58 L".txt",ffffffff,001424e8,00000005,00000000,00000000) ret=7ec53bf1 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000005 ret=7ec53bf1 000d:Call shlwapi.AssocQueryStringW(00000000,00000003,00140a58,00000000,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00142500 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".txt",00000000,00020019,00142508) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,0014250c) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f4c8) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=00141260 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00141260,0033f4c8) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegGetValueW(80000000,00141260 L"txtfile",00000000,00000002,00000000,00000000,0033f79c) ret=7ea77e3e 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77e3e 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,0000001c) ret=7ea77fc6 000d:Ret ntdll.RtlAllocateHeap() retval=00141278 ret=7ea77fc6 000d:Call advapi32.RegGetValueW(80000000,00141260 L"txtfile",00000000,00000002,00000000,00141278,0033f79c) ret=7ea7800c 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea7800c 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141278) ret=7ea78066 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea78066 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141260) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142500) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000001 ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,0000001c) ret=7ec54661 000d:Ret ntdll.RtlAllocateHeap() retval=00142500 ret=7ec54661 000d:Call shlwapi.AssocQueryStringW(00000000,00000003,00140a58,00000000,00142500 L"\00a0\0011\0090\0011D",0033f8c8) ret=7ec54693 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00141260 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".txt",00000000,00020019,00141268) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,0014126c) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f4c8) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=00141278 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00141278,0033f4c8) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegGetValueW(80000000,00141278 L"txtfile",00000000,00000002,00000000,00000000,0033f79c) ret=7ea77e3e 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77e3e 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,0000001c) ret=7ea77fc6 000d:Ret ntdll.RtlAllocateHeap() retval=00141290 ret=7ea77fc6 000d:Call advapi32.RegGetValueW(80000000,00141278 L"txtfile",00000000,00000002,00000000,00141290,0033f79c) ret=7ea7800c 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea7800c 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141290) ret=7ea78066 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea78066 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141278) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141260) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000000 ret=7ec54693 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00142500 L"Text Document",ffffffff,00000000,00000000,00000000,00000000) ret=7ec53b8b 000d:Ret KERNEL32.WideCharToMultiByte() retval=0000000e ret=7ec53b8b 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,0000000e) ret=7ec53bad 000d:Ret ntdll.RtlAllocateHeap() retval=00141260 ret=7ec53bad 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00142500 L"Text Document",ffffffff,00141260,0000000e,00000000,00000000) ret=7ec53bf1 000d:Ret KERNEL32.WideCharToMultiByte() retval=0000000e ret=7ec53bf1 000d:Call shlwapi.AssocQueryStringW(00000000,0000000f,00140a58,00000000,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00141278 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".txt",00000000,00020019,00141280) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,00141284) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f4c8) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=00141290 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00141290,0033f4c8) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegOpenKeyExW(80000000,00141290 L"txtfile",00000000,00020019,0033f79c) ret=7ea77d33 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea77d33 000d:Call advapi32.RegGetValueW(00000048,7eaa22b6 L"DefaultIcon",00000000,00000002,00000000,00000000,0033f7a0) ret=7ea780bd 000d:Ret advapi32.RegGetValueW() retval=00000002 ret=7ea780bd 000d:Call advapi32.RegCloseKey(00000048) ret=7ea780e4 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea780e4 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141290) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141278) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=80070002 ret=7ec54638 000d:Call shlwapi.AssocQueryStringW(00000000,0000000e,00140a58,00000000,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00141278 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".txt",00000000,00020019,00141280) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,00141284) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegGetValueW(00000044,00000000,7eaa22ce L"Content Type",00000002,00000000,00000000,0033f7a4) ret=7ea77c08 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77c08 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000016) ret=7ea77f05 000d:Ret ntdll.RtlAllocateHeap() retval=00141290 ret=7ea77f05 000d:Call advapi32.RegGetValueW(00000044,00000000,7eaa22ce L"Content Type",00000002,00000000,00141290,0033f7a4) ret=7ea77f50 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77f50 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141290) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141278) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000001 ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000016) ret=7ec54661 000d:Ret ntdll.RtlAllocateHeap() retval=00141278 ret=7ec54661 000d:Call shlwapi.AssocQueryStringW(00000000,0000000e,00140a58,00000000,00141278 L"\2670\0014\0120\0011D",0033f8c8) ret=7ec54693 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00141298 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".txt",00000000,00020019,001412a0) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,001412a4) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegGetValueW(00000044,00000000,7eaa22ce L"Content Type",00000002,00000000,00000000,0033f7a4) ret=7ea77c08 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77c08 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000016) ret=7ea77f05 000d:Ret ntdll.RtlAllocateHeap() retval=001412b0 ret=7ea77f05 000d:Call advapi32.RegGetValueW(00000044,00000000,7eaa22ce L"Content Type",00000002,00000000,001412b0,0033f7a4) ret=7ea77f50 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77f50 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001412b0) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141298) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000000 ret=7ec54693 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00141298 ret=7ec55c75 000d:Call shlwapi.AssocQueryStringW(00000000,00000001,00140a58,7ec5ed44,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=001422a0 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".txt",00000000,00020019,001422a8) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,001422ac) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f458) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=001422b8 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,001422b8,0033f458) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegOpenKeyExW(80000000,001422b8 L"txtfile",00000000,00020019,0033f4c4) ret=7ea7737b 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7737b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001422b8) ret=7ea773a1 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea773a1 000d:Call advapi32.RegOpenKeyExW(00000048,7eaa23b4 L"shell",00000000,00020019,0033f4c0) ret=7ea773ed 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea773ed 000d:Call advapi32.RegCloseKey(00000048) ret=7ea773fd 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea773fd 000d:Call advapi32.RegOpenKeyExW(0000004c,7ec5ed44 L"open",00000000,00020019,0033f4bc) ret=7ea77433 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea77433 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ea77459 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77459 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea77467 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea77467 000d:Call advapi32.RegOpenKeyExW(00000048,7eaa23c0 L"command",00000000,00020019,0033f4c8) ret=7ea7749f 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7749f 000d:Call advapi32.RegCloseKey(00000048) ret=7ea774af 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774af 000d:Call advapi32.RegQueryValueExW(0000004c,00000000,00000000,00000000,00000000,0033f458) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000046) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=001422b8 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(0000004c,00000000,00000000,00000000,001422b8,0033f458) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea774d3 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774d3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001422b8) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001422a0) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000001 ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000046) ret=7ec54661 000d:Ret ntdll.RtlAllocateHeap() retval=001422a0 ret=7ec54661 000d:Call shlwapi.AssocQueryStringW(00000000,00000001,00140a58,7ec5ed44,001422a0 L"\0100\0011\00f0\0011D",0033f8c8) ret=7ec54693 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=001422f0 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".txt",00000000,00020019,001422f8) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,001422fc) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f458) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=00142308 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00142308,0033f458) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegOpenKeyExW(80000000,00142308 L"txtfile",00000000,00020019,0033f4c4) ret=7ea7737b 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7737b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142308) ret=7ea773a1 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea773a1 000d:Call advapi32.RegOpenKeyExW(00000048,7eaa23b4 L"shell",00000000,00020019,0033f4c0) ret=7ea773ed 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea773ed 000d:Call advapi32.RegCloseKey(00000048) ret=7ea773fd 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea773fd 000d:Call advapi32.RegOpenKeyExW(0000004c,7ec5ed44 L"open",00000000,00020019,0033f4bc) ret=7ea77433 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea77433 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ea77459 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77459 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea77467 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea77467 000d:Call advapi32.RegOpenKeyExW(00000048,7eaa23c0 L"command",00000000,00020019,0033f4c8) ret=7ea7749f 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7749f 000d:Call advapi32.RegCloseKey(00000048) ret=7ea774af 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774af 000d:Call advapi32.RegQueryValueExW(0000004c,00000000,00000000,00000000,00000000,0033f458) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000046) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=00142308 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(0000004c,00000000,00000000,00000000,00142308,0033f458) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea774d3 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774d3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142308) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001422f0) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000000 ret=7ec54693 000d:Call shlwapi.AssocQueryStringW(00000000,00000004,00140a58,00000000,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=001422f0 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".txt",00000000,00020019,001422f8) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,001422fc) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f418) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=00142308 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00142308,0033f418) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegOpenKeyExW(80000000,00142308 L"txtfile",00000000,00020019,0033f484) ret=7ea7737b 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7737b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142308) ret=7ea773a1 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea773a1 000d:Call advapi32.RegOpenKeyExW(00000048,7eaa23b4 L"shell",00000000,00020019,0033f480) ret=7ea773ed 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea773ed 000d:Call advapi32.RegCloseKey(00000048) ret=7ea773fd 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea773fd 000d:Call advapi32.RegQueryValueExW(0000004c,00000000,00000000,00000000,00000000,0033f418) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000002 ret=7ea7722c 000d:Call advapi32.RegQueryInfoKeyW(0000004c,00000000,00000000,00000000,00000000,0033f470,00000000,00000000,00000000,00000000,00000000,00000000) ret=7ea77568 000d:Ret advapi32.RegQueryInfoKeyW() retval=00000000 ret=7ea77568 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,0000000c) ret=7ea7759a 000d:Ret ntdll.RtlAllocateHeap() retval=00142308 ret=7ea7759a 000d:Call advapi32.RegEnumKeyExW(0000004c,00000000,00142308,0033f470,00000000,00000000,00000000,00000000) ret=7ea775df 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ea775df 000d:Call advapi32.RegOpenKeyExW(0000004c,00142308 L"open",00000000,00020019,0033f47c) ret=7ea77433 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea77433 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142308) ret=7ea77459 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77459 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea77467 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea77467 000d:Call advapi32.RegOpenKeyExW(00000048,7eaa23c0 L"command",00000000,00020019,0033f488) ret=7ea7749f 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7749f 000d:Call advapi32.RegCloseKey(00000048) ret=7ea774af 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774af 000d:Call advapi32.RegQueryValueExW(0000004c,00000000,00000000,00000000,00000000,0033f418) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000046) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=00142308 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(0000004c,00000000,00000000,00000000,00142308,0033f418) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea774d3 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774d3 000d:Call KERNEL32.SearchPathW(00000000,00142308 L"C:\\windows\\system32\\notepad.exe",00000000,00000104,0033f542,00000000) ret=7ea776c0 000d:Ret KERNEL32.SearchPathW() retval=0000001f ret=7ea776c0 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142308) ret=7ea776e6 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea776e6 000d:Call version.GetFileVersionInfoSizeW(0033f542 L"C:\\windows\\system32\\notepad.exe",0033f79c) ret=7ea77c71 000d:Call KERNEL32.GetModuleHandleExW(00000000,0033f542,0033f408) ret=7e23d460 000d:Ret KERNEL32.GetModuleHandleExW() retval=00000000 ret=7e23d460 000d:Call KERNEL32.LoadLibraryExW(0033f542 L"C:\\windows\\system32\\notepad.exe",00000000,00000002) ret=7e23d53c 000d:Ret KERNEL32.LoadLibraryExW() retval=00450001 ret=7e23d53c 000d:Call KERNEL32.FindResourceW(00450001,00000001,00000010) ret=7e23d48a 000d:Ret KERNEL32.FindResourceW() retval=00000000 ret=7e23d48a 000d:Call KERNEL32.FreeLibrary(00450001) ret=7e23d4af 000d:Ret KERNEL32.FreeLibrary() retval=00000001 ret=7e23d4af 000d:Ret version.GetFileVersionInfoSizeW() retval=00000000 ret=7ea77c71 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001422f0) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000001 ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec54661 000d:Ret ntdll.RtlAllocateHeap() retval=001422f0 ret=7ec54661 000d:Call shlwapi.AssocQueryStringW(00000000,00000004,00140a58,00000000,001422f0 L"\00f0\0011\00e0\0011D",0033f8c8) ret=7ec54693 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00142308 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".txt",00000000,00020019,00142310) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,00142314) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f418) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=00142320 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00142320,0033f418) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegOpenKeyExW(80000000,00142320 L"txtfile",00000000,00020019,0033f484) ret=7ea7737b 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7737b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142320) ret=7ea773a1 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea773a1 000d:Call advapi32.RegOpenKeyExW(00000048,7eaa23b4 L"shell",00000000,00020019,0033f480) ret=7ea773ed 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea773ed 000d:Call advapi32.RegCloseKey(00000048) ret=7ea773fd 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea773fd 000d:Call advapi32.RegQueryValueExW(0000004c,00000000,00000000,00000000,00000000,0033f418) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000002 ret=7ea7722c 000d:Call advapi32.RegQueryInfoKeyW(0000004c,00000000,00000000,00000000,00000000,0033f470,00000000,00000000,00000000,00000000,00000000,00000000) ret=7ea77568 000d:Ret advapi32.RegQueryInfoKeyW() retval=00000000 ret=7ea77568 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,0000000c) ret=7ea7759a 000d:Ret ntdll.RtlAllocateHeap() retval=00142320 ret=7ea7759a 000d:Call advapi32.RegEnumKeyExW(0000004c,00000000,00142320,0033f470,00000000,00000000,00000000,00000000) ret=7ea775df 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ea775df 000d:Call advapi32.RegOpenKeyExW(0000004c,00142320 L"open",00000000,00020019,0033f47c) ret=7ea77433 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea77433 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142320) ret=7ea77459 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77459 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea77467 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea77467 000d:Call advapi32.RegOpenKeyExW(00000048,7eaa23c0 L"command",00000000,00020019,0033f488) ret=7ea7749f 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7749f 000d:Call advapi32.RegCloseKey(00000048) ret=7ea774af 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774af 000d:Call advapi32.RegQueryValueExW(0000004c,00000000,00000000,00000000,00000000,0033f418) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000046) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=00142320 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(0000004c,00000000,00000000,00000000,00142320,0033f418) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea774d3 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774d3 000d:Call KERNEL32.SearchPathW(00000000,00142320 L"C:\\windows\\system32\\notepad.exe",00000000,00000104,0033f542,00000000) ret=7ea776c0 000d:Ret KERNEL32.SearchPathW() retval=0000001f ret=7ea776c0 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142320) ret=7ea776e6 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea776e6 000d:Call version.GetFileVersionInfoSizeW(0033f542 L"C:\\windows\\system32\\notepad.exe",0033f79c) ret=7ea77c71 000d:Call KERNEL32.GetModuleHandleExW(00000000,0033f542,0033f408) ret=7e23d460 000d:Ret KERNEL32.GetModuleHandleExW() retval=00000000 ret=7e23d460 000d:Call KERNEL32.LoadLibraryExW(0033f542 L"C:\\windows\\system32\\notepad.exe",00000000,00000002) ret=7e23d53c 000d:Ret KERNEL32.LoadLibraryExW() retval=00450001 ret=7e23d53c 000d:Call KERNEL32.FindResourceW(00450001,00000001,00000010) ret=7e23d48a 000d:Ret KERNEL32.FindResourceW() retval=00000000 ret=7e23d48a 000d:Call KERNEL32.FreeLibrary(00450001) ret=7e23d4af 000d:Ret KERNEL32.FreeLibrary() retval=00000001 ret=7e23d4af 000d:Ret version.GetFileVersionInfoSizeW() retval=00000000 ret=7ea77c71 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142308) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000000 ret=7ec54693 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,001422f0 L"notepad",ffffffff,00000000,00000000,00000000,00000000) ret=7ec53b8b 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000008 ret=7ec53b8b 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000008) ret=7ec53bad 000d:Ret ntdll.RtlAllocateHeap() retval=00142308 ret=7ec53bad 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,001422f0 L"notepad",ffffffff,00142308,00000008,00000000,00000000) ret=7ec53bf1 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000008 ret=7ec53bf1 000d:Call advapi32.RegGetValueW(80000000,00140a58 L".txt",00000000,00000002,00000000,00000000,0033f8cc) ret=7ec54717 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ec54717 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec54747 000d:Ret ntdll.RtlAllocateHeap() retval=00142320 ret=7ec54747 000d:Call advapi32.RegGetValueW(80000000,00140a58 L".txt",00000000,00000002,00000000,00142320,0033f8cc) ret=7ec54781 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ec54781 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00142320 L"txtfile",ffffffff,00000000,00000000,00000000,00000000) ret=7ec53b8b 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000008 ret=7ec53b8b 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000008) ret=7ec53bad 000d:Ret ntdll.RtlAllocateHeap() retval=00142338 ret=7ec53bad 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00142320 L"txtfile",ffffffff,00142338,00000008,00000000,00000000) ret=7ec53bf1 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000008 ret=7ec53bf1 000d:Call advapi32.RegCreateKeyW(80000001,7ec5ee60 L"Software\\Wine\\FileOpenAssociations",0033f8d0) ret=7ec547ef 000d:Ret advapi32.RegCreateKeyW() retval=00000000 ret=7ec547ef 000d:Call advapi32.RegGetValueA(00000044,001424e8 ".txt",7ec5e310 "MimeType",00000002,00000000,00000000,0033f8cc) ret=7ec54887 000d:Ret advapi32.RegGetValueA() retval=00000000 ret=7ec54887 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,0000000b) ret=7ec548b7 000d:Ret ntdll.RtlAllocateHeap() retval=00142350 ret=7ec548b7 000d:Call advapi32.RegGetValueA(00000044,001424e8 ".txt",7ec5e310 "MimeType",00000002,00000000,00142350,0033f8cc) ret=7ec548f1 000d:Ret advapi32.RegGetValueA() retval=00000000 ret=7ec548f1 000d:Call KERNEL32.lstrcmpA(00142350 "text/plain",00141298 "text/plain") ret=7ec594ae 000d:Ret KERNEL32.lstrcmpA() retval=00000000 ret=7ec594ae 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142350) ret=7ec594e0 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec594e0 000d:Call advapi32.RegGetValueW(00000044,00140a58 L".txt",7ec5ee4a L"ProgID",00000002,00000000,00000000,0033f8cc) ret=7ec54717 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ec54717 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec54747 000d:Ret ntdll.RtlAllocateHeap() retval=00142350 ret=7ec54747 000d:Call advapi32.RegGetValueW(00000044,00140a58 L".txt",7ec5ee4a L"ProgID",00000002,00000000,00142350,0033f8cc) ret=7ec54781 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ec54781 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142350) ret=7ec59557 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59557 000d:Call advapi32.RegGetValueA(00000044,001424e8 ".txt",7ec5e319 "AppName",00000002,00000000,00000000,0033f8cc) ret=7ec54887 000d:Ret advapi32.RegGetValueA() retval=00000000 ret=7ec54887 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000008) ret=7ec548b7 000d:Ret ntdll.RtlAllocateHeap() retval=00142350 ret=7ec548b7 000d:Call advapi32.RegGetValueA(00000044,001424e8 ".txt",7ec5e319 "AppName",00000002,00000000,00142350,0033f8cc) ret=7ec548f1 000d:Ret advapi32.RegGetValueA() retval=00000000 ret=7ec548f1 000d:Call KERNEL32.lstrcmpA(00142350 "notepad",00142308 "notepad") ret=7ec59580 000d:Ret KERNEL32.lstrcmpA() retval=00000000 ret=7ec59580 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142350) ret=7ec595ae 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec595ae 000d:Call advapi32.RegGetValueW(00000044,00140a58 L".txt",7ec5ee3a L"DocName",00000002,00000000,00000000,0033f8cc) ret=7ec54717 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ec54717 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,0000001c) ret=7ec54747 000d:Ret ntdll.RtlAllocateHeap() retval=00142350 ret=7ec54747 000d:Call advapi32.RegGetValueW(00000044,00140a58 L".txt",7ec5ee3a L"DocName",00000002,00000000,00142350,0033f8cc) ret=7ec54781 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ec54781 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142350) ret=7ec59641 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59641 000d:Call advapi32.RegCloseKey(00000044) ret=7ec5964f 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ec5964f 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001424e8) ret=7ec598ff 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec598ff 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001422a0) ret=7ec59922 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59922 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142500) ret=7ec59945 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59945 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141260) ret=7ec59968 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59968 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec5998b 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec5998b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec599ae 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec599ae 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141278) ret=7ec599d1 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec599d1 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141298) ret=7ec599f5 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec599f5 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001422f0) ret=7ec59a18 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a18 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142308) ret=7ec59a3b 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a3b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142320) ret=7ec59a5e 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a5e 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142338) ret=7ec59a81 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a81 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,0000001e,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00140a58 L".wav",ffffffff,00000000,00000000,00000000,00000000) ret=7ec53b8b 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000005 ret=7ec53b8b 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000005) ret=7ec53bad 000d:Ret ntdll.RtlAllocateHeap() retval=001424e8 ret=7ec53bad 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00140a58 L".wav",ffffffff,001424e8,00000005,00000000,00000000) ret=7ec53bf1 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000005 ret=7ec53bf1 000d:Call shlwapi.AssocQueryStringW(00000000,00000003,00140a58,00000000,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00142500 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".wav",00000000,00020019,00142508) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,0014250c) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f4c8) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000002 ret=7ea7722c 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142500) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=80070002 ret=7ec54638 000d:Call shlwapi.AssocQueryStringW(00000000,0000000f,00140a58,00000000,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00142500 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".wav",00000000,00020019,00142508) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,0014250c) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f4c8) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000002 ret=7ea7722c 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142500) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=80070002 ret=7ec54638 000d:Call shlwapi.AssocQueryStringW(00000000,0000000e,00140a58,00000000,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00142500 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".wav",00000000,00020019,00142508) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,0014250c) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegGetValueW(00000044,00000000,7eaa22ce L"Content Type",00000002,00000000,00000000,0033f7a4) ret=7ea77c08 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77c08 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000014) ret=7ea77f05 000d:Ret ntdll.RtlAllocateHeap() retval=00141260 ret=7ea77f05 000d:Call advapi32.RegGetValueW(00000044,00000000,7eaa22ce L"Content Type",00000002,00000000,00141260,0033f7a4) ret=7ea77f50 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77f50 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141260) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142500) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000001 ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000014) ret=7ec54661 000d:Ret ntdll.RtlAllocateHeap() retval=00142500 ret=7ec54661 000d:Call shlwapi.AssocQueryStringW(00000000,0000000e,00140a58,00000000,00142500 L"\00a0\0011\0090\0011D",0033f8c8) ret=7ec54693 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00141260 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".wav",00000000,00020019,00141268) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,0014126c) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegGetValueW(00000044,00000000,7eaa22ce L"Content Type",00000002,00000000,00000000,0033f7a4) ret=7ea77c08 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77c08 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000014) ret=7ea77f05 000d:Ret ntdll.RtlAllocateHeap() retval=00141278 ret=7ea77f05 000d:Call advapi32.RegGetValueW(00000044,00000000,7eaa22ce L"Content Type",00000002,00000000,00141278,0033f7a4) ret=7ea77f50 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77f50 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141278) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141260) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000000 ret=7ec54693 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00141260 ret=7ec55c75 000d:Call shlwapi.AssocQueryStringW(00000000,00000001,00140a58,7ec5ed44,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00142268 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".wav",00000000,00020019,00142270) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,00142274) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f458) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000002 ret=7ea7722c 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142268) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=80070002 ret=7ec54638 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001424e8) ret=7ec598ff 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec598ff 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59922 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59922 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59945 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59945 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59968 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59968 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec5998b 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec5998b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec599ae 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec599ae 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142500) ret=7ec599d1 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec599d1 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141260) ret=7ec599f5 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec599f5 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59a18 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a18 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59a3b 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a3b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59a5e 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a5e 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59a81 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a81 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,0000001f,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00140a58 L".wri",ffffffff,00000000,00000000,00000000,00000000) ret=7ec53b8b 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000005 ret=7ec53b8b 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000005) ret=7ec53bad 000d:Ret ntdll.RtlAllocateHeap() retval=001424e8 ret=7ec53bad 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00140a58 L".wri",ffffffff,001424e8,00000005,00000000,00000000) ret=7ec53bf1 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000005 ret=7ec53bf1 000d:Call shlwapi.AssocQueryStringW(00000000,00000003,00140a58,00000000,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00142500 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".wri",00000000,00020019,00142508) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,0014250c) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f4c8) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=00141260 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00141260,0033f4c8) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegGetValueW(80000000,00141260 L"wrifile",00000000,00000002,00000000,00000000,0033f79c) ret=7ea77e3e 000d:Ret advapi32.RegGetValueW() retval=00000002 ret=7ea77e3e 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141260) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142500) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=80070002 ret=7ec54638 000d:Call shlwapi.AssocQueryStringW(00000000,0000000f,00140a58,00000000,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00142500 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".wri",00000000,00020019,00142508) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,0014250c) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f4c8) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=00141260 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00141260,0033f4c8) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegOpenKeyExW(80000000,00141260 L"wrifile",00000000,00020019,0033f79c) ret=7ea77d33 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea77d33 000d:Call advapi32.RegGetValueW(00000048,7eaa22b6 L"DefaultIcon",00000000,00000002,00000000,00000000,0033f7a0) ret=7ea780bd 000d:Ret advapi32.RegGetValueW() retval=00000002 ret=7ea780bd 000d:Call advapi32.RegCloseKey(00000048) ret=7ea780e4 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea780e4 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141260) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142500) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=80070002 ret=7ec54638 000d:Call shlwapi.AssocQueryStringW(00000000,0000000e,00140a58,00000000,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00142500 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".wri",00000000,00020019,00142508) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,0014250c) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegGetValueW(00000044,00000000,7eaa22ce L"Content Type",00000002,00000000,00000000,0033f7a4) ret=7ea77c08 000d:Ret advapi32.RegGetValueW() retval=00000002 ret=7ea77c08 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142500) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=80070002 ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00141260 ret=7ec55c75 000d:Call shlwapi.AssocQueryStringW(00000000,00000001,00140a58,7ec5ed44,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00142500 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".wri",00000000,00020019,00142508) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,0014250c) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f458) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=00142268 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00142268,0033f458) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegOpenKeyExW(80000000,00142268 L"wrifile",00000000,00020019,0033f4c4) ret=7ea7737b 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7737b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142268) ret=7ea773a1 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea773a1 000d:Call advapi32.RegOpenKeyExW(00000048,7eaa23b4 L"shell",00000000,00020019,0033f4c0) ret=7ea773ed 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea773ed 000d:Call advapi32.RegCloseKey(00000048) ret=7ea773fd 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea773fd 000d:Call advapi32.RegOpenKeyExW(0000004c,7ec5ed44 L"open",00000000,00020019,0033f4bc) ret=7ea77433 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea77433 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ea77459 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77459 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea77467 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea77467 000d:Call advapi32.RegOpenKeyExW(00000048,7eaa23c0 L"command",00000000,00020019,0033f4c8) ret=7ea7749f 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7749f 000d:Call advapi32.RegCloseKey(00000048) ret=7ea774af 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774af 000d:Call advapi32.RegQueryValueExW(0000004c,00000000,00000000,00000000,00000000,0033f458) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000046) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=00142268 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(0000004c,00000000,00000000,00000000,00142268,0033f458) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea774d3 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774d3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142268) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142500) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000001 ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000046) ret=7ec54661 000d:Ret ntdll.RtlAllocateHeap() retval=00142268 ret=7ec54661 000d:Call shlwapi.AssocQueryStringW(00000000,00000001,00140a58,7ec5ed44,00142268 L"\0100\0011\00f0\0011indows\\system32\\wordpad.exe %1",0033f8c8) ret=7ec54693 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00142500 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".wri",00000000,00020019,00142508) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,0014250c) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f458) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=001422b8 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,001422b8,0033f458) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegOpenKeyExW(80000000,001422b8 L"wrifile",00000000,00020019,0033f4c4) ret=7ea7737b 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7737b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001422b8) ret=7ea773a1 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea773a1 000d:Call advapi32.RegOpenKeyExW(00000048,7eaa23b4 L"shell",00000000,00020019,0033f4c0) ret=7ea773ed 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea773ed 000d:Call advapi32.RegCloseKey(00000048) ret=7ea773fd 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea773fd 000d:Call advapi32.RegOpenKeyExW(0000004c,7ec5ed44 L"open",00000000,00020019,0033f4bc) ret=7ea77433 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea77433 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ea77459 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77459 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea77467 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea77467 000d:Call advapi32.RegOpenKeyExW(00000048,7eaa23c0 L"command",00000000,00020019,0033f4c8) ret=7ea7749f 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7749f 000d:Call advapi32.RegCloseKey(00000048) ret=7ea774af 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774af 000d:Call advapi32.RegQueryValueExW(0000004c,00000000,00000000,00000000,00000000,0033f458) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000046) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=001422b8 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(0000004c,00000000,00000000,00000000,001422b8,0033f458) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea774d3 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774d3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001422b8) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142500) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000000 ret=7ec54693 000d:Call shlwapi.AssocQueryStringW(00000000,00000004,00140a58,00000000,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00142500 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".wri",00000000,00020019,00142508) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,0014250c) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f418) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=001422b8 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,001422b8,0033f418) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegOpenKeyExW(80000000,001422b8 L"wrifile",00000000,00020019,0033f484) ret=7ea7737b 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7737b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001422b8) ret=7ea773a1 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea773a1 000d:Call advapi32.RegOpenKeyExW(00000048,7eaa23b4 L"shell",00000000,00020019,0033f480) ret=7ea773ed 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea773ed 000d:Call advapi32.RegCloseKey(00000048) ret=7ea773fd 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea773fd 000d:Call advapi32.RegQueryValueExW(0000004c,00000000,00000000,00000000,00000000,0033f418) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000002 ret=7ea7722c 000d:Call advapi32.RegQueryInfoKeyW(0000004c,00000000,00000000,00000000,00000000,0033f470,00000000,00000000,00000000,00000000,00000000,00000000) ret=7ea77568 000d:Ret advapi32.RegQueryInfoKeyW() retval=00000000 ret=7ea77568 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,0000000c) ret=7ea7759a 000d:Ret ntdll.RtlAllocateHeap() retval=001422b8 ret=7ea7759a 000d:Call advapi32.RegEnumKeyExW(0000004c,00000000,001422b8,0033f470,00000000,00000000,00000000,00000000) ret=7ea775df 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ea775df 000d:Call advapi32.RegOpenKeyExW(0000004c,001422b8 L"open",00000000,00020019,0033f47c) ret=7ea77433 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea77433 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001422b8) ret=7ea77459 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77459 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea77467 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea77467 000d:Call advapi32.RegOpenKeyExW(00000048,7eaa23c0 L"command",00000000,00020019,0033f488) ret=7ea7749f 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7749f 000d:Call advapi32.RegCloseKey(00000048) ret=7ea774af 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774af 000d:Call advapi32.RegQueryValueExW(0000004c,00000000,00000000,00000000,00000000,0033f418) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000046) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=001422b8 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(0000004c,00000000,00000000,00000000,001422b8,0033f418) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea774d3 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774d3 000d:Call KERNEL32.SearchPathW(00000000,001422b8 L"C:\\windows\\system32\\wordpad.exe",00000000,00000104,0033f542,00000000) ret=7ea776c0 000d:Ret KERNEL32.SearchPathW() retval=0000001f ret=7ea776c0 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001422b8) ret=7ea776e6 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea776e6 000d:Call version.GetFileVersionInfoSizeW(0033f542 L"C:\\windows\\system32\\wordpad.exe",0033f79c) ret=7ea77c71 000d:Call KERNEL32.GetModuleHandleExW(00000000,0033f542,0033f408) ret=7e23d460 000d:Ret KERNEL32.GetModuleHandleExW() retval=00000000 ret=7e23d460 000d:Call KERNEL32.LoadLibraryExW(0033f542 L"C:\\windows\\system32\\wordpad.exe",00000000,00000002) ret=7e23d53c 000d:Ret KERNEL32.LoadLibraryExW() retval=00450001 ret=7e23d53c 000d:Call KERNEL32.FindResourceW(00450001,00000001,00000010) ret=7e23d48a 000d:Ret KERNEL32.FindResourceW() retval=00000000 ret=7e23d48a 000d:Call KERNEL32.FreeLibrary(00450001) ret=7e23d4af 000d:Ret KERNEL32.FreeLibrary() retval=00000001 ret=7e23d4af 000d:Ret version.GetFileVersionInfoSizeW() retval=00000000 ret=7ea77c71 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142500) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000001 ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec54661 000d:Ret ntdll.RtlAllocateHeap() retval=00142500 ret=7ec54661 000d:Call shlwapi.AssocQueryStringW(00000000,00000004,00140a58,00000000,00142500 L"\00a0\0011\0090\0011D",0033f8c8) ret=7ec54693 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=001422b8 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".wri",00000000,00020019,001422c0) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,001422c4) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f418) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=001422d0 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,001422d0,0033f418) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegOpenKeyExW(80000000,001422d0 L"wrifile",00000000,00020019,0033f484) ret=7ea7737b 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7737b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001422d0) ret=7ea773a1 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea773a1 000d:Call advapi32.RegOpenKeyExW(00000048,7eaa23b4 L"shell",00000000,00020019,0033f480) ret=7ea773ed 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea773ed 000d:Call advapi32.RegCloseKey(00000048) ret=7ea773fd 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea773fd 000d:Call advapi32.RegQueryValueExW(0000004c,00000000,00000000,00000000,00000000,0033f418) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000002 ret=7ea7722c 000d:Call advapi32.RegQueryInfoKeyW(0000004c,00000000,00000000,00000000,00000000,0033f470,00000000,00000000,00000000,00000000,00000000,00000000) ret=7ea77568 000d:Ret advapi32.RegQueryInfoKeyW() retval=00000000 ret=7ea77568 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,0000000c) ret=7ea7759a 000d:Ret ntdll.RtlAllocateHeap() retval=001422d0 ret=7ea7759a 000d:Call advapi32.RegEnumKeyExW(0000004c,00000000,001422d0,0033f470,00000000,00000000,00000000,00000000) ret=7ea775df 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ea775df 000d:Call advapi32.RegOpenKeyExW(0000004c,001422d0 L"open",00000000,00020019,0033f47c) ret=7ea77433 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea77433 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001422d0) ret=7ea77459 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77459 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea77467 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea77467 000d:Call advapi32.RegOpenKeyExW(00000048,7eaa23c0 L"command",00000000,00020019,0033f488) ret=7ea7749f 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7749f 000d:Call advapi32.RegCloseKey(00000048) ret=7ea774af 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774af 000d:Call advapi32.RegQueryValueExW(0000004c,00000000,00000000,00000000,00000000,0033f418) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000046) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=001422d0 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(0000004c,00000000,00000000,00000000,001422d0,0033f418) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea774d3 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774d3 000d:Call KERNEL32.SearchPathW(00000000,001422d0 L"C:\\windows\\system32\\wordpad.exe",00000000,00000104,0033f542,00000000) ret=7ea776c0 000d:Ret KERNEL32.SearchPathW() retval=0000001f ret=7ea776c0 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001422d0) ret=7ea776e6 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea776e6 000d:Call version.GetFileVersionInfoSizeW(0033f542 L"C:\\windows\\system32\\wordpad.exe",0033f79c) ret=7ea77c71 000d:Call KERNEL32.GetModuleHandleExW(00000000,0033f542,0033f408) ret=7e23d460 000d:Ret KERNEL32.GetModuleHandleExW() retval=00000000 ret=7e23d460 000d:Call KERNEL32.LoadLibraryExW(0033f542 L"C:\\windows\\system32\\wordpad.exe",00000000,00000002) ret=7e23d53c 000d:Ret KERNEL32.LoadLibraryExW() retval=00450001 ret=7e23d53c 000d:Call KERNEL32.FindResourceW(00450001,00000001,00000010) ret=7e23d48a 000d:Ret KERNEL32.FindResourceW() retval=00000000 ret=7e23d48a 000d:Call KERNEL32.FreeLibrary(00450001) ret=7e23d4af 000d:Ret KERNEL32.FreeLibrary() retval=00000001 ret=7e23d4af 000d:Ret version.GetFileVersionInfoSizeW() retval=00000000 ret=7ea77c71 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001422b8) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000000 ret=7ec54693 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00142500 L"wordpad",ffffffff,00000000,00000000,00000000,00000000) ret=7ec53b8b 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000008 ret=7ec53b8b 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000008) ret=7ec53bad 000d:Ret ntdll.RtlAllocateHeap() retval=001422b8 ret=7ec53bad 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00142500 L"wordpad",ffffffff,001422b8,00000008,00000000,00000000) ret=7ec53bf1 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000008 ret=7ec53bf1 000d:Call advapi32.RegGetValueW(80000000,00140a58 L".wri",00000000,00000002,00000000,00000000,0033f8cc) ret=7ec54717 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ec54717 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec54747 000d:Ret ntdll.RtlAllocateHeap() retval=001422d0 ret=7ec54747 000d:Call advapi32.RegGetValueW(80000000,00140a58 L".wri",00000000,00000002,00000000,001422d0,0033f8cc) ret=7ec54781 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ec54781 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,001422d0 L"wrifile",ffffffff,00000000,00000000,00000000,00000000) ret=7ec53b8b 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000008 ret=7ec53b8b 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000008) ret=7ec53bad 000d:Ret ntdll.RtlAllocateHeap() retval=001422e8 ret=7ec53bad 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,001422d0 L"wrifile",ffffffff,001422e8,00000008,00000000,00000000) ret=7ec53bf1 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000008 ret=7ec53bf1 000d:Call advapi32.RegCreateKeyW(80000001,7ec5ee60 L"Software\\Wine\\FileOpenAssociations",0033f8d0) ret=7ec547ef 000d:Ret advapi32.RegCreateKeyW() retval=00000000 ret=7ec547ef 000d:Call advapi32.RegGetValueA(00000044,001424e8 ".wri",7ec5e310 "MimeType",00000002,00000000,00000000,0033f8cc) ret=7ec54887 000d:Ret advapi32.RegGetValueA() retval=00000000 ret=7ec54887 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000016) ret=7ec548b7 000d:Ret ntdll.RtlAllocateHeap() retval=00142300 ret=7ec548b7 000d:Call advapi32.RegGetValueA(00000044,001424e8 ".wri",7ec5e310 "MimeType",00000002,00000000,00142300,0033f8cc) ret=7ec548f1 000d:Ret advapi32.RegGetValueA() retval=00000000 ret=7ec548f1 000d:Call KERNEL32.lstrcmpA(00142300 "application/x-mswrite",00141260 "application/x-mswrite") ret=7ec594ae 000d:Ret KERNEL32.lstrcmpA() retval=00000000 ret=7ec594ae 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142300) ret=7ec594e0 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec594e0 000d:Call advapi32.RegGetValueW(00000044,00140a58 L".wri",7ec5ee4a L"ProgID",00000002,00000000,00000000,0033f8cc) ret=7ec54717 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ec54717 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec54747 000d:Ret ntdll.RtlAllocateHeap() retval=00142300 ret=7ec54747 000d:Call advapi32.RegGetValueW(00000044,00140a58 L".wri",7ec5ee4a L"ProgID",00000002,00000000,00142300,0033f8cc) ret=7ec54781 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ec54781 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142300) ret=7ec59557 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59557 000d:Call advapi32.RegGetValueA(00000044,001424e8 ".wri",7ec5e319 "AppName",00000002,00000000,00000000,0033f8cc) ret=7ec54887 000d:Ret advapi32.RegGetValueA() retval=00000000 ret=7ec54887 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000008) ret=7ec548b7 000d:Ret ntdll.RtlAllocateHeap() retval=00142300 ret=7ec548b7 000d:Call advapi32.RegGetValueA(00000044,001424e8 ".wri",7ec5e319 "AppName",00000002,00000000,00142300,0033f8cc) ret=7ec548f1 000d:Ret advapi32.RegGetValueA() retval=00000000 ret=7ec548f1 000d:Call KERNEL32.lstrcmpA(00142300 "wordpad",001422b8 "wordpad") ret=7ec59580 000d:Ret KERNEL32.lstrcmpA() retval=00000000 ret=7ec59580 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142300) ret=7ec595ae 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec595ae 000d:Call advapi32.RegGetValueW(00000044,00140a58 L".wri",7ec5ee3a L"DocName",00000002,00000000,00000000,0033f8cc) ret=7ec54717 000d:Ret advapi32.RegGetValueW() retval=00000002 ret=7ec54717 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59641 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59641 000d:Call advapi32.RegCloseKey(00000044) ret=7ec5964f 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ec5964f 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001424e8) ret=7ec598ff 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec598ff 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142268) ret=7ec59922 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59922 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59945 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59945 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59968 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59968 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec5998b 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec5998b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec599ae 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec599ae 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec599d1 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec599d1 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141260) ret=7ec599f5 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec599f5 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142500) ret=7ec59a18 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a18 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001422b8) ret=7ec59a3b 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a3b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001422d0) ret=7ec59a5e 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a5e 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001422e8) ret=7ec59a81 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a81 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,00000020,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00140a58 L".xbm",ffffffff,00000000,00000000,00000000,00000000) ret=7ec53b8b 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000005 ret=7ec53b8b 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000005) ret=7ec53bad 000d:Ret ntdll.RtlAllocateHeap() retval=001424e8 ret=7ec53bad 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00140a58 L".xbm",ffffffff,001424e8,00000005,00000000,00000000) ret=7ec53bf1 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000005 ret=7ec53bf1 000d:Call shlwapi.AssocQueryStringW(00000000,00000003,00140a58,00000000,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00142500 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".xbm",00000000,00020019,00142508) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,0014250c) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f4c8) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000002 ret=7ea7722c 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142500) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=80070002 ret=7ec54638 000d:Call shlwapi.AssocQueryStringW(00000000,0000000f,00140a58,00000000,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00142500 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".xbm",00000000,00020019,00142508) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,0014250c) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f4c8) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000002 ret=7ea7722c 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142500) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=80070002 ret=7ec54638 000d:Call shlwapi.AssocQueryStringW(00000000,0000000e,00140a58,00000000,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00142500 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".xbm",00000000,00020019,00142508) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,0014250c) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegGetValueW(00000044,00000000,7eaa22ce L"Content Type",00000002,00000000,00000000,0033f7a4) ret=7ea77c08 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77c08 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000020) ret=7ea77f05 000d:Ret ntdll.RtlAllocateHeap() retval=00141260 ret=7ea77f05 000d:Call advapi32.RegGetValueW(00000044,00000000,7eaa22ce L"Content Type",00000002,00000000,00141260,0033f7a4) ret=7ea77f50 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77f50 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141260) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142500) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000001 ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000020) ret=7ec54661 000d:Ret ntdll.RtlAllocateHeap() retval=00142500 ret=7ec54661 000d:Call shlwapi.AssocQueryStringW(00000000,0000000e,00140a58,00000000,00142500 L"\00a0\0011\0090\0011D",0033f8c8) ret=7ec54693 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00141260 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".xbm",00000000,00020019,00141268) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,0014126c) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegGetValueW(00000044,00000000,7eaa22ce L"Content Type",00000002,00000000,00000000,0033f7a4) ret=7ea77c08 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77c08 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000020) ret=7ea77f05 000d:Ret ntdll.RtlAllocateHeap() retval=00141278 ret=7ea77f05 000d:Call advapi32.RegGetValueW(00000044,00000000,7eaa22ce L"Content Type",00000002,00000000,00141278,0033f7a4) ret=7ea77f50 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77f50 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141278) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141260) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000000 ret=7ec54693 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00141260 ret=7ec55c75 000d:Call shlwapi.AssocQueryStringW(00000000,00000001,00140a58,7ec5ed44,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00142268 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".xbm",00000000,00020019,00142270) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,00142274) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f458) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000002 ret=7ea7722c 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142268) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=80070002 ret=7ec54638 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001424e8) ret=7ec598ff 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec598ff 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59922 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59922 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59945 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59945 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59968 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59968 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec5998b 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec5998b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec599ae 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec599ae 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142500) ret=7ec599d1 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec599d1 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141260) ret=7ec599f5 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec599f5 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59a18 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a18 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59a3b 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a3b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59a5e 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a5e 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59a81 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a81 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,00000021,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00140a58 L".xml",ffffffff,00000000,00000000,00000000,00000000) ret=7ec53b8b 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000005 ret=7ec53b8b 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000005) ret=7ec53bad 000d:Ret ntdll.RtlAllocateHeap() retval=001424e8 ret=7ec53bad 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00140a58 L".xml",ffffffff,001424e8,00000005,00000000,00000000) ret=7ec53bf1 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000005 ret=7ec53bf1 000d:Call shlwapi.AssocQueryStringW(00000000,00000003,00140a58,00000000,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00142500 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".xml",00000000,00020019,00142508) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,0014250c) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f4c8) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=00141260 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00141260,0033f4c8) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegGetValueW(80000000,00141260 L"xmlfile",00000000,00000002,00000000,00000000,0033f79c) ret=7ea77e3e 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77e3e 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,0000001a) ret=7ea77fc6 000d:Ret ntdll.RtlAllocateHeap() retval=00141278 ret=7ea77fc6 000d:Call advapi32.RegGetValueW(80000000,00141260 L"xmlfile",00000000,00000002,00000000,00141278,0033f79c) ret=7ea7800c 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea7800c 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141278) ret=7ea78066 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea78066 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141260) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142500) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000001 ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,0000001a) ret=7ec54661 000d:Ret ntdll.RtlAllocateHeap() retval=00142500 ret=7ec54661 000d:Call shlwapi.AssocQueryStringW(00000000,00000003,00140a58,00000000,00142500 L"\00a0\0011\0090\0011D",0033f8c8) ret=7ec54693 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00141260 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".xml",00000000,00020019,00141268) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,0014126c) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f4c8) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=00141278 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00141278,0033f4c8) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegGetValueW(80000000,00141278 L"xmlfile",00000000,00000002,00000000,00000000,0033f79c) ret=7ea77e3e 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77e3e 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,0000001a) ret=7ea77fc6 000d:Ret ntdll.RtlAllocateHeap() retval=00141290 ret=7ea77fc6 000d:Call advapi32.RegGetValueW(80000000,00141278 L"xmlfile",00000000,00000002,00000000,00141290,0033f79c) ret=7ea7800c 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea7800c 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141290) ret=7ea78066 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea78066 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141278) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141260) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000000 ret=7ec54693 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00142500 L"XML Document",ffffffff,00000000,00000000,00000000,00000000) ret=7ec53b8b 000d:Ret KERNEL32.WideCharToMultiByte() retval=0000000d ret=7ec53b8b 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,0000000d) ret=7ec53bad 000d:Ret ntdll.RtlAllocateHeap() retval=00141260 ret=7ec53bad 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00142500 L"XML Document",ffffffff,00141260,0000000d,00000000,00000000) ret=7ec53bf1 000d:Ret KERNEL32.WideCharToMultiByte() retval=0000000d ret=7ec53bf1 000d:Call shlwapi.AssocQueryStringW(00000000,0000000f,00140a58,00000000,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00141278 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".xml",00000000,00020019,00141280) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,00141284) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f4c8) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=00141290 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00141290,0033f4c8) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegOpenKeyExW(80000000,00141290 L"xmlfile",00000000,00020019,0033f79c) ret=7ea77d33 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea77d33 000d:Call advapi32.RegGetValueW(00000048,7eaa22b6 L"DefaultIcon",00000000,00000002,00000000,00000000,0033f7a0) ret=7ea780bd 000d:Ret advapi32.RegGetValueW() retval=00000002 ret=7ea780bd 000d:Call advapi32.RegCloseKey(00000048) ret=7ea780e4 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea780e4 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141290) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141278) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=80070002 ret=7ec54638 000d:Call shlwapi.AssocQueryStringW(00000000,0000000e,00140a58,00000000,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00141278 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".xml",00000000,00020019,00141280) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,00141284) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegGetValueW(00000044,00000000,7eaa22ce L"Content Type",00000002,00000000,00000000,0033f7a4) ret=7ea77c08 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77c08 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000012) ret=7ea77f05 000d:Ret ntdll.RtlAllocateHeap() retval=00141290 ret=7ea77f05 000d:Call advapi32.RegGetValueW(00000044,00000000,7eaa22ce L"Content Type",00000002,00000000,00141290,0033f7a4) ret=7ea77f50 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77f50 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141290) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141278) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000001 ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000012) ret=7ec54661 000d:Ret ntdll.RtlAllocateHeap() retval=00141278 ret=7ec54661 000d:Call shlwapi.AssocQueryStringW(00000000,0000000e,00140a58,00000000,00141278 L"\2670\0014\0120\0011D",0033f8c8) ret=7ec54693 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00141298 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".xml",00000000,00020019,001412a0) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,001412a4) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegGetValueW(00000044,00000000,7eaa22ce L"Content Type",00000002,00000000,00000000,0033f7a4) ret=7ea77c08 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77c08 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000012) ret=7ea77f05 000d:Ret ntdll.RtlAllocateHeap() retval=001412b0 ret=7ea77f05 000d:Call advapi32.RegGetValueW(00000044,00000000,7eaa22ce L"Content Type",00000002,00000000,001412b0,0033f7a4) ret=7ea77f50 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77f50 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001412b0) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141298) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000000 ret=7ec54693 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00141298 ret=7ec55c75 000d:Call shlwapi.AssocQueryStringW(00000000,00000001,00140a58,7ec5ed44,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=001422a0 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".xml",00000000,00020019,001422a8) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,001422ac) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f458) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=001422b8 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,001422b8,0033f458) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegOpenKeyExW(80000000,001422b8 L"xmlfile",00000000,00020019,0033f4c4) ret=7ea7737b 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7737b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001422b8) ret=7ea773a1 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea773a1 000d:Call advapi32.RegOpenKeyExW(00000048,7eaa23b4 L"shell",00000000,00020019,0033f4c0) ret=7ea773ed 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea773ed 000d:Call advapi32.RegCloseKey(00000048) ret=7ea773fd 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea773fd 000d:Call advapi32.RegOpenKeyExW(0000004c,7ec5ed44 L"open",00000000,00020019,0033f4bc) ret=7ea77433 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea77433 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ea77459 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77459 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea77467 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea77467 000d:Call advapi32.RegOpenKeyExW(00000048,7eaa23c0 L"command",00000000,00020019,0033f4c8) ret=7ea7749f 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7749f 000d:Call advapi32.RegCloseKey(00000048) ret=7ea774af 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774af 000d:Call advapi32.RegQueryValueExW(0000004c,00000000,00000000,00000000,00000000,0033f458) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000058) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=001422b8 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(0000004c,00000000,00000000,00000000,001422b8,0033f458) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea774d3 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774d3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001422b8) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001422a0) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000001 ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000058) ret=7ec54661 000d:Ret ntdll.RtlAllocateHeap() retval=001422a0 ret=7ec54661 000d:Call shlwapi.AssocQueryStringW(00000000,00000001,00140a58,7ec5ed44,001422a0 L"\0100\0011\00f0\0011D",0033f8c8) ret=7ec54693 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00142300 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".xml",00000000,00020019,00142308) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,0014230c) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f458) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=00142318 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00142318,0033f458) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegOpenKeyExW(80000000,00142318 L"xmlfile",00000000,00020019,0033f4c4) ret=7ea7737b 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7737b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142318) ret=7ea773a1 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea773a1 000d:Call advapi32.RegOpenKeyExW(00000048,7eaa23b4 L"shell",00000000,00020019,0033f4c0) ret=7ea773ed 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea773ed 000d:Call advapi32.RegCloseKey(00000048) ret=7ea773fd 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea773fd 000d:Call advapi32.RegOpenKeyExW(0000004c,7ec5ed44 L"open",00000000,00020019,0033f4bc) ret=7ea77433 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea77433 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ea77459 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77459 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea77467 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea77467 000d:Call advapi32.RegOpenKeyExW(00000048,7eaa23c0 L"command",00000000,00020019,0033f4c8) ret=7ea7749f 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7749f 000d:Call advapi32.RegCloseKey(00000048) ret=7ea774af 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774af 000d:Call advapi32.RegQueryValueExW(0000004c,00000000,00000000,00000000,00000000,0033f458) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000058) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=00142318 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(0000004c,00000000,00000000,00000000,00142318,0033f458) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea774d3 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774d3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142318) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142300) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000000 ret=7ec54693 000d:Call shlwapi.AssocQueryStringW(00000000,00000004,00140a58,00000000,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00142300 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".xml",00000000,00020019,00142308) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,0014230c) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f418) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=00142318 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00142318,0033f418) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegOpenKeyExW(80000000,00142318 L"xmlfile",00000000,00020019,0033f484) ret=7ea7737b 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7737b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142318) ret=7ea773a1 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea773a1 000d:Call advapi32.RegOpenKeyExW(00000048,7eaa23b4 L"shell",00000000,00020019,0033f480) ret=7ea773ed 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea773ed 000d:Call advapi32.RegCloseKey(00000048) ret=7ea773fd 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea773fd 000d:Call advapi32.RegQueryValueExW(0000004c,00000000,00000000,00000000,00000000,0033f418) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000002 ret=7ea7722c 000d:Call advapi32.RegQueryInfoKeyW(0000004c,00000000,00000000,00000000,00000000,0033f470,00000000,00000000,00000000,00000000,00000000,00000000) ret=7ea77568 000d:Ret advapi32.RegQueryInfoKeyW() retval=00000000 ret=7ea77568 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,0000000a) ret=7ea7759a 000d:Ret ntdll.RtlAllocateHeap() retval=00142318 ret=7ea7759a 000d:Call advapi32.RegEnumKeyExW(0000004c,00000000,00142318,0033f470,00000000,00000000,00000000,00000000) ret=7ea775df 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ea775df 000d:Call advapi32.RegOpenKeyExW(0000004c,00142318 L"open",00000000,00020019,0033f47c) ret=7ea77433 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea77433 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142318) ret=7ea77459 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77459 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea77467 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea77467 000d:Call advapi32.RegOpenKeyExW(00000048,7eaa23c0 L"command",00000000,00020019,0033f488) ret=7ea7749f 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7749f 000d:Call advapi32.RegCloseKey(00000048) ret=7ea774af 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774af 000d:Call advapi32.RegQueryValueExW(0000004c,00000000,00000000,00000000,00000000,0033f418) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000058) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=00142318 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(0000004c,00000000,00000000,00000000,00142318,0033f418) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea774d3 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774d3 000d:Call KERNEL32.SearchPathW(00000000,00142318 L"C:\\windows\\system32\\winebrowser.exe",00000000,00000104,0033f542,00000000) ret=7ea776c0 000d:Ret KERNEL32.SearchPathW() retval=00000023 ret=7ea776c0 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142318) ret=7ea776e6 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea776e6 000d:Call version.GetFileVersionInfoSizeW(0033f542 L"C:\\windows\\system32\\winebrowser.exe",0033f79c) ret=7ea77c71 000d:Call KERNEL32.GetModuleHandleExW(00000000,0033f542,0033f408) ret=7e23d460 000d:Ret KERNEL32.GetModuleHandleExW() retval=00000000 ret=7e23d460 000d:Call KERNEL32.LoadLibraryExW(0033f542 L"C:\\windows\\system32\\winebrowser.exe",00000000,00000002) ret=7e23d53c 000d:Ret KERNEL32.LoadLibraryExW() retval=00450001 ret=7e23d53c 000d:Call KERNEL32.FindResourceW(00450001,00000001,00000010) ret=7e23d48a 000d:Ret KERNEL32.FindResourceW() retval=00000000 ret=7e23d48a 000d:Call KERNEL32.FreeLibrary(00450001) ret=7e23d4af 000d:Ret KERNEL32.FreeLibrary() retval=00000001 ret=7e23d4af 000d:Ret version.GetFileVersionInfoSizeW() retval=00000000 ret=7ea77c71 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142300) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000001 ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000018) ret=7ec54661 000d:Ret ntdll.RtlAllocateHeap() retval=00142300 ret=7ec54661 000d:Call shlwapi.AssocQueryStringW(00000000,00000004,00140a58,00000000,00142300 L"\00f0\0011\00e0\0011D",0033f8c8) ret=7ec54693 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00142320 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".xml",00000000,00020019,00142328) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,0014232c) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f418) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=00142338 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00142338,0033f418) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegOpenKeyExW(80000000,00142338 L"xmlfile",00000000,00020019,0033f484) ret=7ea7737b 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7737b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142338) ret=7ea773a1 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea773a1 000d:Call advapi32.RegOpenKeyExW(00000048,7eaa23b4 L"shell",00000000,00020019,0033f480) ret=7ea773ed 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea773ed 000d:Call advapi32.RegCloseKey(00000048) ret=7ea773fd 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea773fd 000d:Call advapi32.RegQueryValueExW(0000004c,00000000,00000000,00000000,00000000,0033f418) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000002 ret=7ea7722c 000d:Call advapi32.RegQueryInfoKeyW(0000004c,00000000,00000000,00000000,00000000,0033f470,00000000,00000000,00000000,00000000,00000000,00000000) ret=7ea77568 000d:Ret advapi32.RegQueryInfoKeyW() retval=00000000 ret=7ea77568 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,0000000a) ret=7ea7759a 000d:Ret ntdll.RtlAllocateHeap() retval=00142338 ret=7ea7759a 000d:Call advapi32.RegEnumKeyExW(0000004c,00000000,00142338,0033f470,00000000,00000000,00000000,00000000) ret=7ea775df 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ea775df 000d:Call advapi32.RegOpenKeyExW(0000004c,00142338 L"open",00000000,00020019,0033f47c) ret=7ea77433 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea77433 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142338) ret=7ea77459 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77459 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea77467 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea77467 000d:Call advapi32.RegOpenKeyExW(00000048,7eaa23c0 L"command",00000000,00020019,0033f488) ret=7ea7749f 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7749f 000d:Call advapi32.RegCloseKey(00000048) ret=7ea774af 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774af 000d:Call advapi32.RegQueryValueExW(0000004c,00000000,00000000,00000000,00000000,0033f418) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000058) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=00142338 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(0000004c,00000000,00000000,00000000,00142338,0033f418) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea774d3 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774d3 000d:Call KERNEL32.SearchPathW(00000000,00142338 L"C:\\windows\\system32\\winebrowser.exe",00000000,00000104,0033f542,00000000) ret=7ea776c0 000d:Ret KERNEL32.SearchPathW() retval=00000023 ret=7ea776c0 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142338) ret=7ea776e6 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea776e6 000d:Call version.GetFileVersionInfoSizeW(0033f542 L"C:\\windows\\system32\\winebrowser.exe",0033f79c) ret=7ea77c71 000d:Call KERNEL32.GetModuleHandleExW(00000000,0033f542,0033f408) ret=7e23d460 000d:Ret KERNEL32.GetModuleHandleExW() retval=00000000 ret=7e23d460 000d:Call KERNEL32.LoadLibraryExW(0033f542 L"C:\\windows\\system32\\winebrowser.exe",00000000,00000002) ret=7e23d53c 000d:Ret KERNEL32.LoadLibraryExW() retval=00450001 ret=7e23d53c 000d:Call KERNEL32.FindResourceW(00450001,00000001,00000010) ret=7e23d48a 000d:Ret KERNEL32.FindResourceW() retval=00000000 ret=7e23d48a 000d:Call KERNEL32.FreeLibrary(00450001) ret=7e23d4af 000d:Ret KERNEL32.FreeLibrary() retval=00000001 ret=7e23d4af 000d:Ret version.GetFileVersionInfoSizeW() retval=00000000 ret=7ea77c71 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142320) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000000 ret=7ec54693 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00142300 L"winebrowser",ffffffff,00000000,00000000,00000000,00000000) ret=7ec53b8b 000d:Ret KERNEL32.WideCharToMultiByte() retval=0000000c ret=7ec53b8b 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,0000000c) ret=7ec53bad 000d:Ret ntdll.RtlAllocateHeap() retval=00142320 ret=7ec53bad 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00142300 L"winebrowser",ffffffff,00142320,0000000c,00000000,00000000) ret=7ec53bf1 000d:Ret KERNEL32.WideCharToMultiByte() retval=0000000c ret=7ec53bf1 000d:Call advapi32.RegGetValueW(80000000,00140a58 L".xml",00000000,00000002,00000000,00000000,0033f8cc) ret=7ec54717 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ec54717 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec54747 000d:Ret ntdll.RtlAllocateHeap() retval=00142338 ret=7ec54747 000d:Call advapi32.RegGetValueW(80000000,00140a58 L".xml",00000000,00000002,00000000,00142338,0033f8cc) ret=7ec54781 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ec54781 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00142338 L"xmlfile",ffffffff,00000000,00000000,00000000,00000000) ret=7ec53b8b 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000008 ret=7ec53b8b 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000008) ret=7ec53bad 000d:Ret ntdll.RtlAllocateHeap() retval=00142350 ret=7ec53bad 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00142338 L"xmlfile",ffffffff,00142350,00000008,00000000,00000000) ret=7ec53bf1 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000008 ret=7ec53bf1 000d:Call advapi32.RegCreateKeyW(80000001,7ec5ee60 L"Software\\Wine\\FileOpenAssociations",0033f8d0) ret=7ec547ef 000d:Ret advapi32.RegCreateKeyW() retval=00000000 ret=7ec547ef 000d:Call advapi32.RegGetValueA(00000044,001424e8 ".xml",7ec5e310 "MimeType",00000002,00000000,00000000,0033f8cc) ret=7ec54887 000d:Ret advapi32.RegGetValueA() retval=00000000 ret=7ec54887 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec548b7 000d:Ret ntdll.RtlAllocateHeap() retval=00142368 ret=7ec548b7 000d:Call advapi32.RegGetValueA(00000044,001424e8 ".xml",7ec5e310 "MimeType",00000002,00000000,00142368,0033f8cc) ret=7ec548f1 000d:Ret advapi32.RegGetValueA() retval=00000000 ret=7ec548f1 000d:Call KERNEL32.lstrcmpA(00142368 "application/xml",00141298 "application/xml") ret=7ec594ae 000d:Ret KERNEL32.lstrcmpA() retval=00000000 ret=7ec594ae 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142368) ret=7ec594e0 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec594e0 000d:Call advapi32.RegGetValueW(00000044,00140a58 L".xml",7ec5ee4a L"ProgID",00000002,00000000,00000000,0033f8cc) ret=7ec54717 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ec54717 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ec54747 000d:Ret ntdll.RtlAllocateHeap() retval=00142368 ret=7ec54747 000d:Call advapi32.RegGetValueW(00000044,00140a58 L".xml",7ec5ee4a L"ProgID",00000002,00000000,00142368,0033f8cc) ret=7ec54781 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ec54781 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142368) ret=7ec59557 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59557 000d:Call advapi32.RegGetValueA(00000044,001424e8 ".xml",7ec5e319 "AppName",00000002,00000000,00000000,0033f8cc) ret=7ec54887 000d:Ret advapi32.RegGetValueA() retval=00000000 ret=7ec54887 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,0000000c) ret=7ec548b7 000d:Ret ntdll.RtlAllocateHeap() retval=00142368 ret=7ec548b7 000d:Call advapi32.RegGetValueA(00000044,001424e8 ".xml",7ec5e319 "AppName",00000002,00000000,00142368,0033f8cc) ret=7ec548f1 000d:Ret advapi32.RegGetValueA() retval=00000000 ret=7ec548f1 000d:Call KERNEL32.lstrcmpA(00142368 "winebrowser",00142320 "winebrowser") ret=7ec59580 000d:Ret KERNEL32.lstrcmpA() retval=00000000 ret=7ec59580 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142368) ret=7ec595ae 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec595ae 000d:Call advapi32.RegGetValueW(00000044,00140a58 L".xml",7ec5ee3a L"DocName",00000002,00000000,00000000,0033f8cc) ret=7ec54717 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ec54717 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,0000001a) ret=7ec54747 000d:Ret ntdll.RtlAllocateHeap() retval=00142368 ret=7ec54747 000d:Call advapi32.RegGetValueW(00000044,00140a58 L".xml",7ec5ee3a L"DocName",00000002,00000000,00142368,0033f8cc) ret=7ec54781 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ec54781 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142368) ret=7ec59641 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59641 000d:Call advapi32.RegCloseKey(00000044) ret=7ec5964f 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ec5964f 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001424e8) ret=7ec598ff 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec598ff 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001422a0) ret=7ec59922 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59922 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142500) ret=7ec59945 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59945 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141260) ret=7ec59968 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59968 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec5998b 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec5998b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec599ae 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec599ae 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141278) ret=7ec599d1 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec599d1 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141298) ret=7ec599f5 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec599f5 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142300) ret=7ec59a18 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a18 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142320) ret=7ec59a3b 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a3b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142338) ret=7ec59a5e 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a5e 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142350) ret=7ec59a81 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a81 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,00000022,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00140a58 L".xsl",ffffffff,00000000,00000000,00000000,00000000) ret=7ec53b8b 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000005 ret=7ec53b8b 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000005) ret=7ec53bad 000d:Ret ntdll.RtlAllocateHeap() retval=001424e8 ret=7ec53bad 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00140a58 L".xsl",ffffffff,001424e8,00000005,00000000,00000000) ret=7ec53bf1 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000005 ret=7ec53bf1 000d:Call shlwapi.AssocQueryStringW(00000000,00000003,00140a58,00000000,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00142500 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".xsl",00000000,00020019,00142508) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,0014250c) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f4c8) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000002 ret=7ea7722c 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142500) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=80070002 ret=7ec54638 000d:Call shlwapi.AssocQueryStringW(00000000,0000000f,00140a58,00000000,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00142500 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".xsl",00000000,00020019,00142508) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,0014250c) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f4c8) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000002 ret=7ea7722c 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142500) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=80070002 ret=7ec54638 000d:Call shlwapi.AssocQueryStringW(00000000,0000000e,00140a58,00000000,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00142500 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".xsl",00000000,00020019,00142508) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,0014250c) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegGetValueW(00000044,00000000,7eaa22ce L"Content Type",00000002,00000000,00000000,0033f7a4) ret=7ea77c08 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77c08 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000012) ret=7ea77f05 000d:Ret ntdll.RtlAllocateHeap() retval=00141260 ret=7ea77f05 000d:Call advapi32.RegGetValueW(00000044,00000000,7eaa22ce L"Content Type",00000002,00000000,00141260,0033f7a4) ret=7ea77f50 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77f50 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141260) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142500) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000001 ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000012) ret=7ec54661 000d:Ret ntdll.RtlAllocateHeap() retval=00142500 ret=7ec54661 000d:Call shlwapi.AssocQueryStringW(00000000,0000000e,00140a58,00000000,00142500 L"\00a0\0011\0090\0011D",0033f8c8) ret=7ec54693 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00141260 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".xsl",00000000,00020019,00141268) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,0014126c) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegGetValueW(00000044,00000000,7eaa22ce L"Content Type",00000002,00000000,00000000,0033f7a4) ret=7ea77c08 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77c08 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000012) ret=7ea77f05 000d:Ret ntdll.RtlAllocateHeap() retval=00141278 ret=7ea77f05 000d:Call advapi32.RegGetValueW(00000044,00000000,7eaa22ce L"Content Type",00000002,00000000,00141278,0033f7a4) ret=7ea77f50 000d:Ret advapi32.RegGetValueW() retval=00000000 ret=7ea77f50 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141278) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141260) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000000 ret=7ec54693 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec55c75 000d:Ret ntdll.RtlAllocateHeap() retval=00141260 ret=7ec55c75 000d:Call shlwapi.AssocQueryStringW(00000000,00000001,00140a58,7ec5ed44,00000000,0033f8c8) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=00142268 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".xsl",00000000,00020019,00142270) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000044,7eaa241e L"ProgID",00000000,00020019,00142274) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000044,00000000,00000000,00000000,00000000,0033f458) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000002 ret=7ea7722c 000d:Call advapi32.RegCloseKey(00000044) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142268) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=80070002 ret=7ec54638 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001424e8) ret=7ec598ff 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec598ff 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59922 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59922 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59945 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59945 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59968 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59968 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec5998b 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec5998b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec599ae 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec599ae 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00142500) ret=7ec599d1 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec599d1 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00141260) ret=7ec599f5 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec599f5 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59a18 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a18 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59a3b 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a3b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59a5e 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a5e 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59a81 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59a81 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,00000023,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,00000024,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,00000025,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,00000026,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,00000027,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,00000028,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,00000029,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,0000002a,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,0000002b,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,0000002c,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,0000002d,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,0000002e,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,0000002f,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,00000030,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,00000031,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,00000032,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,00000033,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,00000034,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,00000035,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,00000036,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,00000037,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,00000038,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,00000039,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,0000003a,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,0000003b,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,0000003c,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,0000003d,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,0000003e,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,0000003f,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,00000040,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,00000041,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,00000042,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,00000043,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,00000044,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,00000045,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,00000046,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,00000047,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,00000048,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,00000049,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,0000004a,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,0000004b,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,0000004c,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,0000004d,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,0000004e,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,0000004f,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,00000050,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,00000051,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,00000052,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,00000053,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,00000054,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,00000055,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,00000056,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,00000057,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,00000058,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,00000059,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,0000005a,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,0000005b,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,0000005c,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,0000005d,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,0000005e,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,0000005f,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,00000060,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,00000061,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,00000062,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,00000063,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,00000064,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,00000065,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,00000066,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,00000067,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,00000068,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,00000069,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,0000006a,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,0000006b,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,0000006c,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,0000006d,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,0000006e,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,0000006f,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,00000070,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,00000071,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,00000072,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,00000073,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,00000074,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,00000075,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,00000076,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,00000077,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,00000078,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,00000079,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,0000007a,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,0000007b,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,0000007c,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,0000007d,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,0000007e,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,0000007f,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,00000080,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,00000081,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,00000082,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,00000083,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,00000084,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,00000085,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,00000086,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,00000087,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,00000088,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,00000089,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,0000008a,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,0000008b,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,0000008c,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,0000008d,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,0000008e,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,0000008f,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,00000090,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,00000091,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,00000092,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,00000093,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,00000094,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,00000095,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,00000096,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,00000097,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,00000098,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,00000099,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,0000009a,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,0000009b,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,0000009c,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,0000009d,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,0000009e,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,0000009f,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,000000a0,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,000000a1,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,000000a2,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,000000a3,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,000000a4,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,000000a5,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,000000a6,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,000000a7,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,000000a8,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,000000a9,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,000000aa,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,000000ab,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,000000ac,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,000000ad,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,000000ae,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,000000af,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,000000b0,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,000000b1,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,000000b2,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,000000b3,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,000000b4,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,000000b5,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,000000b6,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,000000b7,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,000000b8,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,000000b9,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,000000ba,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,000000bb,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,000000bc,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,000000bd,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,000000be,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,000000bf,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,000000c0,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,000000c1,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,000000c2,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,000000c3,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,000000c4,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,000000c5,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,000000c6,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,000000c7,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,000000c8,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,000000c9,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,000000ca,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,000000cb,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,000000cc,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,000000cd,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,000000ce,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,000000cf,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,000000d0,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,000000d1,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,000000d2,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,000000d3,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,000000d4,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,000000d5,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,000000d6,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,000000d7,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,000000d8,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,000000d9,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,000000da,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,000000db,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,000000dc,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,000000dd,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,000000de,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,000000df,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,000000e0,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,000000e1,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,000000e2,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,000000e3,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,000000e4,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,000000e5,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,000000e6,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,000000e7,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,000000e8,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,000000e9,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,000000ea,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,000000eb,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,000000ec,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,000000ed,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,000000ee,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,000000ef,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,000000f0,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,000000f1,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,000000f2,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,000000f3,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,000000f4,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,000000f5,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,000000f6,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec59181 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59181 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec591a7 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec591a7 000d:Call advapi32.RegEnumKeyExW(80000000,000000f7,00140a58,0033f988,00000000,00000000,00000000,00000000) ret=7ec591f3 000d:Ret advapi32.RegEnumKeyExW() retval=00000103 ret=7ec591f3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec59235 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec59235 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00144a78) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00143a70) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013adc0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00146a88) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00145a80) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013a168) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00148a98) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00147a90) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013a180) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0014aaa8) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00149aa0) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013a198) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0014cab8) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0014bab0) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013a1b0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0014eac8) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0014dac0) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013a1c8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00150ad8) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0014fad0) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013a208) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00152ae8) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00151ae0) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013a220) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00154af8) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00153af0) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013a238) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00156b08) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00155b00) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013a250) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00158b18) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00157b10) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013a268) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0015ab28) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00159b20) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013a280) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0015cb38) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0015bb30) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013a298) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0015eb48) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0015db40) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013b260) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00160b58) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0015fb50) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013b278) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00162b68) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00161b60) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013b290) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00164b78) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00163b70) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013b2a8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00166b88) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00165b80) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013b2c0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00168b98) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00167b90) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013b2d8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0016aba8) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00169ba0) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013b2f0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0016cbb8) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0016bbb0) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013b308) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0016ebc8) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0016dbc0) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013b320) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00170bd8) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0016fbd0) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013b338) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00172be8) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00171be0) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013b350) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00174bf8) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00173bf0) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013b368) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00176c08) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00175c00) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013b380) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00178c18) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00177c10) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013b398) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0017ac28) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00179c20) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013b3b0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0017cc38) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0017bc30) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013b3c8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0017ec48) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0017dc40) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013b3e0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00180c58) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0017fc50) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013ab38) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00182c68) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00181c60) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013ab50) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00184c78) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00183c70) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013ab68) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00186c88) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00185c80) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013ab80) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00188c98) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00187c90) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013ab98) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0018aca8) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00189ca0) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013abb0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0018ccb8) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0018bcb0) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013abc8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0018ecc8) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0018dcc0) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013abe0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00190cd8) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0018fcd0) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013abf8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00192ce8) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00191ce0) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013ac10) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00194cf8) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00193cf0) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013ac28) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00196d08) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00195d00) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013ac40) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00198d18) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00197d10) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013ac58) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0019ad28) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00199d20) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013b550) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0019cd38) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0019bd30) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013b568) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0019ed48) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0019dd40) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013b580) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001a0d58) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0019fd50) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013b598) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001a2d68) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001a1d60) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013b5b0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001a4d78) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001a3d70) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013b5c8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001a6d88) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001a5d80) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013b5e0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001a8d98) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001a7d90) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013b5f8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001aada8) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001a9da0) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013b610) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001acdb8) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001abdb0) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013b628) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001aedc8) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001addc0) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013b640) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001b0dd8) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001afdd0) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013b658) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001b2de8) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001b1de0) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013b670) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001b4df8) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001b3df0) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013b688) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001b6e08) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001b5e00) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013b6a0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001b8e18) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001b7e10) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013b6b8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001bae28) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001b9e20) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013b6d0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001bce38) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001bbe30) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013b6e8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001bee48) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001bde40) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013b700) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001c0e58) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001bfe50) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013b718) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001c2e68) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001c1e60) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013b730) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001c4e78) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001c3e70) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013b748) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001c6e88) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001c5e80) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013b760) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001c8e98) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001c7e90) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013b778) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001caea8) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001c9ea0) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013b790) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001cceb8) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001cbeb0) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013b7a8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001ceec8) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001cdec0) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013b7c0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001d0ed8) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001cfed0) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013b7d8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001d2ee8) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001d1ee0) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013b7f0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001d4ef8) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001d3ef0) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013b808) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001d6f08) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001d5f00) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013b820) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001d8f18) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001d7f10) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013b838) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001daf28) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001d9f20) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013b850) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001dcf38) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001dbf30) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013b868) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001def48) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001ddf40) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013b880) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001e0f58) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001dff50) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013b898) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001e2f68) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001e1f60) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013b8b0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001e4f78) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001e3f70) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013b8c8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001e6fa0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001e5f98) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001e5f80) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001e8fc8) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001e7fc0) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001e7fa8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001eaff0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001e9fe8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001e9fd0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001ed018) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001ec010) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001ebff8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001ef040) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001ee038) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001ee020) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001f1068) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001f0060) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001f0048) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001f3090) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001f2088) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001f2070) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001f50b8) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001f40b0) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001f4098) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001f70e0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001f60d8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001f60c0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001f9108) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001f8100) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001f80e8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001fb130) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001fa128) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001fa110) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001fd158) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001fc150) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001fc138) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001ff180) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001fe178) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001fe160) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,002011a8) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,002001a0) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00200188) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,002031d0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,002021c8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,002021b0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,002051f8) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,002041f0) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,002041d8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00207220) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00206218) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00206200) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00209248) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00208240) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00208228) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0020b270) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0020a268) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0020a250) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0020d298) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0020c290) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0020c278) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0020f2c0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0020e2b8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0020e2a0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,002112e8) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,002102e0) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,002102c8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00213310) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00212308) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,002122f0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00215338) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00214330) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00214318) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00217360) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00216358) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00216340) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00219388) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00218380) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00218368) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021b3b0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021a3a8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021a390) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021d3d8) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021c3d0) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021c3b8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,004b0030) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021e3f8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021e3e0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,004b2040) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,004b1038) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021f400) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,004b4050) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,004b3048) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021f418) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,004b6060) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,004b5058) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021f430) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,004b8070) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,004b7068) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021f448) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,004ba080) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,004b9078) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021f460) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,004bc090) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,004bb088) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021f478) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,004be0a0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,004bd098) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021f490) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,004c00b0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,004bf0a8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021f4a8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,004c20c0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,004c10b8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021f4c0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,004c40d0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,004c30c8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021f4d8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,004c60e0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,004c50d8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021f4f0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,004c80f0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,004c70e8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021f508) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,004ca100) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,004c90f8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021f520) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,004cc110) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,004cb108) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021f538) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,004ce120) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,004cd118) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021f550) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,004d0130) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,004cf128) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021f568) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,004d2140) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,004d1138) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021f580) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,004d4150) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,004d3148) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021f598) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,004d6160) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,004d5158) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021f5b0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,004d8170) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,004d7168) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021f5c8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,004da180) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,004d9178) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021f5e0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,004dc190) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,004db188) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021f5f8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,004de1a0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,004dd198) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021f610) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,004e01b0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,004df1a8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021f628) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,004e21c0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,004e11b8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021f640) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,004e41d0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,004e31c8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021f658) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,004e61e0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,004e51d8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021f670) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,004e81f0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,004e71e8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021f688) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,004ea200) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,004e91f8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021f6a0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,004ec210) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,004eb208) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021f6b8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,004ee220) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,004ed218) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021f6d0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,004f0230) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,004ef228) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021f6e8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,004f2240) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,004f1238) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021f700) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,004f4250) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,004f3248) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021f718) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,004f6260) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,004f5258) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021f730) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,004f8270) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,004f7268) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021f748) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,004fa280) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,004f9278) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021f760) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,004fc290) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,004fb288) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021f778) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,004fe2a0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,004fd298) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021f790) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005002b0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,004ff2a8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021f7a8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005022c0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005012b8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021f7c0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005042d0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005032c8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021f7d8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005062e0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005052d8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021f7f0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005082f0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005072e8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021f808) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0050a300) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005092f8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021f820) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0050c310) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0050b308) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021f838) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0050e320) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0050d318) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021f850) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00510330) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0050f328) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021f868) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00512340) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00511338) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021f880) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00514350) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00513348) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021f898) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00516360) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00515358) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021f8b0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00518370) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00517368) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021f8c8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0051a380) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00519378) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021f8e0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0051c390) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0051b388) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021f8f8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0051e3a0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0051d398) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021f910) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005203b0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0051f3a8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021f928) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005223c0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005213b8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021f940) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005243d0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005233c8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021f958) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005263e0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005253d8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021f970) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005283f0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005273e8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021f988) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0052a400) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005293f8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021f9a0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0052c410) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0052b408) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021f9b8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0052e420) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0052d418) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021f9d0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00530430) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0052f428) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021f9e8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00532440) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00531438) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021fa00) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00534450) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00533448) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021fa18) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00536460) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00535458) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021fa30) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00538470) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00537468) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021fa48) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0053a480) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00539478) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021fa60) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0053c490) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0053b488) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021fa78) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0053e4a0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0053d498) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021fa90) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005404b0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0053f4a8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021faa8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005424c0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005414b8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021fac0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005444d0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005434c8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021fad8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005464e0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005454d8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021faf0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005484f0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005474e8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021fb08) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0054a500) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005494f8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021fb20) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0054c510) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0054b508) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021fb38) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0054e520) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0054d518) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021fb50) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00550530) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0054f528) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021fb68) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00552540) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00551538) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021fb80) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00554550) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00553548) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021fb98) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00556560) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00555558) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021fbb0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00558570) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00557568) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021fbc8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0055a580) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00559578) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021fbe0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0055c590) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0055b588) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021fbf8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0055e5a0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0055d598) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021fc10) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005605b0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0055f5a8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021fc28) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005625c0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005615b8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021fc40) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005645d0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005635c8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021fc58) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005665e0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005655d8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021fc70) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005685f0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005675e8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021fc88) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0056a600) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005695f8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021fca0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0056c610) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0056b608) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021fcb8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0056e620) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0056d618) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021fcd0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00570630) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0056f628) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021fce8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00572640) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00571638) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021fd00) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00574650) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00573648) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021fd18) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00576660) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00575658) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021fd30) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00578670) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00577668) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021fd48) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0057a680) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00579678) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021fd60) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0057c690) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0057b688) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021fd78) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0057e6a0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0057d698) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021fd90) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005806b0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0057f6a8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021fda8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005826c0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005816b8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021fdc0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005846d0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005836c8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021fdd8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005866e0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005856d8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021fdf0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005886f0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005876e8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021fe08) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0058a700) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005896f8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021fe20) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0058c710) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0058b708) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021fe38) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0058e720) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0058d718) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021fe50) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00590730) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0058f728) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021fe68) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00592740) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00591738) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021fe80) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00594750) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00593748) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021fe98) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00596760) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00595758) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021feb0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00598770) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00597768) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021fec8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0059a780) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00599778) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021fee0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0059c790) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0059b788) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021fef8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0059e7a0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0059d798) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021ff10) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005a07b0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0059f7a8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021ff28) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005a27c0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005a17b8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021ff40) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005a47d0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005a37c8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021ff58) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005a67e0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005a57d8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021ff70) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005a87f0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005a77e8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021ff88) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005aa800) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005a97f8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021ffa0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005ac810) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005ab808) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021ffb8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005ae820) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005ad818) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021ffd0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005b0830) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005af828) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0021ffe8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005b2858) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005b1850) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005b1838) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005b4880) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005b3878) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005b3860) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005b68a8) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005b58a0) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005b5888) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005b88d0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005b78c8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005b78b0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005ba8f8) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005b98f0) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005b98d8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005bc920) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005bb918) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005bb900) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005be948) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005bd940) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005bd928) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005c1038) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005c0030) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005bf950) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005c3048) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005c2040) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005bf968) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005c5058) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005c4050) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005bf980) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005c7068) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005c6060) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005bf998) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005c9078) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005c8070) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005bf9b0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005cb088) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005ca080) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005bf9c8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005cd098) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005cc090) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005bf9e0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005cf0a8) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005ce0a0) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005bf9f8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005d10b8) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005d00b0) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005bfa10) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005d30c8) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005d20c0) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005bfa28) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005d50d8) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005d40d0) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005bfa40) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005d70e8) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005d60e0) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005bfa58) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005d90f8) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005d80f0) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005bfa70) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005db108) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005da100) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005bfa88) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005dd118) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005dc110) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005bfaa0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005df128) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005de120) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005bfab8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005e1138) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005e0130) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005bfad0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005e3148) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005e2140) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005bfae8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005e5158) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005e4150) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005bfb00) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005e7168) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005e6160) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005bfb18) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005e9178) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005e8170) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005bfb30) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005eb188) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005ea180) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005bfb48) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005ed198) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005ec190) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005bfb60) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005ef1a8) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005ee1a0) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005bfb78) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005f11b8) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005f01b0) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005bfb90) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005f31c8) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005f21c0) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005bfba8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005f51d8) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005f41d0) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005bfbc0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005f71e8) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005f61e0) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005bfbd8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005f91f8) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005f81f0) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005bfbf0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005fb208) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005fa200) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005bfc08) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005fd218) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005fc210) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005bfc20) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005ff228) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005fe220) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005bfc38) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00601238) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00600230) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005bfc50) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00603248) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00602240) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005bfc68) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00605258) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00604250) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005bfc80) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00607268) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00606260) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005bfc98) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00609278) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00608270) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005bfcb0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0060b288) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0060a280) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005bfcc8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0060d298) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0060c290) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005bfce0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0060f2a8) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0060e2a0) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005bfcf8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006112b8) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006102b0) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005bfd10) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006132c8) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006122c0) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005bfd28) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006152d8) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006142d0) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005bfd40) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006172e8) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006162e0) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005bfd58) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006192f8) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006182f0) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005bfd70) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0061b308) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0061a300) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005bfd88) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0061d318) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0061c310) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005bfda0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0061f328) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0061e320) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005bfdb8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00621338) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00620330) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005bfdd0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00623348) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00622340) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005bfde8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00625358) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00624350) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005bfe00) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00627368) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00626360) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005bfe18) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00629378) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00628370) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005bfe30) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0062b388) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0062a380) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005bfe48) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0062d398) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0062c390) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005bfe60) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0062f3a8) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0062e3a0) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005bfe78) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006313b8) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006303b0) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005bfe90) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006333c8) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006323c0) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005bfea8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006353d8) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006343d0) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005bfec0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006373e8) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006363e0) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005bfed8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006393f8) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006383f0) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005bfef0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0063b408) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0063a400) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005bff08) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0063d418) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0063c410) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005bff20) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0063f428) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0063e420) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005bff38) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00641438) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00640430) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005bff50) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00643448) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00642440) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005bff68) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00645458) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00644450) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005bff80) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00647468) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00646460) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005bff98) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00649478) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00648470) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005bffb0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0064b488) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0064a480) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005bffc8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0064d498) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0064c490) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,005bffe0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0064f4c0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0064e4b8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0064e4a0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006514e8) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006504e0) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006504c8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00653510) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00652508) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006524f0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00655538) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00654530) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00654518) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00657560) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00656558) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00656540) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00659588) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00658580) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00658568) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0065b5b0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0065a5a8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0065a590) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0065d5d8) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0065c5d0) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0065c5b8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0065f600) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0065e5f8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0065e5e0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00661628) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00660620) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00660608) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00663650) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00662648) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00662630) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00665678) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00664670) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00664658) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006676a0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00666698) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00666680) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006696c8) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006686c0) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006686a8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0066b6f0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0066a6e8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0066a6d0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0066d718) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0066c710) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0066c6f8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0066f740) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0066e738) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0066e720) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00671768) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00670760) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00670748) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00673790) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00672788) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00672770) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006757b8) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006747b0) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00674798) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006777e0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006767d8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006767c0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00679808) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00678800) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006787e8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0067b830) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0067a828) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0067a810) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0067d858) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0067c850) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0067c838) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0067f880) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0067e878) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0067e860) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006818a8) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006808a0) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00680888) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006838d0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006828c8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006828b0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006858f8) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006848f0) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006848d8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00687920) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00686918) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00686900) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00689948) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00688940) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00688928) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0068b970) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0068a968) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0068a950) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0068d998) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0068c990) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0068c978) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0068f9c0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0068e9b8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0068e9a0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006919e8) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006909e0) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006909c8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00693a10) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00692a08) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006929f0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00695a38) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00694a30) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00694a18) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00697a60) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00696a58) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00696a40) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00699a88) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00698a80) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00698a68) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0069bab0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0069aaa8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0069aa90) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0069dad8) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0069cad0) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0069cab8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0069fb00) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0069eaf8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0069eae0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006a1b28) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006a0b20) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006a0b08) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006a3b50) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006a2b48) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006a2b30) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006a5b78) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006a4b70) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006a4b58) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006a7ba0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006a6b98) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006a6b80) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006a9bc8) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006a8bc0) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006a8ba8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006abbf0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006aabe8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006aabd0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006adc18) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006acc10) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006acbf8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006afc40) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006aec38) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006aec20) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006b1c68) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006b0c60) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006b0c48) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006b3c90) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006b2c88) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006b2c70) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006b5cb8) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006b4cb0) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006b4c98) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006b7ce0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006b6cd8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006b6cc0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006b9d08) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006b8d00) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006b8ce8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006bbd30) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006bad28) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006bad10) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006bdd58) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006bcd50) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006bcd38) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006bfd80) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006bed78) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006bed60) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006c1da8) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006c0da0) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006c0d88) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006c3dd0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006c2dc8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006c2db0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006c5df8) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006c4df0) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006c4dd8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006c7e20) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006c6e18) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006c6e00) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006c9e48) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006c8e40) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006c8e28) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006cbe70) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006cae68) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006cae50) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006cde98) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006cce90) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006cce78) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006cfec0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006ceeb8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006ceea0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006d1ee8) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006d0ee0) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006d0ec8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006d3f10) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006d2f08) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006d2ef0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006d5f38) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006d4f30) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006d4f18) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006d7f60) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006d6f58) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006d6f40) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006d9f88) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006d8f80) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006d8f68) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006dbfb0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006dafa8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006daf90) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006ddfd8) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006dcfd0) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006dcfb8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006e0000) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006deff8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006defe0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006e2028) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006e1020) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006e1008) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006e4050) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006e3048) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006e3030) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006e6078) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006e5070) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006e5058) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006e80a0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006e7098) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006e7080) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006ea0c8) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006e90c0) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006e90a8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006ec0f0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006eb0e8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006eb0d0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006ee118) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006ed110) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006ed0f8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006f0140) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006ef138) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006ef120) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006f2168) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006f1160) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006f1148) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006f4190) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006f3188) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006f3170) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006f61b8) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006f51b0) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006f5198) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006f81e0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006f71d8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006f71c0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006fa208) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006f9200) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006f91e8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006fc230) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006fb228) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006fb210) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006fe258) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006fd250) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006fd238) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00700280) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006ff278) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,006ff260) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007022a8) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007012a0) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00701288) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007042d0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007032c8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007032b0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007062f8) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007052f0) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007052d8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00708320) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00707318) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00707300) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0070a348) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00709340) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00709328) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0070c370) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0070b368) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0070b350) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0070e398) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0070d390) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0070d378) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007103c0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0070f3b8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0070f3a0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007123e8) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007113e0) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007113c8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00714410) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00713408) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007133f0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00716438) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00715430) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00715418) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00718460) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00717458) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00717440) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0071a488) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00719480) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00719468) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0071c4b0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0071b4a8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0071b490) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0071e4d8) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0071d4d0) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0071d4b8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00720500) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0071f4f8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0071f4e0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00722528) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00721520) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00721508) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00724550) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00723548) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00723530) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00726578) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00725570) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00725558) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007285a0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00727598) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00727580) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0072a5c8) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007295c0) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007295a8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0072c5f0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0072b5e8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0072b5d0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0072e618) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0072d610) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0072d5f8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00730640) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0072f638) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0072f620) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00732668) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00731660) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00731648) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00734690) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00733688) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00733670) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007366b8) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007356b0) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00735698) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007386e0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007376d8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007376c0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0073a708) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00739700) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007396e8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0073c730) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0073b728) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0073b710) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0073e758) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0073d750) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0073d738) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00740780) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0073f778) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0073f760) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007427a8) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007417a0) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00741788) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007447d0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007437c8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007437b0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007467f8) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007457f0) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007457d8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00748820) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00747818) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00747800) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0074a848) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00749840) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00749828) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0074c870) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0074b868) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0074b850) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0074e898) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0074d890) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0074d878) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007508c0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0074f8b8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0074f8a0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007528e8) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007518e0) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007518c8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00754910) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00753908) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007538f0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00756938) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00755930) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00755918) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00758960) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00757958) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00757940) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0075a988) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00759980) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00759968) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0075c9b0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0075b9a8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0075b990) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0075e9d8) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0075d9d0) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0075d9b8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00760a00) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0075f9f8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0075f9e0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00762a28) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00761a20) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00761a08) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00764a50) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00763a48) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00763a30) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00766a78) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00765a70) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00765a58) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00768aa0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00767a98) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00767a80) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0076aac8) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00769ac0) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00769aa8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0076caf0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0076bae8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0076bad0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0076eb18) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0076db10) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0076daf8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00770b40) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0076fb38) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0076fb20) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00772b68) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00771b60) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00771b48) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00774b90) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00773b88) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00773b70) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00776bb8) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00775bb0) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00775b98) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00778be0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00777bd8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00777bc0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0077ac08) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00779c00) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00779be8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0077cc30) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0077bc28) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0077bc10) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0077ec58) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0077dc50) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0077dc38) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00780c80) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0077fc78) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0077fc60) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00782ca8) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00781ca0) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00781c88) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00784cd0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00783cc8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00783cb0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00786cf8) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00785cf0) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00785cd8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00788d20) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00787d18) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00787d00) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0078ad48) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00789d40) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00789d28) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0078cd70) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0078bd68) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0078bd50) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0078ed98) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0078dd90) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0078dd78) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00790dc0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0078fdb8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0078fda0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00792de8) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00791de0) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00791dc8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00794e10) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00793e08) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00793df0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00796e38) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00795e30) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00795e18) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00798e60) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00797e58) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00797e40) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0079ae88) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00799e80) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00799e68) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0079ceb0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0079bea8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0079be90) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0079eed8) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0079ded0) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0079deb8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007a0f00) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0079fef8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0079fee0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007a2f28) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007a1f20) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007a1f08) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007a4f50) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007a3f48) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007a3f30) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007a6f78) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007a5f70) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007a5f58) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007a8fa0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007a7f98) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007a7f80) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007aafc8) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007a9fc0) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007a9fa8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007acff0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007abfe8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007abfd0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007af018) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007ae010) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007adff8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007b1040) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007b0038) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007b0020) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007b3068) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007b2060) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007b2048) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007b5090) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007b4088) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007b4070) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007b70b8) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007b60b0) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007b6098) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007b90e0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007b80d8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007b80c0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007bb108) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007ba100) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007ba0e8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007bd130) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007bc128) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007bc110) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007bf158) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007be150) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007be138) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007c1180) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007c0178) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007c0160) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007c31a8) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007c21a0) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007c2188) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007c51d0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007c41c8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007c41b0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007c71f8) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007c61f0) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007c61d8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007c9220) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007c8218) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007c8200) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007cb248) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007ca240) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007ca228) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007cd270) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007cc268) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007cc250) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007cf298) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007ce290) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007ce278) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007d12c0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007d02b8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007d02a0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007d32e8) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007d22e0) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007d22c8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007d5310) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007d4308) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007d42f0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007d7338) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007d6330) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007d6318) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007d9360) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007d8358) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007d8340) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007db388) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007da380) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007da368) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007dd3b0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007dc3a8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007dc390) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007e0030) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007de3d0) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007de3b8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007e2040) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007e1038) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007df3d8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007e4050) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007e3048) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007df3f0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007e6060) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007e5058) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007df408) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007e8070) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007e7068) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007df420) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007ea080) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007e9078) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007df438) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007ec090) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007eb088) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007df450) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007ee0a0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007ed098) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007df468) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007f00b0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007ef0a8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007df480) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007f20c0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007f10b8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007df498) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007f40d0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007f30c8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007df4b0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007f60e0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007f50d8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007df4c8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007f80f0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007f70e8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007df4e0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007fa100) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007f90f8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007df4f8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007fc110) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007fb108) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007df510) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007fe120) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007fd118) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007df528) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00800130) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007ff128) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007df540) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00802140) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00801138) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007df558) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00804150) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00803148) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007df570) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00806160) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00805158) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007df588) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00808170) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00807168) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007df5a0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0080a180) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00809178) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007df5b8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0080c190) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0080b188) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007df5d0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0080e1a0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0080d198) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007df5e8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008101b0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0080f1a8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007df600) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008121c0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008111b8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007df618) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008141d0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008131c8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007df630) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008161e0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008151d8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007df648) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008181f0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008171e8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007df660) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0081a200) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008191f8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007df678) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0081c210) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0081b208) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007df690) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0081e220) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0081d218) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007df6a8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00820230) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0081f228) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007df6c0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00822240) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00821238) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007df6d8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00824250) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00823248) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007df6f0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00826260) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00825258) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007df708) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00828270) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00827268) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007df720) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0082a280) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00829278) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007df738) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0082c290) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0082b288) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007df750) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0082e2a0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0082d298) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007df768) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008302b0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0082f2a8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007df780) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008322c0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008312b8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007df798) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008342d0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008332c8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007df7b0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008362e0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008352d8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007df7c8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008382f0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008372e8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007df7e0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0083a300) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008392f8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007df7f8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0083c310) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0083b308) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007df810) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0083e320) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0083d318) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007df828) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00840330) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0083f328) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007df840) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00842340) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00841338) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007df858) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00844350) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00843348) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007df870) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00846360) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00845358) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007df888) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00848370) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00847368) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007df8a0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0084a380) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00849378) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007df8b8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0084c390) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0084b388) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007df8d0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0084e3a0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0084d398) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007df8e8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008503b0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0084f3a8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007df900) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008523c0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008513b8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007df918) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008543d0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008533c8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007df930) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008563e0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008553d8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007df948) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008583f0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008573e8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007df960) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0085a400) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008593f8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007df978) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0085c410) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0085b408) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007df990) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0085e420) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0085d418) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007df9a8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00860430) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0085f428) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007df9c0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00862440) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00861438) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007df9d8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00864450) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00863448) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007df9f0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00866460) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00865458) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007dfa08) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00868470) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00867468) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007dfa20) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0086a480) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00869478) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007dfa38) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0086c490) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0086b488) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007dfa50) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0086e4a0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0086d498) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007dfa68) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008704b0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0086f4a8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007dfa80) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008724c0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008714b8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007dfa98) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008744d0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008734c8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007dfab0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008764e0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008754d8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007dfac8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008784f0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008774e8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007dfae0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0087a500) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008794f8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007dfaf8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0087c510) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0087b508) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007dfb10) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0087e520) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0087d518) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007dfb28) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00880530) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0087f528) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007dfb40) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00882540) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00881538) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007dfb58) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00884550) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00883548) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007dfb70) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00886560) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00885558) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007dfb88) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00888570) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00887568) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007dfba0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0088a580) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00889578) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007dfbb8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0088c590) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0088b588) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007dfbd0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0088e5a0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0088d598) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007dfbe8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008905b0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0088f5a8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007dfc00) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008925c0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008915b8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007dfc18) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008945d0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008935c8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007dfc30) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008965e0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008955d8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007dfc48) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008985f0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008975e8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007dfc60) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0089a600) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008995f8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007dfc78) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0089c610) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0089b608) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007dfc90) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0089e620) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0089d618) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007dfca8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008a0630) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0089f628) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007dfcc0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008a2640) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008a1638) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007dfcd8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008a4650) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008a3648) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007dfcf0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008a6660) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008a5658) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007dfd08) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008a8670) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008a7668) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007dfd20) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008aa680) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008a9678) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007dfd38) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008ac690) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008ab688) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007dfd50) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008ae6a0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008ad698) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007dfd68) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008b06b0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008af6a8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007dfd80) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008b26c0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008b16b8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007dfd98) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008b46d0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008b36c8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007dfdb0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008b66e0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008b56d8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007dfdc8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008b86f0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008b76e8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007dfde0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008ba700) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008b96f8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007dfdf8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008bc710) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008bb708) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007dfe10) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008be720) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008bd718) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007dfe28) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008c0730) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008bf728) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007dfe40) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008c2740) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008c1738) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007dfe58) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008c4750) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008c3748) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007dfe70) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008c6760) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008c5758) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007dfe88) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008c8770) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008c7768) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007dfea0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008ca780) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008c9778) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007dfeb8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008cc790) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008cb788) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007dfed0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008ce7a0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008cd798) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007dfee8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008d07b0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008cf7a8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007dff00) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008d27c0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008d17b8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007dff18) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008d47d0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008d37c8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007dff30) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008d67e0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008d57d8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007dff48) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008d87f0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008d77e8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007dff60) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008da800) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008d97f8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007dff78) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008dc810) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008db808) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007dff90) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008de820) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008dd818) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007dffa8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008e0830) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008df828) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007dffc0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008e2840) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008e1838) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,007dffd8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008e4868) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008e3860) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008e3848) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008e6890) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008e5888) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008e5870) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008e88b8) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008e78b0) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008e7898) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008ea8e0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008e98d8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008e98c0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008ec908) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008eb900) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008eb8e8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008ee930) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008ed928) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008ed910) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008f0958) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008ef950) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008ef938) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008f2980) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008f1978) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008f1960) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008f49a8) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008f39a0) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008f3988) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008f69d0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008f59c8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008f59b0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008f89f8) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008f79f0) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008f79d8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008faa20) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008f9a18) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008f9a00) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008fca48) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008fba40) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008fba28) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008fea70) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008fda68) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008fda50) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00900a98) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008ffa90) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,008ffa78) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00902ac0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00901ab8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00901aa0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00904ae8) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00903ae0) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00903ac8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00906b10) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00905b08) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00905af0) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00908b38) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00907b30) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00907b18) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0090ab60) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00909b58) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00909b40) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0090cb88) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0090bb80) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0090bb68) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0090ebb0) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0090dba8) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0090db90) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00910bd8) ret=7ec53a25 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a25 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0090fbd0) ret=7ec53a48 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a48 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0090fbb8) ret=7ec53a6a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a6a 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013ad40) ret=7ec53a9f 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec53a9f 000d:Call advapi32.RegCreateKeyW(80000001,7ec5ee60 L"Software\\Wine\\FileOpenAssociations",0033f990) ret=7ec547ef 000d:Ret advapi32.RegCreateKeyW() retval=00000000 ret=7ec547ef 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec5abcf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec5abcf 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec5abf5 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec5abf5 000d:Call advapi32.RegEnumKeyExW(00000044,00000000,00140a58,0033fe48,00000000,00000000,00000000,00000000) ret=7ec5ac42 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec5ac42 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00140a58 L".chm",ffffffff,00000000,00000000,00000000,00000000) ret=7ec53b8b 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000005 ret=7ec53b8b 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000005) ret=7ec53bad 000d:Ret ntdll.RtlAllocateHeap() retval=0013ad40 ret=7ec53bad 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00140a58 L".chm",ffffffff,0013ad40,00000005,00000000,00000000) ret=7ec53bf1 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000005 ret=7ec53bf1 000d:Call shlwapi.AssocQueryStringW(00000000,00000001,00140a58,7ec5ef2c,00000000,0033f988) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=0013adc0 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".chm",00000000,00020019,0013adc8) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000048,7eaa241e L"ProgID",00000000,00020019,0013adcc) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000048,00000000,00000000,00000000,00000000,0033f518) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000012) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=001424e8 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000048,00000000,00000000,00000000,001424e8,0033f518) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegOpenKeyExW(80000000,001424e8 L"chm.file",00000000,00020019,0033f584) ret=7ea7737b 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7737b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001424e8) ret=7ea773a1 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea773a1 000d:Call advapi32.RegOpenKeyExW(0000004c,7eaa23b4 L"shell",00000000,00020019,0033f580) ret=7ea773ed 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea773ed 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea773fd 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea773fd 000d:Call advapi32.RegOpenKeyExW(00000050,7ec5ef2c L"open",00000000,00020019,0033f57c) ret=7ea77433 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea77433 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ea77459 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77459 000d:Call advapi32.RegCloseKey(00000050) ret=7ea77467 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea77467 000d:Call advapi32.RegOpenKeyExW(0000004c,7eaa23c0 L"command",00000000,00020019,0033f588) ret=7ea7749f 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7749f 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea774af 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774af 000d:Call advapi32.RegQueryValueExW(00000050,00000000,00000000,00000000,00000000,0033f518) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,0000003c) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=001424e8 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000050,00000000,00000000,00000000,001424e8,0033f518) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegCloseKey(00000050) ret=7ea774d3 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774d3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001424e8) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000048) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013adc0) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000001 ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,0000003c) ret=7ec54661 000d:Ret ntdll.RtlAllocateHeap() retval=001424e8 ret=7ec54661 000d:Call shlwapi.AssocQueryStringW(00000000,00000001,00140a58,7ec5ef2c,001424e8 L"\00c0\0011\00b0\0011indows\\system32\\hh.exe %1",0033f988) ret=7ec54693 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=0013adc0 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".chm",00000000,00020019,0013adc8) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000048,7eaa241e L"ProgID",00000000,00020019,0013adcc) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000048,00000000,00000000,00000000,00000000,0033f518) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000012) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=0013a168 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000048,00000000,00000000,00000000,0013a168,0033f518) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegOpenKeyExW(80000000,0013a168 L"chm.file",00000000,00020019,0033f584) ret=7ea7737b 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7737b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013a168) ret=7ea773a1 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea773a1 000d:Call advapi32.RegOpenKeyExW(0000004c,7eaa23b4 L"shell",00000000,00020019,0033f580) ret=7ea773ed 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea773ed 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea773fd 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea773fd 000d:Call advapi32.RegOpenKeyExW(00000050,7ec5ef2c L"open",00000000,00020019,0033f57c) ret=7ea77433 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea77433 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ea77459 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77459 000d:Call advapi32.RegCloseKey(00000050) ret=7ea77467 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea77467 000d:Call advapi32.RegOpenKeyExW(0000004c,7eaa23c0 L"command",00000000,00020019,0033f588) ret=7ea7749f 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7749f 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea774af 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774af 000d:Call advapi32.RegQueryValueExW(00000050,00000000,00000000,00000000,00000000,0033f518) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,0000003c) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=0013a168 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000050,00000000,00000000,00000000,0013a168,0033f518) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegCloseKey(00000050) ret=7ea774d3 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774d3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013a168) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000048) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013adc0) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000000 ret=7ec54693 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001424e8) ret=7ec5aeb6 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec5aeb6 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013ad40) ret=7ec5ac9d 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec5ac9d 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec5acbd 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec5acbd 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec5abcf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec5abcf 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec5abf5 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec5abf5 000d:Call advapi32.RegEnumKeyExW(00000044,00000001,00140a58,0033fe48,00000000,00000000,00000000,00000000) ret=7ec5ac42 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec5ac42 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00140a58 L".hlp",ffffffff,00000000,00000000,00000000,00000000) ret=7ec53b8b 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000005 ret=7ec53b8b 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000005) ret=7ec53bad 000d:Ret ntdll.RtlAllocateHeap() retval=0013ad40 ret=7ec53bad 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00140a58 L".hlp",ffffffff,0013ad40,00000005,00000000,00000000) ret=7ec53bf1 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000005 ret=7ec53bf1 000d:Call shlwapi.AssocQueryStringW(00000000,00000001,00140a58,7ec5ef2c,00000000,0033f988) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=0013adc0 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".hlp",00000000,00020019,0013adc8) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000048,7eaa241e L"ProgID",00000000,00020019,0013adcc) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000048,00000000,00000000,00000000,00000000,0033f518) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=001424e8 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000048,00000000,00000000,00000000,001424e8,0033f518) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegOpenKeyExW(80000000,001424e8 L"hlpfile",00000000,00020019,0033f584) ret=7ea7737b 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7737b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001424e8) ret=7ea773a1 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea773a1 000d:Call advapi32.RegOpenKeyExW(0000004c,7eaa23b4 L"shell",00000000,00020019,0033f580) ret=7ea773ed 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea773ed 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea773fd 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea773fd 000d:Call advapi32.RegOpenKeyExW(00000050,7ec5ef2c L"open",00000000,00020019,0033f57c) ret=7ea77433 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea77433 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ea77459 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77459 000d:Call advapi32.RegCloseKey(00000050) ret=7ea77467 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea77467 000d:Call advapi32.RegOpenKeyExW(0000004c,7eaa23c0 L"command",00000000,00020019,0033f588) ret=7ea7749f 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7749f 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea774af 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774af 000d:Call advapi32.RegQueryValueExW(00000050,00000000,00000000,00000000,00000000,0033f518) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000048) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=0013a168 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000050,00000000,00000000,00000000,0013a168,0033f518) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegCloseKey(00000050) ret=7ea774d3 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774d3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013a168) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000048) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013adc0) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000001 ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000048) ret=7ec54661 000d:Ret ntdll.RtlAllocateHeap() retval=0013a168 ret=7ec54661 000d:Call shlwapi.AssocQueryStringW(00000000,00000001,00140a58,7ec5ef2c,0013a168 L"\00e0\0011\00d0\0011indows\\system32\\winhlp32.exe %1",0033f988) ret=7ec54693 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=0013adc0 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".hlp",00000000,00020019,0013adc8) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000048,7eaa241e L"ProgID",00000000,00020019,0013adcc) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000048,00000000,00000000,00000000,00000000,0033f518) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=0013a1b8 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000048,00000000,00000000,00000000,0013a1b8,0033f518) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegOpenKeyExW(80000000,0013a1b8 L"hlpfile",00000000,00020019,0033f584) ret=7ea7737b 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7737b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013a1b8) ret=7ea773a1 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea773a1 000d:Call advapi32.RegOpenKeyExW(0000004c,7eaa23b4 L"shell",00000000,00020019,0033f580) ret=7ea773ed 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea773ed 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea773fd 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea773fd 000d:Call advapi32.RegOpenKeyExW(00000050,7ec5ef2c L"open",00000000,00020019,0033f57c) ret=7ea77433 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea77433 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ea77459 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77459 000d:Call advapi32.RegCloseKey(00000050) ret=7ea77467 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea77467 000d:Call advapi32.RegOpenKeyExW(0000004c,7eaa23c0 L"command",00000000,00020019,0033f588) ret=7ea7749f 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7749f 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea774af 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774af 000d:Call advapi32.RegQueryValueExW(00000050,00000000,00000000,00000000,00000000,0033f518) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000048) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=0013a208 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000050,00000000,00000000,00000000,0013a208,0033f518) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegCloseKey(00000050) ret=7ea774d3 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774d3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013a208) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000048) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013adc0) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000000 ret=7ec54693 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013a168) ret=7ec5aeb6 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec5aeb6 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013ad40) ret=7ec5ac9d 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec5ac9d 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec5acbd 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec5acbd 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec5abcf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec5abcf 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec5abf5 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec5abf5 000d:Call advapi32.RegEnumKeyExW(00000044,00000002,00140a58,0033fe48,00000000,00000000,00000000,00000000) ret=7ec5ac42 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec5ac42 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00140a58 L".htm",ffffffff,00000000,00000000,00000000,00000000) ret=7ec53b8b 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000005 ret=7ec53b8b 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000005) ret=7ec53bad 000d:Ret ntdll.RtlAllocateHeap() retval=0013ad40 ret=7ec53bad 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00140a58 L".htm",ffffffff,0013ad40,00000005,00000000,00000000) ret=7ec53bf1 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000005 ret=7ec53bf1 000d:Call shlwapi.AssocQueryStringW(00000000,00000001,00140a58,7ec5ef2c,00000000,0033f988) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=0013adc0 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".htm",00000000,00020019,0013adc8) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000048,7eaa241e L"ProgID",00000000,00020019,0013adcc) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000048,00000000,00000000,00000000,00000000,0033f518) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000012) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=001424e8 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000048,00000000,00000000,00000000,001424e8,0033f518) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegOpenKeyExW(80000000,001424e8 L"htmlfile",00000000,00020019,0033f584) ret=7ea7737b 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7737b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001424e8) ret=7ea773a1 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea773a1 000d:Call advapi32.RegOpenKeyExW(0000004c,7eaa23b4 L"shell",00000000,00020019,0033f580) ret=7ea773ed 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea773ed 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea773fd 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea773fd 000d:Call advapi32.RegOpenKeyExW(00000050,7ec5ef2c L"open",00000000,00020019,0033f57c) ret=7ea77433 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea77433 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ea77459 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77459 000d:Call advapi32.RegCloseKey(00000050) ret=7ea77467 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea77467 000d:Call advapi32.RegOpenKeyExW(0000004c,7eaa23c0 L"command",00000000,00020019,0033f588) ret=7ea7749f 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7749f 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea774af 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774af 000d:Call advapi32.RegQueryValueExW(00000050,00000000,00000000,00000000,00000000,0033f518) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000058) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=0013a168 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000050,00000000,00000000,00000000,0013a168,0033f518) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegCloseKey(00000050) ret=7ea774d3 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774d3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013a168) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000048) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013adc0) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000001 ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000058) ret=7ec54661 000d:Ret ntdll.RtlAllocateHeap() retval=0013a168 ret=7ec54661 000d:Call shlwapi.AssocQueryStringW(00000000,00000001,00140a58,7ec5ef2c,0013a168 L"\00e0\0011\00d0\0011indows\\system32\\winebrowser.exe -nohome",0033f988) ret=7ec54693 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=0013adc0 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".htm",00000000,00020019,0013adc8) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000048,7eaa241e L"ProgID",00000000,00020019,0013adcc) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000048,00000000,00000000,00000000,00000000,0033f518) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000012) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=0013a1c8 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000048,00000000,00000000,00000000,0013a1c8,0033f518) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegOpenKeyExW(80000000,0013a1c8 L"htmlfile",00000000,00020019,0033f584) ret=7ea7737b 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7737b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013a1c8) ret=7ea773a1 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea773a1 000d:Call advapi32.RegOpenKeyExW(0000004c,7eaa23b4 L"shell",00000000,00020019,0033f580) ret=7ea773ed 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea773ed 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea773fd 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea773fd 000d:Call advapi32.RegOpenKeyExW(00000050,7ec5ef2c L"open",00000000,00020019,0033f57c) ret=7ea77433 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea77433 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ea77459 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77459 000d:Call advapi32.RegCloseKey(00000050) ret=7ea77467 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea77467 000d:Call advapi32.RegOpenKeyExW(0000004c,7eaa23c0 L"command",00000000,00020019,0033f588) ret=7ea7749f 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7749f 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea774af 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774af 000d:Call advapi32.RegQueryValueExW(00000050,00000000,00000000,00000000,00000000,0033f518) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000058) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=0013a208 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000050,00000000,00000000,00000000,0013a208,0033f518) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegCloseKey(00000050) ret=7ea774d3 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774d3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013a208) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000048) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013adc0) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000000 ret=7ec54693 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013a168) ret=7ec5aeb6 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec5aeb6 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013ad40) ret=7ec5ac9d 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec5ac9d 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec5acbd 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec5acbd 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec5abcf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec5abcf 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec5abf5 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec5abf5 000d:Call advapi32.RegEnumKeyExW(00000044,00000003,00140a58,0033fe48,00000000,00000000,00000000,00000000) ret=7ec5ac42 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec5ac42 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00140a58 L".html",ffffffff,00000000,00000000,00000000,00000000) ret=7ec53b8b 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000006 ret=7ec53b8b 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000006) ret=7ec53bad 000d:Ret ntdll.RtlAllocateHeap() retval=0013ad40 ret=7ec53bad 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00140a58 L".html",ffffffff,0013ad40,00000006,00000000,00000000) ret=7ec53bf1 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000006 ret=7ec53bf1 000d:Call shlwapi.AssocQueryStringW(00000000,00000001,00140a58,7ec5ef2c,00000000,0033f988) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=0013adc0 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".html",00000000,00020019,0013adc8) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000048,7eaa241e L"ProgID",00000000,00020019,0013adcc) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000048,00000000,00000000,00000000,00000000,0033f518) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000012) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=001424e8 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000048,00000000,00000000,00000000,001424e8,0033f518) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegOpenKeyExW(80000000,001424e8 L"htmlfile",00000000,00020019,0033f584) ret=7ea7737b 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7737b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001424e8) ret=7ea773a1 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea773a1 000d:Call advapi32.RegOpenKeyExW(0000004c,7eaa23b4 L"shell",00000000,00020019,0033f580) ret=7ea773ed 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea773ed 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea773fd 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea773fd 000d:Call advapi32.RegOpenKeyExW(00000050,7ec5ef2c L"open",00000000,00020019,0033f57c) ret=7ea77433 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea77433 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ea77459 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77459 000d:Call advapi32.RegCloseKey(00000050) ret=7ea77467 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea77467 000d:Call advapi32.RegOpenKeyExW(0000004c,7eaa23c0 L"command",00000000,00020019,0033f588) ret=7ea7749f 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7749f 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea774af 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774af 000d:Call advapi32.RegQueryValueExW(00000050,00000000,00000000,00000000,00000000,0033f518) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000058) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=0013a168 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000050,00000000,00000000,00000000,0013a168,0033f518) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegCloseKey(00000050) ret=7ea774d3 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774d3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013a168) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000048) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013adc0) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000001 ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000058) ret=7ec54661 000d:Ret ntdll.RtlAllocateHeap() retval=0013a168 ret=7ec54661 000d:Call shlwapi.AssocQueryStringW(00000000,00000001,00140a58,7ec5ef2c,0013a168 L"\00e0\0011\00d0\0011indows\\system32\\winebrowser.exe -nohome",0033f988) ret=7ec54693 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=0013adc0 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".html",00000000,00020019,0013adc8) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000048,7eaa241e L"ProgID",00000000,00020019,0013adcc) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000048,00000000,00000000,00000000,00000000,0033f518) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000012) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=0013a1c8 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000048,00000000,00000000,00000000,0013a1c8,0033f518) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegOpenKeyExW(80000000,0013a1c8 L"htmlfile",00000000,00020019,0033f584) ret=7ea7737b 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7737b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013a1c8) ret=7ea773a1 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea773a1 000d:Call advapi32.RegOpenKeyExW(0000004c,7eaa23b4 L"shell",00000000,00020019,0033f580) ret=7ea773ed 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea773ed 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea773fd 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea773fd 000d:Call advapi32.RegOpenKeyExW(00000050,7ec5ef2c L"open",00000000,00020019,0033f57c) ret=7ea77433 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea77433 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ea77459 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77459 000d:Call advapi32.RegCloseKey(00000050) ret=7ea77467 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea77467 000d:Call advapi32.RegOpenKeyExW(0000004c,7eaa23c0 L"command",00000000,00020019,0033f588) ret=7ea7749f 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7749f 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea774af 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774af 000d:Call advapi32.RegQueryValueExW(00000050,00000000,00000000,00000000,00000000,0033f518) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000058) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=0013a208 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000050,00000000,00000000,00000000,0013a208,0033f518) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegCloseKey(00000050) ret=7ea774d3 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774d3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013a208) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000048) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013adc0) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000000 ret=7ec54693 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013a168) ret=7ec5aeb6 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec5aeb6 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013ad40) ret=7ec5ac9d 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec5ac9d 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec5acbd 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec5acbd 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec5abcf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec5abcf 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec5abf5 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec5abf5 000d:Call advapi32.RegEnumKeyExW(00000044,00000004,00140a58,0033fe48,00000000,00000000,00000000,00000000) ret=7ec5ac42 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec5ac42 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00140a58 L".ini",ffffffff,00000000,00000000,00000000,00000000) ret=7ec53b8b 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000005 ret=7ec53b8b 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000005) ret=7ec53bad 000d:Ret ntdll.RtlAllocateHeap() retval=0013ad40 ret=7ec53bad 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00140a58 L".ini",ffffffff,0013ad40,00000005,00000000,00000000) ret=7ec53bf1 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000005 ret=7ec53bf1 000d:Call shlwapi.AssocQueryStringW(00000000,00000001,00140a58,7ec5ef2c,00000000,0033f988) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=0013adc0 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".ini",00000000,00020019,0013adc8) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000048,7eaa241e L"ProgID",00000000,00020019,0013adcc) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000048,00000000,00000000,00000000,00000000,0033f518) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=001424e8 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000048,00000000,00000000,00000000,001424e8,0033f518) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegOpenKeyExW(80000000,001424e8 L"inifile",00000000,00020019,0033f584) ret=7ea7737b 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7737b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001424e8) ret=7ea773a1 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea773a1 000d:Call advapi32.RegOpenKeyExW(0000004c,7eaa23b4 L"shell",00000000,00020019,0033f580) ret=7ea773ed 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea773ed 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea773fd 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea773fd 000d:Call advapi32.RegOpenKeyExW(00000050,7ec5ef2c L"open",00000000,00020019,0033f57c) ret=7ea77433 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea77433 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ea77459 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77459 000d:Call advapi32.RegCloseKey(00000050) ret=7ea77467 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea77467 000d:Call advapi32.RegOpenKeyExW(0000004c,7eaa23c0 L"command",00000000,00020019,0033f588) ret=7ea7749f 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7749f 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea774af 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774af 000d:Call advapi32.RegQueryValueExW(00000050,00000000,00000000,00000000,00000000,0033f518) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000046) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=0013a168 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000050,00000000,00000000,00000000,0013a168,0033f518) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegCloseKey(00000050) ret=7ea774d3 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774d3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013a168) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000048) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013adc0) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000001 ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000046) ret=7ec54661 000d:Ret ntdll.RtlAllocateHeap() retval=0013a168 ret=7ec54661 000d:Call shlwapi.AssocQueryStringW(00000000,00000001,00140a58,7ec5ef2c,0013a168 L"\00e0\0011\00d0\0011indows\\system32\\notepad.exe %1",0033f988) ret=7ec54693 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=0013adc0 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".ini",00000000,00020019,0013adc8) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000048,7eaa241e L"ProgID",00000000,00020019,0013adcc) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000048,00000000,00000000,00000000,00000000,0033f518) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=0013a1b8 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000048,00000000,00000000,00000000,0013a1b8,0033f518) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegOpenKeyExW(80000000,0013a1b8 L"inifile",00000000,00020019,0033f584) ret=7ea7737b 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7737b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013a1b8) ret=7ea773a1 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea773a1 000d:Call advapi32.RegOpenKeyExW(0000004c,7eaa23b4 L"shell",00000000,00020019,0033f580) ret=7ea773ed 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea773ed 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea773fd 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea773fd 000d:Call advapi32.RegOpenKeyExW(00000050,7ec5ef2c L"open",00000000,00020019,0033f57c) ret=7ea77433 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea77433 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ea77459 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77459 000d:Call advapi32.RegCloseKey(00000050) ret=7ea77467 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea77467 000d:Call advapi32.RegOpenKeyExW(0000004c,7eaa23c0 L"command",00000000,00020019,0033f588) ret=7ea7749f 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7749f 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea774af 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774af 000d:Call advapi32.RegQueryValueExW(00000050,00000000,00000000,00000000,00000000,0033f518) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000046) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=0013a208 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000050,00000000,00000000,00000000,0013a208,0033f518) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegCloseKey(00000050) ret=7ea774d3 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774d3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013a208) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000048) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013adc0) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000000 ret=7ec54693 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013a168) ret=7ec5aeb6 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec5aeb6 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013ad40) ret=7ec5ac9d 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec5ac9d 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec5acbd 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec5acbd 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec5abcf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec5abcf 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec5abf5 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec5abf5 000d:Call advapi32.RegEnumKeyExW(00000044,00000005,00140a58,0033fe48,00000000,00000000,00000000,00000000) ret=7ec5ac42 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec5ac42 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00140a58 L".rtf",ffffffff,00000000,00000000,00000000,00000000) ret=7ec53b8b 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000005 ret=7ec53b8b 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000005) ret=7ec53bad 000d:Ret ntdll.RtlAllocateHeap() retval=0013ad40 ret=7ec53bad 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00140a58 L".rtf",ffffffff,0013ad40,00000005,00000000,00000000) ret=7ec53bf1 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000005 ret=7ec53bf1 000d:Call shlwapi.AssocQueryStringW(00000000,00000001,00140a58,7ec5ef2c,00000000,0033f988) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=0013adc0 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".rtf",00000000,00020019,0013adc8) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000048,7eaa241e L"ProgID",00000000,00020019,0013adcc) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000048,00000000,00000000,00000000,00000000,0033f518) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=001424e8 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000048,00000000,00000000,00000000,001424e8,0033f518) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegOpenKeyExW(80000000,001424e8 L"rtffile",00000000,00020019,0033f584) ret=7ea7737b 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7737b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001424e8) ret=7ea773a1 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea773a1 000d:Call advapi32.RegOpenKeyExW(0000004c,7eaa23b4 L"shell",00000000,00020019,0033f580) ret=7ea773ed 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea773ed 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea773fd 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea773fd 000d:Call advapi32.RegOpenKeyExW(00000050,7ec5ef2c L"open",00000000,00020019,0033f57c) ret=7ea77433 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea77433 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ea77459 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77459 000d:Call advapi32.RegCloseKey(00000050) ret=7ea77467 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea77467 000d:Call advapi32.RegOpenKeyExW(0000004c,7eaa23c0 L"command",00000000,00020019,0033f588) ret=7ea7749f 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7749f 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea774af 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774af 000d:Call advapi32.RegQueryValueExW(00000050,00000000,00000000,00000000,00000000,0033f518) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000046) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=0013a168 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000050,00000000,00000000,00000000,0013a168,0033f518) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegCloseKey(00000050) ret=7ea774d3 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774d3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013a168) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000048) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013adc0) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000001 ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000046) ret=7ec54661 000d:Ret ntdll.RtlAllocateHeap() retval=0013a168 ret=7ec54661 000d:Call shlwapi.AssocQueryStringW(00000000,00000001,00140a58,7ec5ef2c,0013a168 L"\00e0\0011\00d0\0011indows\\system32\\wordpad.exe %1",0033f988) ret=7ec54693 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=0013adc0 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".rtf",00000000,00020019,0013adc8) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000048,7eaa241e L"ProgID",00000000,00020019,0013adcc) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000048,00000000,00000000,00000000,00000000,0033f518) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=0013a1b8 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000048,00000000,00000000,00000000,0013a1b8,0033f518) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegOpenKeyExW(80000000,0013a1b8 L"rtffile",00000000,00020019,0033f584) ret=7ea7737b 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7737b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013a1b8) ret=7ea773a1 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea773a1 000d:Call advapi32.RegOpenKeyExW(0000004c,7eaa23b4 L"shell",00000000,00020019,0033f580) ret=7ea773ed 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea773ed 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea773fd 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea773fd 000d:Call advapi32.RegOpenKeyExW(00000050,7ec5ef2c L"open",00000000,00020019,0033f57c) ret=7ea77433 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea77433 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ea77459 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77459 000d:Call advapi32.RegCloseKey(00000050) ret=7ea77467 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea77467 000d:Call advapi32.RegOpenKeyExW(0000004c,7eaa23c0 L"command",00000000,00020019,0033f588) ret=7ea7749f 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7749f 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea774af 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774af 000d:Call advapi32.RegQueryValueExW(00000050,00000000,00000000,00000000,00000000,0033f518) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000046) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=0013a208 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000050,00000000,00000000,00000000,0013a208,0033f518) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegCloseKey(00000050) ret=7ea774d3 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774d3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013a208) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000048) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013adc0) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000000 ret=7ec54693 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013a168) ret=7ec5aeb6 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec5aeb6 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013ad40) ret=7ec5ac9d 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec5ac9d 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec5acbd 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec5acbd 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec5abcf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec5abcf 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec5abf5 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec5abf5 000d:Call advapi32.RegEnumKeyExW(00000044,00000006,00140a58,0033fe48,00000000,00000000,00000000,00000000) ret=7ec5ac42 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec5ac42 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00140a58 L".txt",ffffffff,00000000,00000000,00000000,00000000) ret=7ec53b8b 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000005 ret=7ec53b8b 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000005) ret=7ec53bad 000d:Ret ntdll.RtlAllocateHeap() retval=0013ad40 ret=7ec53bad 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00140a58 L".txt",ffffffff,0013ad40,00000005,00000000,00000000) ret=7ec53bf1 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000005 ret=7ec53bf1 000d:Call shlwapi.AssocQueryStringW(00000000,00000001,00140a58,7ec5ef2c,00000000,0033f988) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=0013adc0 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".txt",00000000,00020019,0013adc8) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000048,7eaa241e L"ProgID",00000000,00020019,0013adcc) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000048,00000000,00000000,00000000,00000000,0033f518) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=001424e8 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000048,00000000,00000000,00000000,001424e8,0033f518) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegOpenKeyExW(80000000,001424e8 L"txtfile",00000000,00020019,0033f584) ret=7ea7737b 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7737b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001424e8) ret=7ea773a1 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea773a1 000d:Call advapi32.RegOpenKeyExW(0000004c,7eaa23b4 L"shell",00000000,00020019,0033f580) ret=7ea773ed 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea773ed 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea773fd 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea773fd 000d:Call advapi32.RegOpenKeyExW(00000050,7ec5ef2c L"open",00000000,00020019,0033f57c) ret=7ea77433 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea77433 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ea77459 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77459 000d:Call advapi32.RegCloseKey(00000050) ret=7ea77467 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea77467 000d:Call advapi32.RegOpenKeyExW(0000004c,7eaa23c0 L"command",00000000,00020019,0033f588) ret=7ea7749f 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7749f 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea774af 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774af 000d:Call advapi32.RegQueryValueExW(00000050,00000000,00000000,00000000,00000000,0033f518) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000046) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=0013a168 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000050,00000000,00000000,00000000,0013a168,0033f518) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegCloseKey(00000050) ret=7ea774d3 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774d3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013a168) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000048) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013adc0) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000001 ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000046) ret=7ec54661 000d:Ret ntdll.RtlAllocateHeap() retval=0013a168 ret=7ec54661 000d:Call shlwapi.AssocQueryStringW(00000000,00000001,00140a58,7ec5ef2c,0013a168 L"\00e0\0011\00d0\0011indows\\system32\\notepad.exe %1",0033f988) ret=7ec54693 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=0013adc0 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".txt",00000000,00020019,0013adc8) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000048,7eaa241e L"ProgID",00000000,00020019,0013adcc) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000048,00000000,00000000,00000000,00000000,0033f518) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=0013a1b8 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000048,00000000,00000000,00000000,0013a1b8,0033f518) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegOpenKeyExW(80000000,0013a1b8 L"txtfile",00000000,00020019,0033f584) ret=7ea7737b 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7737b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013a1b8) ret=7ea773a1 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea773a1 000d:Call advapi32.RegOpenKeyExW(0000004c,7eaa23b4 L"shell",00000000,00020019,0033f580) ret=7ea773ed 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea773ed 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea773fd 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea773fd 000d:Call advapi32.RegOpenKeyExW(00000050,7ec5ef2c L"open",00000000,00020019,0033f57c) ret=7ea77433 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea77433 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ea77459 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77459 000d:Call advapi32.RegCloseKey(00000050) ret=7ea77467 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea77467 000d:Call advapi32.RegOpenKeyExW(0000004c,7eaa23c0 L"command",00000000,00020019,0033f588) ret=7ea7749f 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7749f 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea774af 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774af 000d:Call advapi32.RegQueryValueExW(00000050,00000000,00000000,00000000,00000000,0033f518) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000046) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=0013a208 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000050,00000000,00000000,00000000,0013a208,0033f518) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegCloseKey(00000050) ret=7ea774d3 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774d3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013a208) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000048) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013adc0) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000000 ret=7ec54693 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013a168) ret=7ec5aeb6 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec5aeb6 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013ad40) ret=7ec5ac9d 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec5ac9d 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec5acbd 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec5acbd 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec5abcf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec5abcf 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec5abf5 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec5abf5 000d:Call advapi32.RegEnumKeyExW(00000044,00000007,00140a58,0033fe48,00000000,00000000,00000000,00000000) ret=7ec5ac42 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec5ac42 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00140a58 L".wri",ffffffff,00000000,00000000,00000000,00000000) ret=7ec53b8b 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000005 ret=7ec53b8b 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000005) ret=7ec53bad 000d:Ret ntdll.RtlAllocateHeap() retval=0013ad40 ret=7ec53bad 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00140a58 L".wri",ffffffff,0013ad40,00000005,00000000,00000000) ret=7ec53bf1 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000005 ret=7ec53bf1 000d:Call shlwapi.AssocQueryStringW(00000000,00000001,00140a58,7ec5ef2c,00000000,0033f988) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=0013adc0 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".wri",00000000,00020019,0013adc8) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000048,7eaa241e L"ProgID",00000000,00020019,0013adcc) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000048,00000000,00000000,00000000,00000000,0033f518) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=001424e8 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000048,00000000,00000000,00000000,001424e8,0033f518) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegOpenKeyExW(80000000,001424e8 L"wrifile",00000000,00020019,0033f584) ret=7ea7737b 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7737b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001424e8) ret=7ea773a1 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea773a1 000d:Call advapi32.RegOpenKeyExW(0000004c,7eaa23b4 L"shell",00000000,00020019,0033f580) ret=7ea773ed 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea773ed 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea773fd 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea773fd 000d:Call advapi32.RegOpenKeyExW(00000050,7ec5ef2c L"open",00000000,00020019,0033f57c) ret=7ea77433 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea77433 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ea77459 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77459 000d:Call advapi32.RegCloseKey(00000050) ret=7ea77467 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea77467 000d:Call advapi32.RegOpenKeyExW(0000004c,7eaa23c0 L"command",00000000,00020019,0033f588) ret=7ea7749f 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7749f 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea774af 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774af 000d:Call advapi32.RegQueryValueExW(00000050,00000000,00000000,00000000,00000000,0033f518) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000046) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=0013a168 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000050,00000000,00000000,00000000,0013a168,0033f518) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegCloseKey(00000050) ret=7ea774d3 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774d3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013a168) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000048) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013adc0) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000001 ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000046) ret=7ec54661 000d:Ret ntdll.RtlAllocateHeap() retval=0013a168 ret=7ec54661 000d:Call shlwapi.AssocQueryStringW(00000000,00000001,00140a58,7ec5ef2c,0013a168 L"\00e0\0011\00d0\0011indows\\system32\\wordpad.exe %1",0033f988) ret=7ec54693 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=0013adc0 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".wri",00000000,00020019,0013adc8) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000048,7eaa241e L"ProgID",00000000,00020019,0013adcc) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000048,00000000,00000000,00000000,00000000,0033f518) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=0013a1b8 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000048,00000000,00000000,00000000,0013a1b8,0033f518) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegOpenKeyExW(80000000,0013a1b8 L"wrifile",00000000,00020019,0033f584) ret=7ea7737b 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7737b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013a1b8) ret=7ea773a1 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea773a1 000d:Call advapi32.RegOpenKeyExW(0000004c,7eaa23b4 L"shell",00000000,00020019,0033f580) ret=7ea773ed 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea773ed 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea773fd 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea773fd 000d:Call advapi32.RegOpenKeyExW(00000050,7ec5ef2c L"open",00000000,00020019,0033f57c) ret=7ea77433 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea77433 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ea77459 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77459 000d:Call advapi32.RegCloseKey(00000050) ret=7ea77467 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea77467 000d:Call advapi32.RegOpenKeyExW(0000004c,7eaa23c0 L"command",00000000,00020019,0033f588) ret=7ea7749f 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7749f 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea774af 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774af 000d:Call advapi32.RegQueryValueExW(00000050,00000000,00000000,00000000,00000000,0033f518) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000046) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=0013a208 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000050,00000000,00000000,00000000,0013a208,0033f518) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegCloseKey(00000050) ret=7ea774d3 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774d3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013a208) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000048) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013adc0) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000000 ret=7ec54693 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013a168) ret=7ec5aeb6 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec5aeb6 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013ad40) ret=7ec5ac9d 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec5ac9d 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec5acbd 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec5acbd 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec5abcf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec5abcf 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec5abf5 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec5abf5 000d:Call advapi32.RegEnumKeyExW(00000044,00000008,00140a58,0033fe48,00000000,00000000,00000000,00000000) ret=7ec5ac42 000d:Ret advapi32.RegEnumKeyExW() retval=00000000 ret=7ec5ac42 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00140a58 L".xml",ffffffff,00000000,00000000,00000000,00000000) ret=7ec53b8b 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000005 ret=7ec53b8b 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000005) ret=7ec53bad 000d:Ret ntdll.RtlAllocateHeap() retval=0013ad40 ret=7ec53bad 000d:Call KERNEL32.WideCharToMultiByte(0000fde9,00000000,00140a58 L".xml",ffffffff,0013ad40,00000005,00000000,00000000) ret=7ec53bf1 000d:Ret KERNEL32.WideCharToMultiByte() retval=00000005 ret=7ec53bf1 000d:Call shlwapi.AssocQueryStringW(00000000,00000001,00140a58,7ec5ef2c,00000000,0033f988) ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=0013adc0 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".xml",00000000,00020019,0013adc8) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000048,7eaa241e L"ProgID",00000000,00020019,0013adcc) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000048,00000000,00000000,00000000,00000000,0033f518) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=001424e8 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000048,00000000,00000000,00000000,001424e8,0033f518) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegOpenKeyExW(80000000,001424e8 L"xmlfile",00000000,00020019,0033f584) ret=7ea7737b 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7737b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,001424e8) ret=7ea773a1 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea773a1 000d:Call advapi32.RegOpenKeyExW(0000004c,7eaa23b4 L"shell",00000000,00020019,0033f580) ret=7ea773ed 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea773ed 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea773fd 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea773fd 000d:Call advapi32.RegOpenKeyExW(00000050,7ec5ef2c L"open",00000000,00020019,0033f57c) ret=7ea77433 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea77433 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ea77459 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77459 000d:Call advapi32.RegCloseKey(00000050) ret=7ea77467 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea77467 000d:Call advapi32.RegOpenKeyExW(0000004c,7eaa23c0 L"command",00000000,00020019,0033f588) ret=7ea7749f 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7749f 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea774af 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774af 000d:Call advapi32.RegQueryValueExW(00000050,00000000,00000000,00000000,00000000,0033f518) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000058) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=0013a168 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000050,00000000,00000000,00000000,0013a168,0033f518) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegCloseKey(00000050) ret=7ea774d3 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774d3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013a168) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000048) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013adc0) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000001 ret=7ec54638 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000058) ret=7ec54661 000d:Ret ntdll.RtlAllocateHeap() retval=0013a168 ret=7ec54661 000d:Call shlwapi.AssocQueryStringW(00000000,00000001,00140a58,7ec5ef2c,0013a168 L"\00e0\0011\00d0\0011indows\\system32\\winebrowser.exe -nohome",0033f988) ret=7ec54693 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea76fd4 000d:Ret ntdll.RtlAllocateHeap() retval=0013adc0 ret=7ea76fd4 000d:Call advapi32.RegOpenKeyExW(80000000,00140a58 L".xml",00000000,00020019,0013adc8) ret=7ea7848d 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7848d 000d:Call advapi32.RegOpenKeyExW(00000048,7eaa241e L"ProgID",00000000,00020019,0013adcc) ret=7ea785d1 000d:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7ea785d1 000d:Call advapi32.RegQueryValueExW(00000048,00000000,00000000,00000000,00000000,0033f518) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=0013a1c8 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000048,00000000,00000000,00000000,0013a1c8,0033f518) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegOpenKeyExW(80000000,0013a1c8 L"xmlfile",00000000,00020019,0033f584) ret=7ea7737b 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7737b 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013a1c8) ret=7ea773a1 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea773a1 000d:Call advapi32.RegOpenKeyExW(0000004c,7eaa23b4 L"shell",00000000,00020019,0033f580) ret=7ea773ed 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea773ed 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea773fd 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea773fd 000d:Call advapi32.RegOpenKeyExW(00000050,7ec5ef2c L"open",00000000,00020019,0033f57c) ret=7ea77433 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea77433 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ea77459 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77459 000d:Call advapi32.RegCloseKey(00000050) ret=7ea77467 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea77467 000d:Call advapi32.RegOpenKeyExW(0000004c,7eaa23c0 L"command",00000000,00020019,0033f588) ret=7ea7749f 000d:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7ea7749f 000d:Call advapi32.RegCloseKey(0000004c) ret=7ea774af 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774af 000d:Call advapi32.RegQueryValueExW(00000050,00000000,00000000,00000000,00000000,0033f518) ret=7ea7722c 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea7722c 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000058) ret=7ea77281 000d:Ret ntdll.RtlAllocateHeap() retval=0013a208 ret=7ea77281 000d:Call advapi32.RegQueryValueExW(00000050,00000000,00000000,00000000,0013a208,0033f518) ret=7ea772b8 000d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7ea772b8 000d:Call advapi32.RegCloseKey(00000050) ret=7ea774d3 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea774d3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013a208) ret=7ea77d73 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea77d73 000d:Call advapi32.RegCloseKey(00000048) ret=7ea777a1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ea777a1 000d:Call advapi32.RegCloseKey(00000000) ret=7ea777af 000d:Ret advapi32.RegCloseKey() retval=00000006 ret=7ea777af 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013adc0) ret=7ea777cf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ea777cf 000d:Ret shlwapi.AssocQueryStringW() retval=00000000 ret=7ec54693 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013a168) ret=7ec5aeb6 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec5aeb6 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013ad40) ret=7ec5ac9d 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec5ac9d 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec5acbd 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec5acbd 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec5abcf 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec5abcf 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000800) ret=7ec5abf5 000d:Ret ntdll.RtlAllocateHeap() retval=00140a58 ret=7ec5abf5 000d:Call advapi32.RegEnumKeyExW(00000044,00000009,00140a58,0033fe48,00000000,00000000,00000000,00000000) ret=7ec5ac42 000d:Ret advapi32.RegEnumKeyExW() retval=00000103 ret=7ec5ac42 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec5ac9d 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec5ac9d 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00140a58) ret=7ec5acbd 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec5acbd 000d:Call advapi32.RegCloseKey(00000044) ret=7ec5aff1 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ec5aff1 000d:Call KERNEL32.ReleaseSemaphore(00000034,00000001,00000000) ret=7ec5adf1 000d:Ret KERNEL32.ReleaseSemaphore() retval=00000001 ret=7ec5adf1 000d:Call KERNEL32.CloseHandle(00000034) ret=7ec5adff 000d:Ret KERNEL32.CloseHandle() retval=00000001 ret=7ec5adff 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013da40) ret=7ec5a726 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec5a726 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013ea48) ret=7ec5a74c 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec5a74c 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013fa50) ret=7ec5a772 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec5a772 000d:Call KERNEL32.lstrcmpA(0012210b "-r",7ec5e3c9 "-a") ret=7ec5a64f 000d:Ret KERNEL32.lstrcmpA() retval=00000001 ret=7ec5a64f 000d:Call KERNEL32.lstrcmpA(0012210b "-r",7ec5e41d "-r") ret=7ec5a853 000d:Ret KERNEL32.lstrcmpA() retval=00000000 ret=7ec5a853 000d:Call advapi32.RegCreateKeyW(80000001,7ec5ef60 L"Software\\Wine\\MenuFiles",0033f990) ret=7ec5482f 000d:Ret advapi32.RegCreateKeyW() retval=00000000 ret=7ec5482f 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec5a991 000d:Ret ntdll.RtlAllocateHeap() retval=0013da40 ret=7ec5a991 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7ec5a8c3 000d:Ret ntdll.RtlAllocateHeap() retval=0013ea48 ret=7ec5a8c3 000d:Call advapi32.RegEnumValueA(00000034,00000000,0013da40,0033fe48,00000000,00000000,0013ea48,0033fe44) ret=7ec5a915 000d:Ret advapi32.RegEnumValueA() retval=00000103 ret=7ec5a915 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013da40) ret=7ec5a9d3 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec5a9d3 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013ea48) ret=7ec5a9f9 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec5a9f9 000d:Call advapi32.RegCloseKey(00000034) ret=7ec5aa12 000d:Ret advapi32.RegCloseKey() retval=00000000 ret=7ec5aa12 000d:Call KERNEL32.ExitProcess(00000000) ret=7ec5bd56 000d:Call PE DLL (proc=0x7e241370,module=0x7e230000 L"version.dll",reason=PROCESS_DETACH,res=0x1) 000d:Call KERNEL32.__wine_dll_unregister_16(7e242c5c) ret=7e23c2f0 000d:Ret KERNEL32.__wine_dll_unregister_16() retval=00000006 ret=7e23c2f0 000d:Ret PE DLL (proc=0x7e241370,module=0x7e230000 L"version.dll",reason=PROCESS_DETACH,res=0x1) retval=1 000d:Call PE DLL (proc=0x7e2284d0,module=0x7e220000 L"lz32.dll",reason=PROCESS_DETACH,res=0x1) 000d:Ret PE DLL (proc=0x7e2284d0,module=0x7e220000 L"lz32.dll",reason=PROCESS_DETACH,res=0x1) retval=1 000d:Call PE DLL (proc=0x7eb2e9a0,module=0x7eac0000 L"shell32.dll",reason=PROCESS_DETACH,res=0x1) 000d:Call comctl32.386(00139878,7eae6f60,00000000) ret=7eae6b3c 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013ae10) ret=7eae6f9a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7eae6f9a 000d:Call KERNEL32.GetProcAddress(7e680000,7eb50972 "CoTaskMemFree") ret=7eb2e935 000d:Ret KERNEL32.GetProcAddress() retval=7e688dc0 ret=7eb2e935 000d:Call ole32.CoTaskMemFree(0013adf0) ret=7eafa579 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013adf0) ret=7e6b31e8 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e6b31e8 000d:Ret ole32.CoTaskMemFree() retval=00000001 ret=7eafa579 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013ae78) ret=7eae6f9a 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7eae6f9a 000d:Call ole32.CoTaskMemFree(0013ae58) ret=7eafa579 000d:Call ntdll.RtlFreeHeap(00110000,00000000,0013ae58) ret=7e6b31e8 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e6b31e8 000d:Ret ole32.CoTaskMemFree() retval=00000001 ret=7eafa579 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00139a08) ret=7e782191 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e782191 000d:Call ntdll.RtlFreeHeap(00110000,00000000,00139878) ret=7e7821af 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e7821af 000d:Ret comctl32.386() retval=00000001 ret=7eae6b3c 000d:Call comctl32.ImageList_Destroy(00139a90) ret=7eae6b59 000d:Call gdi32.DeleteObject(000002c8) ret=7e78afaf 000d:Ret gdi32.DeleteObject() retval=00000001 ret=7e78afaf 000d:Call gdi32.DeleteObject(000002cc) ret=7e78afc1 000d:Ret gdi32.DeleteObject() retval=00000001 ret=7e78afc1 000d:Call gdi32.DeleteDC(000001f4) ret=7e78afd3 000d:Ret gdi32.DeleteDC() retval=00000001 ret=7e78afd3 000d:Call gdi32.DeleteDC(00000200) ret=7e78afe5 000d:Ret gdi32.DeleteDC() retval=00000001 ret=7e78afe5 000d:Call gdi32.DeleteObject(0000021c) ret=7e78aff7 000d:Ret gdi32.DeleteObject() retval=00000001 ret=7e78aff7 000d:Call gdi32.DeleteObject(00000228) ret=7e78b009 000d:Ret gdi32.DeleteObject() retval=00000001 ret=7e78b009 000d:Call KERNEL32.LocalFree(00139a90) ret=7e77a191 000d:Ret KERNEL32.LocalFree() retval=00000000 ret=7e77a191 000d:Ret comctl32.ImageList_Destroy() retval=00000001 ret=7eae6b59 000d:Call comctl32.ImageList_Destroy(0013a438) ret=7eae6b72 000d:Call gdi32.DeleteObject(000002f8) ret=7e78afaf 000d:Ret gdi32.DeleteObject() retval=00000001 ret=7e78afaf 000d:Call gdi32.DeleteObject(000002fc) ret=7e78afc1 000d:Ret gdi32.DeleteObject() retval=00000001 ret=7e78afc1 000d:Call gdi32.DeleteDC(0000022c) ret=7e78afd3 000d:Ret gdi32.DeleteDC() retval=00000001 ret=7e78afd3 000d:Call gdi32.DeleteDC(00000238) ret=7e78afe5 000d:Ret gdi32.DeleteDC() retval=00000001 ret=7e78afe5 000d:Call gdi32.DeleteObject(00000254) ret=7e78aff7 000d:Ret gdi32.DeleteObject() retval=00000001 ret=7e78aff7 000d:Call gdi32.DeleteObject(00000260) ret=7e78b009 000d:Ret gdi32.DeleteObject() retval=00000001 ret=7e78b009 000d:Call KERNEL32.LocalFree(0013a438) ret=7e77a191 000d:Ret KERNEL32.LocalFree() retval=00000000 ret=7e77a191 000d:Ret comctl32.ImageList_Destroy() retval=00000001 ret=7eae6b72 000d:Call ntdll.RtlDeleteCriticalSection(7ec3f640) ret=7eae6b8e 000d:Ret ntdll.RtlDeleteCriticalSection() retval=00000000 ret=7eae6b8e 000d:Call ntdll.RtlDeleteCriticalSection(7ec3f520) ret=7ead8aa9 000d:Ret ntdll.RtlDeleteCriticalSection() retval=00000000 ret=7ead8aa9 000d:Call KERNEL32.FreeLibrary(7e680000) ret=7eb2e8c4 000d:Ret KERNEL32.FreeLibrary() retval=00000001 ret=7eb2e8c4 000d:Ret PE DLL (proc=0x7eb2e9a0,module=0x7eac0000 L"shell32.dll",reason=PROCESS_DETACH,res=0x1) retval=1 000d:Call PE DLL (proc=0x7e73c580,module=0x7e680000 L"ole32.dll",reason=PROCESS_DETACH,res=0x1) 000d:Call user32.UnregisterClassW(7e73fe20 L"OleMainThreadWndClass 0x######## ",7e680000) ret=7e69a707 000d:Ret user32.UnregisterClassW() retval=00000001 ret=7e69a707 000d:Ret PE DLL (proc=0x7e73c580,module=0x7e680000 L"ole32.dll",reason=PROCESS_DETACH,res=0x1) retval=1 000d:Call PE DLL (proc=0x7e64de70,module=0x7e600000 L"rpcrt4.dll",reason=PROCESS_DETACH,res=0x1) 000d:Ret PE DLL (proc=0x7e64de70,module=0x7e600000 L"rpcrt4.dll",reason=PROCESS_DETACH,res=0x1) retval=1 000d:Call PE DLL (proc=0x7e7f9d20,module=0x7e760000 L"comctl32.dll",reason=PROCESS_DETACH,res=0x1) 000d:Call user32.UnregisterClassW(0033fc2a L"SysAnimate32",00000000) ret=7e7710f7 000d:Ret user32.UnregisterClassW() retval=00000001 ret=7e7710f7 000d:Call user32.UnregisterClassW(0033fc2a L"ComboBoxEx32",00000000) ret=7e773bd7 000d:Ret user32.UnregisterClassW() retval=00000001 ret=7e773bd7 000d:Call user32.UnregisterClassW(0033fc20 L"SysDateTimePick32",00000000) ret=7e77e3c5 000d:Ret user32.UnregisterClassW() retval=00000001 ret=7e77e3c5 000d:Call user32.UnregisterClassW(0033fc26 L"flatsb_class32",00000000) ret=7e784023 000d:Ret user32.UnregisterClassW() retval=00000001 ret=7e784023 000d:Call user32.UnregisterClassW(0033fc2c L"SysHeader32",00000000) ret=7e784531 000d:Ret user32.UnregisterClassW() retval=00000001 ret=7e784531 000d:Call user32.UnregisterClassW(0033fc24 L"msctls_hotkey32",00000000) ret=7e7889f9 000d:Ret user32.UnregisterClassW() retval=00000001 ret=7e7889f9 000d:Call user32.UnregisterClassW(0033fc26 L"SysIPAddress32",00000000) ret=7e78f873 000d:Ret user32.UnregisterClassW() retval=00000001 ret=7e78f873 000d:Call user32.UnregisterClassW(0033fc28 L"SysListView32",00000000) ret=7e79132d 000d:Ret user32.UnregisterClassW() retval=00000001 ret=7e79132d 000d:Call user32.UnregisterClassW(0033fc28 L"SysMonthCal32",00000000) ret=7e7a9b4d 000d:Ret user32.UnregisterClassW() retval=00000001 ret=7e7a9b4d 000d:Call user32.UnregisterClassW(0033fc28 L"NativeFontCtl",00000000) ret=7e7af1bd 000d:Ret user32.UnregisterClassW() retval=00000001 ret=7e7af1bd 000d:Call user32.UnregisterClassW(0033fc32 L"SysPager",00000000) ret=7e7af52f 000d:Ret user32.UnregisterClassW() retval=00000001 ret=7e7af52f 000d:Call user32.UnregisterClassW(0033fc20 L"msctls_progress32",00000000) ret=7e7b25e5 000d:Ret user32.UnregisterClassW() retval=00000001 ret=7e7b25e5 000d:Call user32.UnregisterClassW(0033fc28 L"ReBarWindow32",00000000) ret=7e7bb6dd 000d:Ret user32.UnregisterClassW() retval=00000001 ret=7e7bb6dd 000d:Call user32.UnregisterClassW(0033fc1e L"msctls_statusbar32",00000000) ret=7e7c3aeb 000d:Ret user32.UnregisterClassW() retval=00000001 ret=7e7c3aeb 000d:Call user32.UnregisterClassW(0033fc34 L"SysLink",00000000) ret=7e7c8b89 000d:Ret user32.UnregisterClassW() retval=00000001 ret=7e7c8b89 000d:Call user32.UnregisterClassW(0033fc24 L"SysTabControl32",00000000) ret=7e7cb3c9 000d:Ret user32.UnregisterClassW() retval=00000001 ret=7e7cb3c9 000d:Call user32.UnregisterClassW(0033fc24 L"ToolbarWindow32",00000000) ret=7e7d4b79 000d:Ret user32.UnregisterClassW() retval=00000001 ret=7e7d4b79 000d:Call user32.DestroyIcon(000010ee) ret=7e7e3dce 000d:Ret user32.DestroyIcon() retval=00000001 ret=7e7e3dce 000d:Call user32.DestroyIcon(000010f6) ret=7e7e3dce 000d:Ret user32.DestroyIcon() retval=00000001 ret=7e7e3dce 000d:Call user32.DestroyIcon(000010fe) ret=7e7e3dce 000d:Ret user32.DestroyIcon() retval=00000001 ret=7e7e3dce 000d:Call user32.UnregisterClassW(0033fc16 L"tooltips_class32",00000000) ret=7e7e3e4e 000d:Ret user32.UnregisterClassW() retval=00000001 ret=7e7e3e4e 000d:Call user32.UnregisterClassW(0033fc20 L"msctls_trackbar32",00000000) ret=7e7e9515 000d:Ret user32.UnregisterClassW() retval=00000001 ret=7e7e9515 000d:Call user32.UnregisterClassW(0033fc28 L"SysTreeView32",00000000) ret=7e7ed7ad 000d:Ret user32.UnregisterClassW() retval=00000001 ret=7e7ed7ad 000d:Call user32.UnregisterClassW(0033fc24 L"msctls_updown32",00000000) ret=7e7f77e9 000d:Ret user32.UnregisterClassW() retval=00000001 ret=7e7f77e9 000d:Call gdi32.DeleteObject(000001bc) ret=7e77dc0f 000d:Ret gdi32.DeleteObject() retval=00000001 ret=7e77dc0f 000d:Call gdi32.DeleteObject(000001b4) ret=7e77dc26 000d:Ret gdi32.DeleteObject() retval=00000001 ret=7e77dc26 000d:Call KERNEL32.GlobalDeleteAtom(0000c015) ret=7e77dc42 000d:Ret KERNEL32.GlobalDeleteAtom() retval=00000000 ret=7e77dc42 000d:Call KERNEL32.FreeLibrary(7e2a0000) ret=7e7f9c44 000d:Ret KERNEL32.FreeLibrary() retval=00000001 ret=7e7f9c44 000d:Ret PE DLL (proc=0x7e7f9d20,module=0x7e760000 L"comctl32.dll",reason=PROCESS_DETACH,res=0x1) retval=1 000d:Call PE DLL (proc=0x7e2b3120,module=0x7e2a0000 L"uxtheme.dll",reason=PROCESS_DETACH,res=0x1) 000d:Ret PE DLL (proc=0x7e2b3120,module=0x7e2a0000 L"uxtheme.dll",reason=PROCESS_DETACH,res=0x1) retval=1 000d:Call PE DLL (proc=0x7ea9f350,module=0x7ea70000 L"shlwapi.dll",reason=PROCESS_DETACH,res=0x1) 000d:Call KERNEL32.TlsFree(00000002) ret=7ea931bc 000d:Ret KERNEL32.TlsFree() retval=00000001 ret=7ea931bc 000d:Call KERNEL32.FreeLibrary(7e230000) ret=7ea9f274 000d:Ret KERNEL32.FreeLibrary() retval=00000001 ret=7ea9f274 000d:Ret PE DLL (proc=0x7ea9f350,module=0x7ea70000 L"shlwapi.dll",reason=PROCESS_DETACH,res=0x1) retval=1 000d:Call PE DLL (proc=0x7e9e3790,module=0x7e930000 L"user32.dll",reason=PROCESS_DETACH,res=0x1) 000d:Ret PE DLL (proc=0x7e9e3790,module=0x7e930000 L"user32.dll",reason=PROCESS_DETACH,res=0x1) retval=1 000d:Call PE DLL (proc=0x7e4c4f50,module=0x7e460000 L"winex11.drv",reason=PROCESS_DETACH,res=0x1) 000d:Ret PE DLL (proc=0x7e4c4f50,module=0x7e460000 L"winex11.drv",reason=PROCESS_DETACH,res=0x1) retval=1 000d:Call PE DLL (proc=0x7e303a50,module=0x7e2f0000 L"imm32.dll",reason=PROCESS_DETACH,res=0x1) 000d:Call KERNEL32.TlsGetValue(00000000) ret=7e301071 000d:Ret KERNEL32.TlsGetValue() retval=00000000 ret=7e301071 000d:Call KERNEL32.TlsFree(00000000) ret=7e3011bd 000d:Ret KERNEL32.TlsFree() retval=00000001 ret=7e3011bd 000d:Ret PE DLL (proc=0x7e303a50,module=0x7e2f0000 L"imm32.dll",reason=PROCESS_DETACH,res=0x1) retval=1 000d:Call PE DLL (proc=0x7e8ea2a0,module=0x7e880000 L"gdi32.dll",reason=PROCESS_DETACH,res=0x1) 000d:Ret PE DLL (proc=0x7e8ea2a0,module=0x7e880000 L"gdi32.dll",reason=PROCESS_DETACH,res=0x1) retval=1 000d:Call PE DLL (proc=0x7e8644e0,module=0x7e830000 L"advapi32.dll",reason=PROCESS_DETACH,res=0x1) 000d:Ret PE DLL (proc=0x7e8644e0,module=0x7e830000 L"advapi32.dll",reason=PROCESS_DETACH,res=0x1) retval=1 000d:Call PE DLL (proc=0x7ee72a90,module=0x7edf0000 L"KERNEL32.dll",reason=PROCESS_DETACH,res=0x1) 000d:Ret PE DLL (proc=0x7ee72a90,module=0x7edf0000 L"KERNEL32.dll",reason=PROCESS_DETACH,res=0x1) retval=1 000d:Call PE DLL (proc=0x7efd1850,module=0x7ef60000 L"ntdll.dll",reason=PROCESS_DETACH,res=0x1) 000d:Ret PE DLL (proc=0x7efd1850,module=0x7ef60000 L"ntdll.dll",reason=PROCESS_DETACH,res=0x1) retval=1 0009:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=PROCESS_ATTACH,res=(nil)) retval=1 0009:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=PROCESS_ATTACH,res=0x1) retval=1 0009:Call PE DLL (proc=0x7e8a5350,module=0x7e870000 L"shlwapi.dll",reason=PROCESS_ATTACH,res=0x1) 0009:Call KERNEL32.DisableThreadLibraryCalls(7e870000) ret=7e8991e1 0009:Ret KERNEL32.DisableThreadLibraryCalls() retval=00000001 ret=7e8991e1 0009:Call KERNEL32.TlsAlloc() ret=7e8991f4 0009:Ret KERNEL32.TlsAlloc() retval=00000002 ret=7e8991f4 0009:Ret PE DLL (proc=0x7e8a5350,module=0x7e870000 L"shlwapi.dll",reason=PROCESS_ATTACH,res=0x1) retval=1 0009:Call PE DLL (proc=0x7e839d20,module=0x7e7a0000 L"comctl32.dll",reason=PROCESS_ATTACH,res=0x1) 0009:Call KERNEL32.DisableThreadLibraryCalls(7e7a0000) ret=7e7bdc80 0009:Ret KERNEL32.DisableThreadLibraryCalls() retval=00000001 ret=7e7bdc80 0009:Call KERNEL32.GlobalAddAtomW(7e83cca0 L"CC32SubclassInfo") ret=7e7bdc9c 0009:Ret KERNEL32.GlobalAddAtomW() retval=0000c015 ret=7e7bdc9c 0009:Call gdi32.CreateBitmap(00000008,00000008,00000001,00000001,7e83ccc2) ret=7e7bdce3 0009:Ret gdi32.CreateBitmap() retval=000001b4 ret=7e7bdce3 0009:Call gdi32.CreatePatternBrush(000001b4) ret=7e7bdcf4 0009:Ret gdi32.CreatePatternBrush() retval=000001bc ret=7e7bdcf4 0009:Call user32.GetSysColor(00000014) ret=7e7bbe3f 0009:Ret user32.GetSysColor() retval=00ffffff ret=7e7bbe3f 0009:Call user32.GetSysColor(00000010) ret=7e7bbe56 0009:Ret user32.GetSysColor() retval=00808080 ret=7e7bbe56 0009:Call user32.GetSysColor(00000012) ret=7e7bbe68 0009:Ret user32.GetSysColor() retval=00000000 ret=7e7bbe68 0009:Call user32.GetSysColor(0000000f) ret=7e7bbe7a 0009:Ret user32.GetSysColor() retval=00c8d0d4 ret=7e7bbe7a 0009:Call user32.GetSysColor(0000000d) ret=7e7bbe8c 0009:Ret user32.GetSysColor() retval=006a240a ret=7e7bbe8c 0009:Call user32.GetSysColor(0000000e) ret=7e7bbe9e 0009:Ret user32.GetSysColor() retval=00ffffff ret=7e7bbe9e 0009:Call user32.GetSysColor(0000001a) ret=7e7bbeb0 0009:Ret user32.GetSysColor() retval=00800000 ret=7e7bbeb0 0009:Call user32.GetSysColor(00000014) ret=7e7bbec2 0009:Ret user32.GetSysColor() retval=00ffffff ret=7e7bbec2 0009:Call user32.GetSysColor(00000010) ret=7e7bbed4 0009:Ret user32.GetSysColor() retval=00808080 ret=7e7bbed4 0009:Call user32.GetSysColor(00000015) ret=7e7bbee6 0009:Ret user32.GetSysColor() retval=00404040 ret=7e7bbee6 0009:Call user32.GetSysColor(0000000f) ret=7e7bbef8 0009:Ret user32.GetSysColor() retval=00c8d0d4 ret=7e7bbef8 0009:Call user32.GetSysColor(00000005) ret=7e7bbf0a 0009:Ret user32.GetSysColor() retval=00ffffff ret=7e7bbf0a 0009:Call user32.GetSysColor(00000008) ret=7e7bbf1c 0009:Ret user32.GetSysColor() retval=00000000 ret=7e7bbf1c 0009:Call user32.GetSysColor(00000011) ret=7e7bbf2e 0009:Ret user32.GetSysColor() retval=00808080 ret=7e7bbf2e 0009:Call user32.GetSysColor(00000002) ret=7e7bbf40 0009:Ret user32.GetSysColor() retval=006a240a ret=7e7bbf40 0009:Call user32.GetSysColor(00000018) ret=7e7bbf52 0009:Ret user32.GetSysColor() retval=00e1ffff ret=7e7bbf52 0009:Call user32.GetSysColor(00000017) ret=7e7bbf64 0009:Ret user32.GetSysColor() retval=00000000 ret=7e7bbf64 0009:Call user32.LoadCursorW(00000000,00007f00) ret=7e7b115b 0009:Ret user32.LoadCursorW() retval=000010de ret=7e7b115b 0009:Call user32.RegisterClassW(0033fce8) ret=7e7b11c4 0009:Ret user32.RegisterClassW() retval=0000c016 ret=7e7b11c4 0009:Call user32.LoadCursorW(00000000,00007f00) ret=7e7b3c3b 0009:Ret user32.LoadCursorW() retval=000010de ret=7e7b3c3b 0009:Call user32.RegisterClassW(0033fce8) ret=7e7b3ca4 0009:Ret user32.RegisterClassW() retval=0000c017 ret=7e7b3ca4 0009:Call user32.LoadCursorW(00000000,00007f00) ret=7e7be42b 0009:Ret user32.LoadCursorW() retval=000010de ret=7e7be42b 0009:Call user32.RegisterClassW(0033fce0) ret=7e7be4b2 0009:Ret user32.RegisterClassW() retval=0000c018 ret=7e7be4b2 0009:Call user32.LoadCursorW(00000000,00007f00) ret=7e7c408b 0009:Ret user32.LoadCursorW() retval=000010de ret=7e7c408b 0009:Call user32.RegisterClassW(0033fce4) ret=7e7c4100 0009:Ret user32.RegisterClassW() retval=0000c019 ret=7e7c4100 0009:Call user32.LoadCursorW(00000000,00007f00) ret=7e7c459b 0009:Ret user32.LoadCursorW() retval=000010de ret=7e7c459b 0009:Call user32.RegisterClassW(0033fcec) ret=7e7c45f7 0009:Ret user32.RegisterClassW() retval=0000c01a ret=7e7c45f7 0009:Call user32.RegisterClassW(0033fce8) ret=7e7c8abc 0009:Ret user32.RegisterClassW() retval=0000c01b ret=7e7c8abc 0009:Call user32.LoadCursorW(00000000,00007f01) ret=7e7cf8db 0009:Ret user32.LoadCursorW() retval=000010e6 ret=7e7cf8db 0009:Call user32.RegisterClassW(0033fce4) ret=7e7cf950 0009:Ret user32.RegisterClassW() retval=0000c01c ret=7e7cf950 0009:Call user32.LoadCursorW(00000000,00007f00) ret=7e7d146b 0009:Ret user32.LoadCursorW() retval=000010de ret=7e7d146b 0009:Call user32.RegisterClassW(0033fce8) ret=7e7d14da 0009:Ret user32.RegisterClassW() retval=0000c01d ret=7e7d14da 0009:Call user32.LoadCursorW(00000000,00007f00) ret=7e7e9bbb 0009:Ret user32.LoadCursorW() retval=000010de ret=7e7e9bbb 0009:Call user32.RegisterClassW(0033fce8) ret=7e7e9c2a 0009:Ret user32.RegisterClassW() retval=0000c01e ret=7e7e9c2a 0009:Call user32.LoadCursorW(00000000,00007f00) ret=7e7ef22b 0009:Ret user32.LoadCursorW() retval=000010de ret=7e7ef22b 0009:Call user32.RegisterClassW(0033fce8) ret=7e7ef29a 0009:Ret user32.RegisterClassW() retval=0000c01f ret=7e7ef29a 0009:Call user32.LoadCursorW(00000000,00007f00) ret=7e7ef59b 0009:Ret user32.LoadCursorW() retval=000010de ret=7e7ef59b 0009:Call user32.RegisterClassW(0033fcf0) ret=7e7ef5ec 0009:Ret user32.RegisterClassW() retval=0000c020 ret=7e7ef5ec 0009:Call user32.LoadCursorW(00000000,00007f00) ret=7e7f264b 0009:Ret user32.LoadCursorW() retval=000010de ret=7e7f264b 0009:Call user32.RegisterClassW(0033fce0) ret=7e7f26cb 0009:Ret user32.RegisterClassW() retval=0000c021 ret=7e7f26cb 0009:Call user32.RegisterClassW(0033fcec) ret=7e7fb7a0 0009:Ret user32.RegisterClassW() retval=0000c022 ret=7e7fb7a0 0009:Call user32.GetSystemMetrics(00000044) ret=7e7fb7af 0009:Ret user32.GetSystemMetrics() retval=00000004 ret=7e7fb7af 0009:Call user32.GetSystemMetrics(00000045) ret=7e7fb7c4 0009:Ret user32.GetSystemMetrics() retval=00000004 ret=7e7fb7c4 0009:Call user32.LoadCursorW(00000000,00007f00) ret=7e803b45 0009:Ret user32.LoadCursorW() retval=000010de ret=7e803b45 0009:Call user32.RegisterClassW(0033fcdc) ret=7e803bd2 0009:Ret user32.RegisterClassW() retval=0000c023 ret=7e803bd2 0009:Call user32.LoadCursorW(00000000,00007f00) ret=7e808beb 0009:Ret user32.LoadCursorW() retval=000010de ret=7e808beb 0009:Call user32.RegisterClassW(0033fcf4) ret=7e808c2f 0009:Ret user32.RegisterClassW() retval=0000c024 ret=7e808c2f 0009:Call user32.LoadCursorW(00000000,00007f00) ret=7e80b42b 0009:Ret user32.LoadCursorW() retval=000010de ret=7e80b42b 0009:Call user32.RegisterClassW(0033fce4) ret=7e80b4a6 0009:Ret user32.RegisterClassW() retval=0000c025 ret=7e80b4a6 0009:Call user32.LoadCursorW(00000000,00007f00) ret=7e814bdb 0009:Ret user32.LoadCursorW() retval=000010de ret=7e814bdb 0009:Call user32.RegisterClassW(0033fce4) ret=7e814c56 0009:Ret user32.RegisterClassW() retval=0000c026 ret=7e814c56 0009:Call user32.LoadCursorW(00000000,00007f00) ret=7e823eb5 0009:Ret user32.LoadCursorW() retval=000010de ret=7e823eb5 0009:Call user32.RegisterClassW(0033fce0) ret=7e823f36 0009:Ret user32.RegisterClassW() retval=0000c027 ret=7e823f36 0009:Call user32.LoadImageW(7e7a0000,00000016,00000001,00000000,00000000,00000000) ret=7e823f7b 0009:Ret user32.LoadImageW() retval=000010ee ret=7e823f7b 0009:Call user32.LoadImageW(7e7a0000,00000019,00000001,00000000,00000000,00000000) ret=7e823fb6 0009:Ret user32.LoadImageW() retval=000010f6 ret=7e823fb6 0009:Call user32.LoadImageW(7e7a0000,0000001c,00000001,00000000,00000000,00000000) ret=7e823ff1 0009:Ret user32.LoadImageW() retval=000010fe ret=7e823ff1 0009:Call user32.LoadCursorW(00000000,00007f00) ret=7e82957b 0009:Ret user32.LoadCursorW() retval=000010de ret=7e82957b 0009:Call user32.RegisterClassW(0033fce0) ret=7e829602 0009:Ret user32.RegisterClassW() retval=0000c028 ret=7e829602 0009:Call user32.LoadCursorW(00000000,00007f00) ret=7e82d848 0009:Ret user32.LoadCursorW() retval=000010de ret=7e82d848 0009:Call user32.RegisterClassW(0033fce8) ret=7e82d8b7 0009:Ret user32.RegisterClassW() retval=0000c029 ret=7e82d8b7 0009:Call user32.LoadCursorW(00000000,00007f00) ret=7e83784b 0009:Ret user32.LoadCursorW() retval=000010de ret=7e83784b 0009:Call user32.RegisterClassW(0033fce4) ret=7e8378c6 0009:Ret user32.RegisterClassW() retval=0000c02a ret=7e8378c6 0009:Call KERNEL32.LoadLibraryA(7e84c6e6 "uxtheme.dll") ret=7e839ce0 0009:Call PE DLL (proc=0x7e3a3120,module=0x7e390000 L"uxtheme.dll",reason=WINE_PREATTACH,res=(nil)) 0009:Ret PE DLL (proc=0x7e3a3120,module=0x7e390000 L"uxtheme.dll",reason=WINE_PREATTACH,res=(nil)) retval=1 0009:Call PE DLL (proc=0x7e3a3120,module=0x7e390000 L"uxtheme.dll",reason=PROCESS_ATTACH,res=(nil)) 0009:Call KERNEL32.DisableThreadLibraryCalls(7e390000) ret=7e39bf76 0009:Ret KERNEL32.DisableThreadLibraryCalls() retval=00000001 ret=7e39bf76 0009:Call KERNEL32.GlobalAddAtomW(7e3b1c7c L"ux_theme") ret=7e3a133d 0009:Ret KERNEL32.GlobalAddAtomW() retval=0000c02b ret=7e3a133d 0009:Call KERNEL32.GlobalAddAtomW(7e3b1c68 L"ux_subapp") ret=7e3a1355 0009:Ret KERNEL32.GlobalAddAtomW() retval=0000c02c ret=7e3a1355 0009:Call KERNEL32.GlobalAddAtomW(7e3b1c50 L"ux_subidlst") ret=7e3a136d 0009:Ret KERNEL32.GlobalAddAtomW() retval=0000c02d ret=7e3a136d 0009:Call KERNEL32.GlobalAddAtomW(7e3b1c32 L"ux_dialogtheme") ret=7e3a1385 0009:Ret KERNEL32.GlobalAddAtomW() retval=0000c02e ret=7e3a1385 0009:Call advapi32.RegOpenKeyW(80000001,7e3b19a0 L"Software\\Microsoft\\Windows\\CurrentVersion\\ThemeManager",0033f714) ret=7e3a13ae 0009:Ret advapi32.RegOpenKeyW() retval=00000002 ret=7e3a13ae 0009:Ret PE DLL (proc=0x7e3a3120,module=0x7e390000 L"uxtheme.dll",reason=PROCESS_ATTACH,res=(nil)) retval=1 0009:Ret KERNEL32.LoadLibraryA() retval=7e390000 ret=7e839ce0 0009:Call KERNEL32.GetProcAddress(7e390000,7e84c812 "IsThemeActive") ret=7e839cb5 0009:Ret KERNEL32.GetProcAddress() retval=7e3948fc ret=7e839cb5 0009:Call uxtheme.IsThemeActive() ret=7e814789 0009:Ret uxtheme.IsThemeActive() retval=00000000 ret=7e814789 0009:Ret PE DLL (proc=0x7e839d20,module=0x7e7a0000 L"comctl32.dll",reason=PROCESS_ATTACH,res=0x1) retval=1 0009:Call PE DLL (proc=0x7e9349a0,module=0x7e8d0000 L"shell32.dll",reason=PROCESS_ATTACH,res=0x1) 0009:Call KERNEL32.DisableThreadLibraryCalls(7e8d0000) ret=7e8f6225 0009:Ret KERNEL32.DisableThreadLibraryCalls() retval=00000001 ret=7e8f6225 0009:Call KERNEL32.GetModuleFileNameW(7e8d0000,7ea460e0,00000104) ret=7e8f6242 0009:Ret KERNEL32.GetModuleFileNameW() retval=0000001f ret=7e8f6242 0009:Call comctl32.InitCommonControlsEx(00000000) ret=7e8f625a 0009:Ret comctl32.InitCommonControlsEx() retval=00000000 ret=7e8f625a 0009:Call user32.GetSystemMetrics(00000031) ret=7e8ecbf6 0009:Ret user32.GetSystemMetrics() retval=00000010 ret=7e8ecbf6 0009:Call user32.GetSystemMetrics(00000032) ret=7e8ecc08 0009:Ret user32.GetSystemMetrics() retval=00000010 ret=7e8ecc08 0009:Call user32.GetSystemMetrics(0000000b) ret=7e8ecc19 0009:Ret user32.GetSystemMetrics() retval=00000020 ret=7e8ecc19 0009:Call user32.GetSystemMetrics(0000000c) ret=7e8ecc2b 0009:Ret user32.GetSystemMetrics() retval=00000020 ret=7e8ecc2b 0009:Call comctl32.328(00000010) ret=7e8ecc9c 0009:Call KERNEL32.LocalAlloc(00000040,00000014) ret=7e7ba409 0009:Ret KERNEL32.LocalAlloc() retval=00139118 ret=7e7ba409 0009:Call ntdll.RtlAllocateHeap(00110000,00000008,00000080) ret=7e7c1bf7 0009:Ret ntdll.RtlAllocateHeap() retval=001392a8 ret=7e7c1bf7 0009:Ret comctl32.328() retval=00139118 ret=7e8ecc9c 0009:Call comctl32.ImageList_Create(00000010,00000010,00000021,00000000,00000020) ret=7e8eccd4 0009:Call KERNEL32.LocalAlloc(00000040,00000084) ret=7e7ba409 0009:Ret KERNEL32.LocalAlloc() retval=00139330 ret=7e7ba409 0009:Call gdi32.CreateCompatibleDC(00000000) ret=7e7cb19c 0009:Ret gdi32.CreateCompatibleDC() retval=000001f4 ret=7e7cb19c 0009:Call gdi32.CreateCompatibleDC(00000000) ret=7e7cb375 0009:Ret gdi32.CreateCompatibleDC() retval=00000200 ret=7e7cb375 0009:Call KERNEL32.LocalAlloc(00000040,00000028) ret=7e7ba409 0009:Ret KERNEL32.LocalAlloc() retval=00139920 ret=7e7ba409 0009:Call gdi32.CreateDIBSection(000001f4,00139920,00000000,0033fc68,00000000,00000000) ret=7e7ca2c9 0009:Ret gdi32.CreateDIBSection() retval=0000020c ret=7e7ca2c9 0009:Call KERNEL32.LocalFree(00139920) ret=7e7ba191 0009:Ret KERNEL32.LocalFree() retval=00000000 ret=7e7ba191 0009:Call gdi32.SelectObject(000001f4,0000020c) ret=7e7cb202 0009:Ret gdi32.SelectObject() retval=0000006c ret=7e7cb202 0009:Call gdi32.CreateBitmap(00000040,00000010,00000001,00000001,00000000) ret=7e7cb3d6 0009:Ret gdi32.CreateBitmap() retval=00000210 ret=7e7cb3d6 0009:Call gdi32.SelectObject(00000200,00000210) ret=7e7cb3ef 0009:Ret gdi32.SelectObject() retval=0000006c ret=7e7cb3ef 0009:Call gdi32.CreateBitmap(00000008,00000008,00000001,00000001,7e83eaca) ret=7e7cb24b 0009:Ret gdi32.CreateBitmap() retval=00000214 ret=7e7cb24b 0009:Call gdi32.CreatePatternBrush(00000214) ret=7e7cb258 0009:Ret gdi32.CreatePatternBrush() retval=0000021c ret=7e7cb258 0009:Call gdi32.DeleteObject(00000214) ret=7e7cb266 0009:Ret gdi32.DeleteObject() retval=00000001 ret=7e7cb266 0009:Call gdi32.CreateBitmap(00000008,00000008,00000001,00000001,7e83eaba) ret=7e7cb297 0009:Ret gdi32.CreateBitmap() retval=00000220 ret=7e7cb297 0009:Call gdi32.CreatePatternBrush(00000220) ret=7e7cb2a4 0009:Ret gdi32.CreatePatternBrush() retval=00000228 ret=7e7cb2a4 0009:Call gdi32.DeleteObject(00000220) ret=7e7cb2b2 0009:Ret gdi32.DeleteObject() retval=00000001 ret=7e7cb2b2 0009:Ret comctl32.ImageList_Create() retval=00139330 ret=7e8eccd4 0009:Call comctl32.ImageList_Create(00000020,00000020,00000021,00000000,00000020) ret=7e8ecd06 0009:Call KERNEL32.LocalAlloc(00000040,00000084) ret=7e7ba409 0009:Ret KERNEL32.LocalAlloc() retval=00139cd8 ret=7e7ba409 0009:Call gdi32.CreateCompatibleDC(00000000) ret=7e7cb19c 0009:Ret gdi32.CreateCompatibleDC() retval=0000022c ret=7e7cb19c 0009:Call gdi32.CreateCompatibleDC(00000000) ret=7e7cb375 0009:Ret gdi32.CreateCompatibleDC() retval=00000238 ret=7e7cb375 0009:Call KERNEL32.LocalAlloc(00000040,00000028) ret=7e7ba409 0009:Ret KERNEL32.LocalAlloc() retval=0013a2f0 ret=7e7ba409 0009:Call gdi32.CreateDIBSection(0000022c,0013a2f0,00000000,0033fc68,00000000,00000000) ret=7e7ca2c9 0009:Ret gdi32.CreateDIBSection() retval=00000244 ret=7e7ca2c9 0009:Call KERNEL32.LocalFree(0013a2f0) ret=7e7ba191 0009:Ret KERNEL32.LocalFree() retval=00000000 ret=7e7ba191 0009:Call gdi32.SelectObject(0000022c,00000244) ret=7e7cb202 0009:Ret gdi32.SelectObject() retval=0000006c ret=7e7cb202 0009:Call gdi32.CreateBitmap(00000080,00000020,00000001,00000001,00000000) ret=7e7cb3d6 0009:Ret gdi32.CreateBitmap() retval=00000248 ret=7e7cb3d6 0009:Call gdi32.SelectObject(00000238,00000248) ret=7e7cb3ef 0009:Ret gdi32.SelectObject() retval=0000006c ret=7e7cb3ef 0009:Call gdi32.CreateBitmap(00000008,00000008,00000001,00000001,7e83eaca) ret=7e7cb24b 0009:Ret gdi32.CreateBitmap() retval=0000024c ret=7e7cb24b 0009:Call gdi32.CreatePatternBrush(0000024c) ret=7e7cb258 0009:Ret gdi32.CreatePatternBrush() retval=00000254 ret=7e7cb258 0009:Call gdi32.DeleteObject(0000024c) ret=7e7cb266 0009:Ret gdi32.DeleteObject() retval=00000001 ret=7e7cb266 0009:Call gdi32.CreateBitmap(00000008,00000008,00000001,00000001,7e83eaba) ret=7e7cb297 0009:Ret gdi32.CreateBitmap() retval=00000258 ret=7e7cb297 0009:Call gdi32.CreatePatternBrush(00000258) ret=7e7cb2a4 0009:Ret gdi32.CreatePatternBrush() retval=00000260 ret=7e7cb2a4 0009:Call gdi32.DeleteObject(00000258) ret=7e7cb2b2 0009:Ret gdi32.DeleteObject() retval=00000001 ret=7e7cb2b2 0009:Ret comctl32.ImageList_Create() retval=00139cd8 ret=7e8ecd06 0009:Call comctl32.ImageList_SetBkColor(00139330,ffffffff) ret=7e8ecd29 0009:Ret comctl32.ImageList_SetBkColor() retval=ffffffff ret=7e8ecd29 0009:Call comctl32.ImageList_SetBkColor(00139cd8,ffffffff) ret=7e8ecd44 0009:Ret comctl32.ImageList_SetBkColor() retval=ffffffff ret=7e8ecd44 0009:Call user32.LoadImageA(7e8d0000,00000001,00000001,00000010,00000010,00008000) ret=7e8ecd7a 0009:Ret user32.LoadImageA() retval=00001106 ret=7e8ecd7a 0009:Call user32.LoadImageA(7e8d0000,00000001,00000001,00000020,00000020,00008000) ret=7e8ecdad 0009:Ret user32.LoadImageA() retval=0000110e ret=7e8ecdad 0009:Call KERNEL32.LoadLibraryA(7e9568f0 "ole32.dll") ret=7e934960 0009:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=WINE_PREATTACH,res=(nil)) 0009:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=WINE_PREATTACH,res=(nil)) retval=1 0009:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=WINE_PREATTACH,res=(nil)) 0009:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=WINE_PREATTACH,res=(nil)) retval=1 0009:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=PROCESS_ATTACH,res=(nil)) 0009:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=PROCESS_ATTACH,res=(nil)) retval=1 0009:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=PROCESS_ATTACH,res=(nil)) 0009:Call user32.RegisterClassW(0033f524) ret=7e29783d 0009:Ret user32.RegisterClassW() retval=0000c02f ret=7e29783d 0009:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=PROCESS_ATTACH,res=(nil)) retval=1 0009:Ret KERNEL32.LoadLibraryA() retval=7e280000 ret=7e934960 0009:Call KERNEL32.GetProcAddress(7e280000,7e956963 "CoTaskMemAlloc") ret=7e934935 0009:Ret KERNEL32.GetProcAddress() retval=7e285da8 ret=7e934935 0009:Call ole32.CoTaskMemAlloc(00000014) ret=7e9005b5 0009:Call ntdll.RtlAllocateHeap(00110000,00000000,00000014) ret=7e2afe29 0009:Ret ntdll.RtlAllocateHeap() retval=0013a818 ret=7e2afe29 0009:Ret ole32.CoTaskMemAlloc() retval=0013a818 ret=7e9005b5 0009:Call KERNEL32.GetFullPathNameW(7ea460e0 L"C:\\windows\\system32\\shell32.dll",00000104,0033fb34,00000000) ret=7e8ebf1f 0009:Ret KERNEL32.GetFullPathNameW() retval=0000001f ret=7e8ebf1f 0009:Call ntdll.RtlAllocateHeap(00110000,00000000,00000040) ret=7e8ebf61 0009:Ret ntdll.RtlAllocateHeap() retval=0013a8e8 ret=7e8ebf61 0009:Call comctl32.334(00139118,00007fff,0013a818) ret=7e8ebfc1 0009:Ret comctl32.334() retval=00000000 ret=7e8ebfc1 0009:Call comctl32.ImageList_ReplaceIcon(00139330,ffffffff,00001106) ret=7e8ebfef 0009:Call user32.CopyImage(00001106,00000001,00000010,00000010,00004000) ret=7e7cb95f 0009:Ret user32.CopyImage() retval=00001116 ret=7e7cb95f 0009:Call user32.GetIconInfo(00001116,0033fa48) ret=7e7cb98a 0009:Ret user32.GetIconInfo() retval=00000001 ret=7e7cb98a 0009:Call gdi32.GetObjectW(00000280,00000018,0033fa30) ret=7e7cb9af 0009:Ret gdi32.GetObjectW() retval=00000018 ret=7e7cb9af 0009:Call gdi32.CreateCompatibleDC(00000000) ret=7e7cb9cf 0009:Ret gdi32.CreateCompatibleDC() retval=00000284 ret=7e7cb9cf 0009:Call gdi32.SetTextColor(000001f4,00000000) ret=7e7cba1e 0009:Ret gdi32.SetTextColor() retval=00000000 ret=7e7cba1e 0009:Call gdi32.SetBkColor(000001f4,00ffffff) ret=7e7cba34 0009:Ret gdi32.SetBkColor() retval=00ffffff ret=7e7cba34 0009:Call gdi32.SelectObject(00000284,0000027c) ret=7e7cba51 0009:Ret gdi32.SelectObject() retval=0000006c ret=7e7cba51 0009:Call gdi32.StretchBlt(000001f4,00000000,00000000,00000010,00000010,00000284,00000000,00000000,00000010,00000010,00cc0020) ret=7e7cbaab 0009:Ret gdi32.StretchBlt() retval=00000001 ret=7e7cbaab 0009:Call gdi32.SelectObject(00000284,00000280) ret=7e7cbac7 0009:Ret gdi32.SelectObject() retval=0000027c ret=7e7cbac7 0009:Call gdi32.StretchBlt(00000200,00000000,00000000,00000010,00000010,00000284,00000000,00000000,00000010,00000010,00cc0020) ret=7e7cbb1e 0009:Ret gdi32.StretchBlt() retval=00000001 ret=7e7cbb1e 0009:Call gdi32.SelectObject(00000284,0000006c) ret=7e7cbb33 0009:Ret gdi32.SelectObject() retval=00000280 ret=7e7cbb33 0009:Call user32.DestroyIcon(00001116) ret=7e7cbb41 0009:Ret user32.DestroyIcon() retval=00000001 ret=7e7cbb41 0009:Call gdi32.DeleteDC(00000284) ret=7e7cbb56 0009:Ret gdi32.DeleteDC() retval=00000001 ret=7e7cbb56 0009:Call gdi32.DeleteObject(0000027c) ret=7e7cbb68 0009:Ret gdi32.DeleteObject() retval=00000001 ret=7e7cbb68 0009:Call gdi32.DeleteObject(00000280) ret=7e7cbb7a 0009:Ret gdi32.DeleteObject() retval=00000001 ret=7e7cbb7a 0009:Ret comctl32.ImageList_ReplaceIcon() retval=00000000 ret=7e8ebfef 0009:Call comctl32.ImageList_ReplaceIcon(00139cd8,ffffffff,0000110e) ret=7e8ec013 0009:Call user32.CopyImage(0000110e,00000001,00000020,00000020,00004000) ret=7e7cb95f 0009:Ret user32.CopyImage() retval=00001116 ret=7e7cb95f 0009:Call user32.GetIconInfo(00001116,0033fa48) ret=7e7cb98a 0009:Ret user32.GetIconInfo() retval=00000001 ret=7e7cb98a 0009:Call gdi32.GetObjectW(0000029c,00000018,0033fa30) ret=7e7cb9af 0009:Ret gdi32.GetObjectW() retval=00000018 ret=7e7cb9af 0009:Call gdi32.CreateCompatibleDC(00000000) ret=7e7cb9cf 0009:Ret gdi32.CreateCompatibleDC() retval=000002a0 ret=7e7cb9cf 0009:Call gdi32.SetTextColor(0000022c,00000000) ret=7e7cba1e 0009:Ret gdi32.SetTextColor() retval=00000000 ret=7e7cba1e 0009:Call gdi32.SetBkColor(0000022c,00ffffff) ret=7e7cba34 0009:Ret gdi32.SetBkColor() retval=00ffffff ret=7e7cba34 0009:Call gdi32.SelectObject(000002a0,00000298) ret=7e7cba51 0009:Ret gdi32.SelectObject() retval=0000006c ret=7e7cba51 0009:Call gdi32.StretchBlt(0000022c,00000000,00000000,00000020,00000020,000002a0,00000000,00000000,00000020,00000020,00cc0020) ret=7e7cbaab 0009:Ret gdi32.StretchBlt() retval=00000001 ret=7e7cbaab 0009:Call gdi32.SelectObject(000002a0,0000029c) ret=7e7cbac7 0009:Ret gdi32.SelectObject() retval=00000298 ret=7e7cbac7 0009:Call gdi32.StretchBlt(00000238,00000000,00000000,00000020,00000020,000002a0,00000000,00000000,00000020,00000020,00cc0020) ret=7e7cbb1e 0009:Ret gdi32.StretchBlt() retval=00000001 ret=7e7cbb1e 0009:Call gdi32.SelectObject(000002a0,0000006c) ret=7e7cbb33 0009:Ret gdi32.SelectObject() retval=0000029c ret=7e7cbb33 0009:Call user32.DestroyIcon(00001116) ret=7e7cbb41 0009:Ret user32.DestroyIcon() retval=00000001 ret=7e7cbb41 0009:Call gdi32.DeleteDC(000002a0) ret=7e7cbb56 0009:Ret gdi32.DeleteDC() retval=00000001 ret=7e7cbb56 0009:Call gdi32.DeleteObject(00000298) ret=7e7cbb68 0009:Ret gdi32.DeleteObject() retval=00000001 ret=7e7cbb68 0009:Call gdi32.DeleteObject(0000029c) ret=7e7cbb7a 0009:Ret gdi32.DeleteObject() retval=00000001 ret=7e7cbb7a 0009:Ret comctl32.ImageList_ReplaceIcon() retval=00000000 ret=7e8ec013 0009:Call ole32.CoTaskMemAlloc(00000014) ret=7e9005b5 0009:Call ntdll.RtlAllocateHeap(00110000,00000000,00000014) ret=7e2afe29 0009:Ret ntdll.RtlAllocateHeap() retval=0013a930 ret=7e2afe29 0009:Ret ole32.CoTaskMemAlloc() retval=0013a930 ret=7e9005b5 0009:Call KERNEL32.GetFullPathNameW(7ea460e0 L"C:\\windows\\system32\\shell32.dll",00000104,0033fb34,00000000) ret=7e8ebf1f 0009:Ret KERNEL32.GetFullPathNameW() retval=0000001f ret=7e8ebf1f 0009:Call ntdll.RtlAllocateHeap(00110000,00000000,00000040) ret=7e8ebf61 0009:Ret ntdll.RtlAllocateHeap() retval=0013a950 ret=7e8ebf61 0009:Call comctl32.334(00139118,00007fff,0013a930) ret=7e8ebfc1 0009:Ret comctl32.334() retval=00000001 ret=7e8ebfc1 0009:Call comctl32.ImageList_ReplaceIcon(00139330,ffffffff,00001106) ret=7e8ebfef 0009:Call user32.CopyImage(00001106,00000001,00000010,00000010,00004000) ret=7e7cb95f 0009:Ret user32.CopyImage() retval=00001116 ret=7e7cb95f 0009:Call user32.GetIconInfo(00001116,0033fa48) ret=7e7cb98a 0009:Ret user32.GetIconInfo() retval=00000001 ret=7e7cb98a 0009:Call gdi32.GetObjectW(000002b8,00000018,0033fa30) ret=7e7cb9af 0009:Ret gdi32.GetObjectW() retval=00000018 ret=7e7cb9af 0009:Call gdi32.CreateCompatibleDC(00000000) ret=7e7ca3e7 0009:Ret gdi32.CreateCompatibleDC() retval=000002bc ret=7e7ca3e7 0009:Call KERNEL32.LocalAlloc(00000040,00000028) ret=7e7ba409 0009:Ret KERNEL32.LocalAlloc() retval=0013ccb0 ret=7e7ba409 0009:Call gdi32.CreateDIBSection(000002bc,0013ccb0,00000000,0033f978,00000000,00000000) ret=7e7ca2c9 0009:Ret gdi32.CreateDIBSection() retval=000002c8 ret=7e7ca2c9 0009:Call KERNEL32.LocalFree(0013ccb0) ret=7e7ba191 0009:Ret KERNEL32.LocalFree() retval=00000000 ret=7e7ba191 0009:Call gdi32.SelectObject(000002bc,000002c8) ret=7e7ca502 0009:Ret gdi32.SelectObject() retval=0000006c ret=7e7ca502 0009:Call gdi32.BitBlt(000002bc,00000000,00000000,00000040,00000090,000001f4,00000000,00000000,00cc0020) ret=7e7ca54f 0009:Ret gdi32.BitBlt() retval=00000001 ret=7e7ca54f 0009:Call gdi32.SelectObject(000002bc,0000006c) ret=7e7ca561 0009:Ret gdi32.SelectObject() retval=000002c8 ret=7e7ca561 0009:Call gdi32.SelectObject(000001f4,000002c8) ret=7e7ca422 0009:Ret gdi32.SelectObject() retval=0000020c ret=7e7ca422 0009:Call gdi32.DeleteObject(0000020c) ret=7e7ca430 0009:Ret gdi32.DeleteObject() retval=00000001 ret=7e7ca430 0009:Call gdi32.CreateBitmap(00000040,00000090,00000001,00000001,00000000) ret=7e7ca4a2 0009:Ret gdi32.CreateBitmap() retval=000002cc ret=7e7ca4a2 0009:Call gdi32.SelectObject(000002bc,000002cc) ret=7e7ca5c7 0009:Ret gdi32.SelectObject() retval=0000006c ret=7e7ca5c7 0009:Call gdi32.BitBlt(000002bc,00000000,00000000,00000040,00000090,00000200,00000000,00000000,00cc0020) ret=7e7ca614 0009:Ret gdi32.BitBlt() retval=00000001 ret=7e7ca614 0009:Call gdi32.SelectObject(000002bc,0000006c) ret=7e7ca626 0009:Ret gdi32.SelectObject() retval=000002cc ret=7e7ca626 0009:Call gdi32.SelectObject(00000200,000002cc) ret=7e7ca4cd 0009:Ret gdi32.SelectObject() retval=00000210 ret=7e7ca4cd 0009:Call gdi32.DeleteObject(00000210) ret=7e7ca4db 0009:Ret gdi32.DeleteObject() retval=00000001 ret=7e7ca4db 0009:Call gdi32.DeleteDC(000002bc) ret=7e7ca450 0009:Ret gdi32.DeleteDC() retval=00000001 ret=7e7ca450 0009:Call gdi32.CreateCompatibleDC(00000000) ret=7e7cb9cf 0009:Ret gdi32.CreateCompatibleDC() retval=000002d0 ret=7e7cb9cf 0009:Call gdi32.SetTextColor(000001f4,00000000) ret=7e7cba1e 0009:Ret gdi32.SetTextColor() retval=00000000 ret=7e7cba1e 0009:Call gdi32.SetBkColor(000001f4,00ffffff) ret=7e7cba34 0009:Ret gdi32.SetBkColor() retval=00ffffff ret=7e7cba34 0009:Call gdi32.SelectObject(000002d0,000002b4) ret=7e7cba51 0009:Ret gdi32.SelectObject() retval=0000006c ret=7e7cba51 0009:Call gdi32.StretchBlt(000001f4,00000010,00000000,00000010,00000010,000002d0,00000000,00000000,00000010,00000010,00cc0020) ret=7e7cbaab 0009:Ret gdi32.StretchBlt() retval=00000001 ret=7e7cbaab 0009:Call gdi32.SelectObject(000002d0,000002b8) ret=7e7cbac7 0009:Ret gdi32.SelectObject() retval=000002b4 ret=7e7cbac7 0009:Call gdi32.StretchBlt(00000200,00000010,00000000,00000010,00000010,000002d0,00000000,00000000,00000010,00000010,00cc0020) ret=7e7cbb1e 0009:Ret gdi32.StretchBlt() retval=00000001 ret=7e7cbb1e 0009:Call gdi32.SelectObject(000002d0,0000006c) ret=7e7cbb33 0009:Ret gdi32.SelectObject() retval=000002b8 ret=7e7cbb33 0009:Call user32.DestroyIcon(00001116) ret=7e7cbb41 0009:Ret user32.DestroyIcon() retval=00000001 ret=7e7cbb41 0009:Call gdi32.DeleteDC(000002d0) ret=7e7cbb56 0009:Ret gdi32.DeleteDC() retval=00000001 ret=7e7cbb56 0009:Call gdi32.DeleteObject(000002b4) ret=7e7cbb68 0009:Ret gdi32.DeleteObject() retval=00000001 ret=7e7cbb68 0009:Call gdi32.DeleteObject(000002b8) ret=7e7cbb7a 0009:Ret gdi32.DeleteObject() retval=00000001 ret=7e7cbb7a 0009:Ret comctl32.ImageList_ReplaceIcon() retval=00000001 ret=7e8ebfef 0009:Call comctl32.ImageList_ReplaceIcon(00139cd8,ffffffff,0000110e) ret=7e8ec013 0009:Call user32.CopyImage(0000110e,00000001,00000020,00000020,00004000) ret=7e7cb95f 0009:Ret user32.CopyImage() retval=00001116 ret=7e7cb95f 0009:Call user32.GetIconInfo(00001116,0033fa48) ret=7e7cb98a 0009:Ret user32.GetIconInfo() retval=00000001 ret=7e7cb98a 0009:Call gdi32.GetObjectW(000002e8,00000018,0033fa30) ret=7e7cb9af 0009:Ret gdi32.GetObjectW() retval=00000018 ret=7e7cb9af 0009:Call gdi32.CreateCompatibleDC(00000000) ret=7e7ca3e7 0009:Ret gdi32.CreateCompatibleDC() retval=000002ec ret=7e7ca3e7 0009:Call KERNEL32.LocalAlloc(00000040,00000028) ret=7e7ba409 0009:Ret KERNEL32.LocalAlloc() retval=0013c7d8 ret=7e7ba409 0009:Call gdi32.CreateDIBSection(000002ec,0013c7d8,00000000,0033f978,00000000,00000000) ret=7e7ca2c9 0009:Ret gdi32.CreateDIBSection() retval=000002f8 ret=7e7ca2c9 0009:Call KERNEL32.LocalFree(0013c7d8) ret=7e7ba191 0009:Ret KERNEL32.LocalFree() retval=00000000 ret=7e7ba191 0009:Call gdi32.SelectObject(000002ec,000002f8) ret=7e7ca502 0009:Ret gdi32.SelectObject() retval=0000006c ret=7e7ca502 0009:Call gdi32.BitBlt(000002ec,00000000,00000000,00000080,00000120,0000022c,00000000,00000000,00cc0020) ret=7e7ca54f 0009:Ret gdi32.BitBlt() retval=00000001 ret=7e7ca54f 0009:Call gdi32.SelectObject(000002ec,0000006c) ret=7e7ca561 0009:Ret gdi32.SelectObject() retval=000002f8 ret=7e7ca561 0009:Call gdi32.SelectObject(0000022c,000002f8) ret=7e7ca422 0009:Ret gdi32.SelectObject() retval=00000244 ret=7e7ca422 0009:Call gdi32.DeleteObject(00000244) ret=7e7ca430 0009:Ret gdi32.DeleteObject() retval=00000001 ret=7e7ca430 0009:Call gdi32.CreateBitmap(00000080,00000120,00000001,00000001,00000000) ret=7e7ca4a2 0009:Ret gdi32.CreateBitmap() retval=000002fc ret=7e7ca4a2 0009:Call gdi32.SelectObject(000002ec,000002fc) ret=7e7ca5c7 0009:Ret gdi32.SelectObject() retval=0000006c ret=7e7ca5c7 0009:Call gdi32.BitBlt(000002ec,00000000,00000000,00000080,00000120,00000238,00000000,00000000,00cc0020) ret=7e7ca614 0009:Ret gdi32.BitBlt() retval=00000001 ret=7e7ca614 0009:Call gdi32.SelectObject(000002ec,0000006c) ret=7e7ca626 0009:Ret gdi32.SelectObject() retval=000002fc ret=7e7ca626 0009:Call gdi32.SelectObject(00000238,000002fc) ret=7e7ca4cd 0009:Ret gdi32.SelectObject() retval=00000248 ret=7e7ca4cd 0009:Call gdi32.DeleteObject(00000248) ret=7e7ca4db 0009:Ret gdi32.DeleteObject() retval=00000001 ret=7e7ca4db 0009:Call gdi32.DeleteDC(000002ec) ret=7e7ca450 0009:Ret gdi32.DeleteDC() retval=00000001 ret=7e7ca450 0009:Call gdi32.CreateCompatibleDC(00000000) ret=7e7cb9cf 0009:Ret gdi32.CreateCompatibleDC() retval=00000300 ret=7e7cb9cf 0009:Call gdi32.SetTextColor(0000022c,00000000) ret=7e7cba1e 0009:Ret gdi32.SetTextColor() retval=00000000 ret=7e7cba1e 0009:Call gdi32.SetBkColor(0000022c,00ffffff) ret=7e7cba34 0009:Ret gdi32.SetBkColor() retval=00ffffff ret=7e7cba34 0009:Call gdi32.SelectObject(00000300,000002e4) ret=7e7cba51 0009:Ret gdi32.SelectObject() retval=0000006c ret=7e7cba51 0009:Call gdi32.StretchBlt(0000022c,00000020,00000000,00000020,00000020,00000300,00000000,00000000,00000020,00000020,00cc0020) ret=7e7cbaab 0009:Ret gdi32.StretchBlt() retval=00000001 ret=7e7cbaab 0009:Call gdi32.SelectObject(00000300,000002e8) ret=7e7cbac7 0009:Ret gdi32.SelectObject() retval=000002e4 ret=7e7cbac7 0009:Call gdi32.StretchBlt(00000238,00000020,00000000,00000020,00000020,00000300,00000000,00000000,00000020,00000020,00cc0020) ret=7e7cbb1e 0009:Ret gdi32.StretchBlt() retval=00000001 ret=7e7cbb1e 0009:Call gdi32.SelectObject(00000300,0000006c) ret=7e7cbb33 0009:Ret gdi32.SelectObject() retval=000002e8 ret=7e7cbb33 0009:Call user32.DestroyIcon(00001116) ret=7e7cbb41 0009:Ret user32.DestroyIcon() retval=00000001 ret=7e7cbb41 0009:Call gdi32.DeleteDC(00000300) ret=7e7cbb56 0009:Ret gdi32.DeleteDC() retval=00000001 ret=7e7cbb56 0009:Call gdi32.DeleteObject(000002e4) ret=7e7cbb68 0009:Ret gdi32.DeleteObject() retval=00000001 ret=7e7cbb68 0009:Call gdi32.DeleteObject(000002e8) ret=7e7cbb7a 0009:Ret gdi32.DeleteObject() retval=00000001 ret=7e7cbb7a 0009:Ret comctl32.ImageList_ReplaceIcon() retval=00000001 ret=7e8ec013 0009:Ret PE DLL (proc=0x7e9349a0,module=0x7e8d0000 L"shell32.dll",reason=PROCESS_ATTACH,res=0x1) retval=1 0009:Call PE DLL (proc=0x7e73d5a0,module=0x7e710000 L"winmm.dll",reason=PROCESS_ATTACH,res=0x1) 0009:Call KERNEL32.__wine_dll_register_16(7e797750,7e73ddc8 "mmsystem.dll") ret=7e7191ff 0009:Ret KERNEL32.__wine_dll_register_16() retval=00000006 ret=7e7191ff 0009:Call KERNEL32.DisableThreadLibraryCalls(7e710000) ret=7e73c02b 0009:Ret KERNEL32.DisableThreadLibraryCalls() retval=00000001 ret=7e73c02b 0009:Call KERNEL32.CreateEventW(00000000,00000001,00000000,00000000) ret=7e73c05d 0009:Ret KERNEL32.CreateEventW() retval=00000038 ret=7e73c05d 0009:Call KERNEL32.CreateEventW(00000000,00000001,00000000,00000000) ret=7e73c08c 0009:Ret KERNEL32.CreateEventW() retval=00000040 ret=7e73c08c 0009:Call advapi32.RegOpenKeyA(80000001,7e73fa8e "Software\\Wine\\Drivers",0033f968) ret=7e72a713 0009:Ret advapi32.RegOpenKeyA() retval=00000000 ret=7e72a713 0009:Call advapi32.RegQueryValueExA(00000044,7e73faa4 "Audio",00000000,0033f964,0033fc78,0033f960) ret=7e72a850 0009:Ret advapi32.RegQueryValueExA() retval=00000000 ret=7e72a850 0009:Call KERNEL32.MultiByteToWideChar(00000000,00000000,0033f96e "winealsa.drv",ffffffff,00000000,00000000) ret=7e727df0 0009:Ret KERNEL32.MultiByteToWideChar() retval=0000000d ret=7e727df0 0009:Call ntdll.RtlAllocateHeap(00110000,00000000,0000001a) ret=7e727e18 0009:Ret ntdll.RtlAllocateHeap() retval=00139a08 ret=7e727e18 0009:Call KERNEL32.MultiByteToWideChar(00000000,00000000,0033f96e "winealsa.drv",ffffffff,00139a08,0000000d) ret=7e727e5e 0009:Ret KERNEL32.MultiByteToWideChar() retval=0000000d ret=7e727e5e 0009:Call ntdll.RtlAllocateHeap(00110000,00000000,0000001c) ret=7e7277be 0009:Ret ntdll.RtlAllocateHeap() retval=00139a30 ret=7e7277be 0009:Call KERNEL32.LoadLibraryW(0033f662 L"winealsa.drv") ret=7e7277d6 0009:Call PE DLL (proc=0x7e1c78b0,module=0x7e1a0000 L"winealsa.drv",reason=PROCESS_ATTACH,res=(nil)) 0009:Call KERNEL32.DisableThreadLibraryCalls(7e1a0000) ret=7e1c79a0 0009:Ret KERNEL32.DisableThreadLibraryCalls() retval=00000001 ret=7e1c79a0 0009:Ret PE DLL (proc=0x7e1c78b0,module=0x7e1a0000 L"winealsa.drv",reason=PROCESS_ATTACH,res=(nil)) retval=1 0009:Ret KERNEL32.LoadLibraryW() retval=7e1a0000 ret=7e7277d6 0009:Call KERNEL32.GetProcAddress(7e1a0000,7e73f633 "DriverProc") ret=7e727802 0009:Ret KERNEL32.GetProcAddress() retval=7e1b0f94 ret=7e727802 0009:Call winealsa.drv.DriverProc(00000000,00139a30,00000001,00000000,00000000) ret=7e726b16 0009:Call advapi32.RegOpenKeyExA(80000001,7e1cc140 "Software\\Wine\\Alsa Driver",00000000,00000001,0033f0c8) ret=7e1c3758 0009:Ret advapi32.RegOpenKeyExA() retval=00000002 ret=7e1c3758 0009:Call ntdll.RtlAllocateHeap(00110000,00000008,0000025c) ret=7e1c32a3 0009:Ret ntdll.RtlAllocateHeap() retval=0013c948 ret=7e1c32a3 0009:Call ntdll.RtlFreeHeap(00110000,00000000,0013c948) ret=7e1c3405 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e1c3405 0009:Call ntdll.RtlAllocateHeap(00110000,00000008,00000120) ret=7e1c248f 0009:Ret ntdll.RtlAllocateHeap() retval=0013c660 ret=7e1c248f 0009:Call ntdll.RtlAllocateHeap(00110000,00000000,00000008) ret=7e1c2427 0009:Ret ntdll.RtlAllocateHeap() retval=00139a58 ret=7e1c2427 0009:Call ntdll.RtlAllocateHeap(00110000,00000000,00000005) ret=7e1c2427 0009:Ret ntdll.RtlAllocateHeap() retval=00139a70 ret=7e1c2427 0009:Call ntdll.RtlFreeHeap(00110000,00000000,0013c660) ret=7e1c25fa 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e1c25fa 0009:Call KERNEL32.MultiByteToWideChar(0000fdf2,00000000,0033ecc4 "dmix:0",ffffffff,0033ef40,00000020) ret=7e1c315b 0009:Ret KERNEL32.MultiByteToWideChar() retval=00000007 ret=7e1c315b 0009:Call ntdll.RtlAllocateHeap(00110000,00000008,0000025c) ret=7e1c26f2 0009:Ret ntdll.RtlAllocateHeap() retval=0013c948 ret=7e1c26f2 0009:Call ntdll.RtlAllocateHeap(00110000,00000008,00000020) ret=7e1c271b 0009:Ret ntdll.RtlAllocateHeap() retval=0013a690 ret=7e1c271b 0009:Call ntdll.RtlAllocateHeap(00110000,00000008,00000020) ret=7e1c2744 0009:Ret ntdll.RtlAllocateHeap() retval=0013a6b8 ret=7e1c2744 0009:Call ntdll.RtlFreeHeap(00110000,00000000,0013c948) ret=7e1c2c10 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e1c2c10 0009:Call ntdll.RtlFreeHeap(00110000,00000000,0013a690) ret=7e1c2c33 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e1c2c33 0009:Call ntdll.RtlFreeHeap(00110000,00000000,0013a6b8) ret=7e1c2c56 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e1c2c56 0009:Call ntdll.RtlAllocateHeap(00110000,00000000,000029b8) ret=7e1c2ed9 0009:Ret ntdll.RtlAllocateHeap() retval=0013ce20 ret=7e1c2ed9 0009:Call ntdll.RtlAllocateHeap(00110000,00000008,0000025c) ret=7e1c32a3 0009:Ret ntdll.RtlAllocateHeap() retval=0013c948 ret=7e1c32a3 0009:Call ntdll.RtlFreeHeap(00110000,00000000,0013c948) ret=7e1c3405 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e1c3405 0009:Call ntdll.RtlAllocateHeap(00110000,00000008,00000120) ret=7e1c248f 0009:Ret ntdll.RtlAllocateHeap() retval=0013c660 ret=7e1c248f 0009:Call ntdll.RtlAllocateHeap(00110000,00000000,00000008) ret=7e1c2427 0009:Ret ntdll.RtlAllocateHeap() retval=0013c788 ret=7e1c2427 0009:Call ntdll.RtlAllocateHeap(00110000,00000000,00000005) ret=7e1c2427 0009:Ret ntdll.RtlAllocateHeap() retval=0013c7a0 ret=7e1c2427 0009:Call ntdll.RtlFreeHeap(00110000,00000000,0013c660) ret=7e1c25fa 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e1c25fa 0009:Call KERNEL32.MultiByteToWideChar(0000fdf2,00000000,0033ecc4 "dsnoop:0",ffffffff,0033efa0,00000020) ret=7e1c2fb8 0009:Ret KERNEL32.MultiByteToWideChar() retval=00000009 ret=7e1c2fb8 0009:Call ntdll.RtlAllocateHeap(00110000,00000008,0000025c) ret=7e1c26f2 0009:Ret ntdll.RtlAllocateHeap() retval=0013c948 ret=7e1c26f2 0009:Call ntdll.RtlAllocateHeap(00110000,00000008,00000020) ret=7e1c271b 0009:Ret ntdll.RtlAllocateHeap() retval=0013c7b8 ret=7e1c271b 0009:Call ntdll.RtlAllocateHeap(00110000,00000008,00000020) ret=7e1c2744 0009:Ret ntdll.RtlAllocateHeap() retval=0013c7e0 ret=7e1c2744 0009:Call ntdll.RtlFreeHeap(00110000,00000000,0013c948) ret=7e1c2c10 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e1c2c10 0009:Call ntdll.RtlFreeHeap(00110000,00000000,0013c7b8) ret=7e1c2c33 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e1c2c33 0009:Call ntdll.RtlFreeHeap(00110000,00000000,0013c7e0) ret=7e1c2c56 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e1c2c56 0009:Call ntdll.RtlAllocateHeap(00110000,00000000,000029b8) ret=7e1c2ed9 0009:Ret ntdll.RtlAllocateHeap() retval=0013f7e0 ret=7e1c2ed9 0009:Call ntdll.RtlAllocateHeap(00110000,00000008,0000025c) ret=7e1c32a3 0009:Ret ntdll.RtlAllocateHeap() retval=0013c948 ret=7e1c32a3 0009:Call ntdll.RtlFreeHeap(00110000,00000000,0013c948) ret=7e1c3405 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e1c3405 0009:Call ntdll.RtlAllocateHeap(00110000,00000008,00000120) ret=7e1c248f 0009:Ret ntdll.RtlAllocateHeap() retval=0013c660 ret=7e1c248f 0009:Call ntdll.RtlAllocateHeap(00110000,00000000,00000008) ret=7e1c2427 0009:Ret ntdll.RtlAllocateHeap() retval=0013c7b8 ret=7e1c2427 0009:Call ntdll.RtlAllocateHeap(00110000,00000000,00000005) ret=7e1c2427 0009:Ret ntdll.RtlAllocateHeap() retval=0013c7d0 ret=7e1c2427 0009:Call ntdll.RtlFreeHeap(00110000,00000000,0013c660) ret=7e1c25fa 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e1c25fa 0009:Call KERNEL32.MultiByteToWideChar(0000fdf2,00000000,0033ecc4 "dmix:0",ffffffff,0033ef40,00000020) ret=7e1c315b 0009:Ret KERNEL32.MultiByteToWideChar() retval=00000007 ret=7e1c315b 0009:Call ntdll.RtlAllocateHeap(00110000,00000008,0000025c) ret=7e1c26f2 0009:Ret ntdll.RtlAllocateHeap() retval=0013c948 ret=7e1c26f2 0009:Call ntdll.RtlAllocateHeap(00110000,00000008,00000020) ret=7e1c271b 0009:Ret ntdll.RtlAllocateHeap() retval=0013a690 ret=7e1c271b 0009:Call ntdll.RtlAllocateHeap(00110000,00000008,00000020) ret=7e1c2744 0009:Ret ntdll.RtlAllocateHeap() retval=0013a6b8 ret=7e1c2744 0009:err:alsa:ALSA_CheckSetVolume Could not find 'PCM Playback Volume' element 0009:Call ntdll.RtlFreeHeap(00110000,00000000,0013c948) ret=7e1c2c10 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e1c2c10 0009:Call ntdll.RtlFreeHeap(00110000,00000000,0013a690) ret=7e1c2c33 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e1c2c33 0009:Call ntdll.RtlFreeHeap(00110000,00000000,0013a6b8) ret=7e1c2c56 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e1c2c56 0009:Call ntdll.RtlAllocateHeap(00110000,00000008,0000025c) ret=7e1c32a3 0009:Ret ntdll.RtlAllocateHeap() retval=0013c948 ret=7e1c32a3 0009:Call ntdll.RtlFreeHeap(00110000,00000000,0013c948) ret=7e1c3405 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e1c3405 0009:Call ntdll.RtlAllocateHeap(00110000,00000008,00000120) ret=7e1c248f 0009:Ret ntdll.RtlAllocateHeap() retval=0013c660 ret=7e1c248f 0009:Call ntdll.RtlAllocateHeap(00110000,00000000,00000008) ret=7e1c2427 0009:Ret ntdll.RtlAllocateHeap() retval=0013c7e8 ret=7e1c2427 0009:Call ntdll.RtlAllocateHeap(00110000,00000000,00000005) ret=7e1c2427 0009:Ret ntdll.RtlAllocateHeap() retval=0013a690 ret=7e1c2427 0009:Call ntdll.RtlFreeHeap(00110000,00000000,0013c660) ret=7e1c25fa 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e1c25fa 0009:Call KERNEL32.MultiByteToWideChar(0000fdf2,00000000,0033ecc4 "dsnoop:0",ffffffff,0033efa0,00000020) ret=7e1c2fb8 0009:Ret KERNEL32.MultiByteToWideChar() retval=00000009 ret=7e1c2fb8 0009:Call ntdll.RtlAllocateHeap(00110000,00000008,0000025c) ret=7e1c26f2 0009:Ret ntdll.RtlAllocateHeap() retval=0013c948 ret=7e1c26f2 0009:Call ntdll.RtlAllocateHeap(00110000,00000008,00000020) ret=7e1c271b 0009:Ret ntdll.RtlAllocateHeap() retval=0013a6a8 ret=7e1c271b 0009:Call ntdll.RtlAllocateHeap(00110000,00000008,00000020) ret=7e1c2744 0009:Ret ntdll.RtlAllocateHeap() retval=0013a6d0 ret=7e1c2744 0009:err:alsa:ALSA_CheckSetVolume Could not find 'PCM Playback Volume' element 0009:Call ntdll.RtlFreeHeap(00110000,00000000,0013c948) ret=7e1c2c10 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e1c2c10 0009:Call ntdll.RtlFreeHeap(00110000,00000000,0013a6a8) ret=7e1c2c33 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e1c2c33 0009:Call ntdll.RtlFreeHeap(00110000,00000000,0013a6d0) ret=7e1c2c56 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e1c2c56 0009:Call ntdll.RtlAllocateHeap(00110000,00000008,000000bc) ret=7e1bbb0c 0009:Ret ntdll.RtlAllocateHeap() retval=0013a6a8 ret=7e1bbb0c 0009:Call ntdll.RtlAllocateHeap(00110000,00000008,000000a4) ret=7e1bbb34 0009:Ret ntdll.RtlAllocateHeap() retval=0013c660 ret=7e1bbb34 0009:Call KERNEL32.MultiByteToWideChar(0000fdf2,00000000,0033f488 "Midi Through Port-0",ffffffff,7e1cf858,00000020) ret=7e1bb063 0009:Ret KERNEL32.MultiByteToWideChar() retval=00000014 ret=7e1bb063 0009:Call KERNEL32.MultiByteToWideChar(0000fdf2,00000000,0033f488 "Midi Through Port-0",ffffffff,7e1cefe0,00000020) ret=7e1baf1d 0009:Ret KERNEL32.MultiByteToWideChar() retval=00000014 ret=7e1baf1d 0009:Call ntdll.RtlFreeHeap(00110000,00000000,0013a6a8) ret=7e1bbbf1 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e1bbbf1 0009:Call ntdll.RtlFreeHeap(00110000,00000000,0013c660) ret=7e1bbc11 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e1bbc11 0009:Ret winealsa.drv.DriverProc() retval=00000001 ret=7e726b16 0009:Call winealsa.drv.DriverProc(00000000,00139a30,00000002,00000000,00000000) ret=7e726bd3 0009:Ret winealsa.drv.DriverProc() retval=00000001 ret=7e726bd3 0009:Call winealsa.drv.DriverProc(00000000,00139a30,00000003,00000000,00000000) ret=7e726c6d 0009:Ret winealsa.drv.DriverProc() retval=00000001 ret=7e726c6d 0009:Call ntdll.RtlFreeHeap(00110000,00000000,00139a08) ret=7e727ce8 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e727ce8 0009:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7e727d0b 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e727d0b 0009:Call KERNEL32.GetProcAddress(7e1a0000,7e73ddf3 "auxMessage") ret=7e72a12f 0009:Ret KERNEL32.GetProcAddress() retval=00000000 ret=7e72a12f 0009:Call KERNEL32.GetProcAddress(7e1a0000,7e73de14 "mxdMessage") ret=7e72a16c 0009:Ret KERNEL32.GetProcAddress() retval=7e1b0fdc ret=7e72a16c 0009:Call KERNEL32.GetProcAddress(7e1a0000,7e73de1f "midMessage") ret=7e72a19f 0009:Ret KERNEL32.GetProcAddress() retval=7e1b0fac ret=7e72a19f 0009:Call KERNEL32.GetProcAddress(7e1a0000,7e73de2a "modMessage") ret=7e72a1d2 0009:Ret KERNEL32.GetProcAddress() retval=7e1b0fc4 ret=7e72a1d2 0009:Call KERNEL32.GetProcAddress(7e1a0000,7e73de35 "widMessage") ret=7e72a205 0009:Ret KERNEL32.GetProcAddress() retval=7e1b0ff4 ret=7e72a205 0009:Call KERNEL32.GetProcAddress(7e1a0000,7e73de40 "wodMessage") ret=7e72a238 0009:Ret KERNEL32.GetProcAddress() retval=7e1b100c ret=7e72a238 0009:Call ntdll.RtlAllocateHeap(00110000,00000000,0000000d) ret=7e72a29f 0009:Ret ntdll.RtlAllocateHeap() retval=00139a08 ret=7e72a29f 0009:Call winealsa.drv.mxdMessage(00000000,00000064,00000000,00000000,00000000) ret=7e7299fe 0009:Call ntdll.RtlAllocateHeap(00110000,00000000,00000178) ret=7e1be34b 0009:Ret ntdll.RtlAllocateHeap() retval=0013c948 ret=7e1be34b 0009:Call KERNEL32.MultiByteToWideChar(0000fdf2,00000000,0013c970 "ATI IXP",ffffffff,7e1d0124,00000020) ret=7e1be4c5 0009:Ret KERNEL32.MultiByteToWideChar() retval=00000008 ret=7e1be4c5 0009:Call ntdll.RtlAllocateHeap(00110000,00000008,00000348) ret=7e1be94d 0009:Ret ntdll.RtlAllocateHeap() retval=001421a0 ret=7e1be94d 0009:Call ntdll.RtlAllocateHeap(00110000,00000008,00001b30) ret=7e1be978 0009:Ret ntdll.RtlAllocateHeap() retval=001424f0 ret=7e1be978 0009:Call KERNEL32.MultiByteToWideChar(0000fdf2,00000000,7c02b758 "Master",ffffffff,001421a0,00000020) ret=7e1be9d1 0009:Ret KERNEL32.MultiByteToWideChar() retval=00000007 ret=7e1be9d1 0009:Call KERNEL32.MultiByteToWideChar(0000fdf2,00000000,7c060348 "Capture",ffffffff,001421f4,00000020) ret=7e1bf4b0 0009:Ret KERNEL32.MultiByteToWideChar() retval=00000008 ret=7e1bf4b0 0009:Call KERNEL32.MultiByteToWideChar(0000fdf2,00000000,7c030958 "Headphone",ffffffff,00142248,00000020) ret=7e1bf61e 0009:Ret KERNEL32.MultiByteToWideChar() retval=0000000a ret=7e1bf61e 0009:Call KERNEL32.MultiByteToWideChar(0000fdf2,00000000,7c05b0e8 "PCM",ffffffff,0014229c,00000020) ret=7e1bf61e 0009:Ret KERNEL32.MultiByteToWideChar() retval=00000004 ret=7e1bf61e 0009:Call KERNEL32.MultiByteToWideChar(0000fdf2,00000000,7c05cae8 "Line",ffffffff,001422f0,00000020) ret=7e1bf61e 0009:Ret KERNEL32.MultiByteToWideChar() retval=00000005 ret=7e1bf61e 0009:Call KERNEL32.MultiByteToWideChar(0000fdf2,00000000,7c02b878 "CD",ffffffff,00142344,00000020) ret=7e1bf61e 0009:Ret KERNEL32.MultiByteToWideChar() retval=00000003 ret=7e1bf61e 0009:Call KERNEL32.MultiByteToWideChar(0000fdf2,00000000,7c05d3a8 "Mic",ffffffff,00142398,00000020) ret=7e1bf865 0009:Ret KERNEL32.MultiByteToWideChar() retval=00000004 ret=7e1bf865 0009:Call KERNEL32.MultiByteToWideChar(0000fdf2,00000000,7c060688 "IEC958 Playback AC97-SPSA",ffffffff,001423ec,00000020) ret=7e1bf61e 0009:Ret KERNEL32.MultiByteToWideChar() retval=0000001a ret=7e1bf61e 0009:Call KERNEL32.MultiByteToWideChar(0000fdf2,00000000,7c060688 "IEC958 Playback AC97-SPSA",ffffffff,00142440,00000020) ret=7e1bf865 0009:Ret KERNEL32.MultiByteToWideChar() retval=0000001a ret=7e1bf865 0009:Call KERNEL32.MultiByteToWideChar(0000fdf2,00000000,7c05ce70 "PC Speaker",ffffffff,00142494,00000020) ret=7e1bf61e 0009:Ret KERNEL32.MultiByteToWideChar() retval=0000000b ret=7e1bf61e 0009:Call KERNEL32.MultiByteToWideChar(0000fdf2,00000000,0013c970 "ATI IXP Modem",ffffffff,7e1d0184,00000020) ret=7e1be4c5 0009:Ret KERNEL32.MultiByteToWideChar() retval=0000000e ret=7e1be4c5 0009:fixme:mixer:ALSA_MixerInit No master control found on ATI IXP Modem, disabling mixer 0009:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7e1bee44 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e1bee44 0009:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7e1bee68 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e1bee68 0009:Call ntdll.RtlFreeHeap(00110000,00000000,0013c948) ret=7e1bed0b 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e1bed0b 0009:Call KERNEL32.InitializeCriticalSection(7e1d0d24) ret=7e1bed1c 0009:Ret KERNEL32.InitializeCriticalSection() retval=00000001 ret=7e1bed1c 0009:Ret winealsa.drv.mxdMessage() retval=00000000 ret=7e7299fe 0009:Call winealsa.drv.mxdMessage(00000000,00000001,00000000,00000000,00000000) ret=7e729a37 0009:Ret winealsa.drv.mxdMessage() retval=00000001 ret=7e729a37 0009:Call ntdll.RtlAllocateHeap(00110000,00000000,00000038) ret=7e729f84 0009:Ret ntdll.RtlAllocateHeap() retval=0013a6d0 ret=7e729f84 0009:Call winealsa.drv.midMessage(00000000,00000064,00000000,00000000,00000000) ret=7e7299fe 0009:Ret winealsa.drv.midMessage() retval=00000000 ret=7e7299fe 0009:Call winealsa.drv.midMessage(00000000,00000035,00000000,00000000,00000000) ret=7e729a37 0009:Ret winealsa.drv.midMessage() retval=00000001 ret=7e729a37 0009:Call ntdll.RtlAllocateHeap(00110000,00000000,00000038) ret=7e729f84 0009:Ret ntdll.RtlAllocateHeap() retval=0013a710 ret=7e729f84 0009:Call winealsa.drv.modMessage(00000000,00000064,00000000,00000000,00000000) ret=7e7299fe 0009:Ret winealsa.drv.modMessage() retval=00000000 ret=7e7299fe 0009:Call winealsa.drv.modMessage(00000000,00000001,00000000,00000000,00000000) ret=7e729a37 0009:Ret winealsa.drv.modMessage() retval=00000001 ret=7e729a37 0009:Call ntdll.RtlAllocateHeap(00110000,00000000,00000038) ret=7e729f84 0009:Ret ntdll.RtlAllocateHeap() retval=0013c660 ret=7e729f84 0009:Call winealsa.drv.widMessage(00000000,00000064,00000000,00000000,00000000) ret=7e7299fe 0009:Ret winealsa.drv.widMessage() retval=00000000 ret=7e7299fe 0009:Call winealsa.drv.widMessage(00000000,00000032,00000000,00000000,00000000) ret=7e729a37 0009:Ret winealsa.drv.widMessage() retval=00000002 ret=7e729a37 0009:Call ntdll.RtlAllocateHeap(00110000,00000000,00000054) ret=7e729f84 0009:Ret ntdll.RtlAllocateHeap() retval=0013c6a0 ret=7e729f84 0009:Call winealsa.drv.wodMessage(00000000,00000064,00000000,00000000,00000000) ret=7e7299fe 0009:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e7299fe 0009:Call winealsa.drv.wodMessage(00000000,00000003,00000000,00000000,00000000) ret=7e729a37 0009:Ret winealsa.drv.wodMessage() retval=00000002 ret=7e729a37 0009:Call ntdll.RtlAllocateHeap(00110000,00000000,00000054) ret=7e729f84 0009:Ret ntdll.RtlAllocateHeap() retval=0013c700 ret=7e729f84 0009:Call KERNEL32.MultiByteToWideChar(00000000,00000000,7e73fab5 "msacm32.drv",ffffffff,00000000,00000000) ret=7e727df0 0009:Ret KERNEL32.MultiByteToWideChar() retval=0000000c ret=7e727df0 0009:Call ntdll.RtlAllocateHeap(00110000,00000000,00000018) ret=7e727e18 0009:Ret ntdll.RtlAllocateHeap() retval=0013c760 ret=7e727e18 0009:Call KERNEL32.MultiByteToWideChar(00000000,00000000,7e73fab5 "msacm32.drv",ffffffff,0013c760,0000000c) ret=7e727e5e 0009:Ret KERNEL32.MultiByteToWideChar() retval=0000000c ret=7e727e5e 0009:Call ntdll.RtlAllocateHeap(00110000,00000000,0000001c) ret=7e7277be 0009:Ret ntdll.RtlAllocateHeap() retval=0013a750 ret=7e7277be 0009:Call KERNEL32.LoadLibraryW(0033f662 L"msacm32.drv") ret=7e7277d6 0009:Call PE DLL (proc=0x7e0a5400,module=0x7e090000 L"msacm32.dll",reason=WINE_PREATTACH,res=(nil)) 0009:Ret PE DLL (proc=0x7e0a5400,module=0x7e090000 L"msacm32.dll",reason=WINE_PREATTACH,res=(nil)) retval=1 0009:Call PE DLL (proc=0x7e0c14f0,module=0x7e0b0000 L"msacm32.drv",reason=WINE_PREATTACH,res=(nil)) 0009:Ret PE DLL (proc=0x7e0c14f0,module=0x7e0b0000 L"msacm32.drv",reason=WINE_PREATTACH,res=(nil)) retval=1 0009:Call PE DLL (proc=0x7e0a5400,module=0x7e090000 L"msacm32.dll",reason=PROCESS_ATTACH,res=(nil)) 0009:Call KERNEL32.DisableThreadLibraryCalls(7e090000) ret=7e0a17d0 0009:Ret KERNEL32.DisableThreadLibraryCalls() retval=00000001 ret=7e0a17d0 0009:Call KERNEL32.HeapCreate(00000000,00010000,00000000) ret=7e0a17ef 0009:Ret KERNEL32.HeapCreate() retval=004b0000 ret=7e0a17ef 0009:Call advapi32.RegOpenKeyExW(80000002,7e0a64e0 L"Software\\Microsoft\\Windows NT\\CurrentVersion\\Drivers32",00000000,00000001,0033f040) ret=7e0a0a65 0009:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7e0a0a65 0009:Call KERNEL32.GetPrivateProfileSectionW(7e0a6564 L"drivers32",0033de0e,00000800,7e0a654e L"system.ini") ret=7e0a0a94 0009:Ret KERNEL32.GetPrivateProfileSectionW() retval=000000aa ret=7e0a0a94 0009:Call ntdll.RtlAllocateHeap(004b0000,00000000,00000030) ret=7e0a0267 0009:Ret ntdll.RtlAllocateHeap() retval=004b0130 ret=7e0a0267 0009:Call ntdll.RtlAllocateHeap(004b0000,00000000,0000001e) ret=7e0a02dd 0009:Ret ntdll.RtlAllocateHeap() retval=004b0168 ret=7e0a02dd 0009:Call ntdll.RtlAllocateHeap(004b0000,00000000,0000001a) ret=7e0a0356 0009:Ret ntdll.RtlAllocateHeap() retval=004b0190 ret=7e0a0356 0009:Call ntdll.RtlAllocateHeap(004b0000,00000000,0000008c) ret=7e09f861 0009:Ret ntdll.RtlAllocateHeap() retval=004b01b8 ret=7e09f861 0009:Call user32.CharLowerW(004b0226 L"msacm.imaadpcm") ret=7e09f8a9 0009:Ret user32.CharLowerW() retval=004b0226 ret=7e09f8a9 0009:Call advapi32.RegCreateKeyW(80000002,004b01b8 L"Software\\Microsoft\\AudioCompressionManager\\DriverCache\\msacm.imaadpcm",0033dd88) ret=7e0a0411 0009:Ret advapi32.RegCreateKeyW() retval=00000000 ret=7e0a0411 0009:Call advapi32.RegQueryValueExA(00000048,7e0a61c6 "cFormatTags",00000000,0033dd84,004b0154,0033dd80) ret=7e0a045d 0009:Ret advapi32.RegQueryValueExA() retval=00000000 ret=7e0a045d 0009:Call advapi32.RegQueryValueExA(00000048,7e0a61d2 "cFilterTags",00000000,0033dd84,004b0150,0033dd80) ret=7e0a07b4 0009:Ret advapi32.RegQueryValueExA() retval=00000000 ret=7e0a07b4 0009:Call advapi32.RegQueryValueExA(00000048,7e0a61de "fdwSupport",00000000,0033dd84,004b0158,0033dd80) ret=7e0a07fe 0009:Ret advapi32.RegQueryValueExA() retval=00000000 ret=7e0a07fe 0009:Call ntdll.RtlAllocateHeap(004b0000,00000008,00000010) ret=7e0a0838 0009:Ret ntdll.RtlAllocateHeap() retval=004b0250 ret=7e0a0838 0009:Call advapi32.RegQueryValueExA(00000048,7e0a61e9 "aFormatTagCache",00000000,0033dd84,004b0250,0033dd80) ret=7e0a087b 0009:Ret advapi32.RegQueryValueExA() retval=00000000 ret=7e0a087b 0009:Call ntdll.RtlFreeHeap(004b0000,00000000,004b01b8) ret=7e0a08a2 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e0a08a2 0009:Call ntdll.RtlAllocateHeap(004b0000,00000000,00000030) ret=7e0a0267 0009:Ret ntdll.RtlAllocateHeap() retval=004b01b8 ret=7e0a0267 0009:Call ntdll.RtlAllocateHeap(004b0000,00000000,0000001c) ret=7e0a02dd 0009:Ret ntdll.RtlAllocateHeap() retval=004b01f0 ret=7e0a02dd 0009:Call ntdll.RtlAllocateHeap(004b0000,00000000,00000018) ret=7e0a0356 0009:Ret ntdll.RtlAllocateHeap() retval=004b0218 ret=7e0a0356 0009:Call ntdll.RtlAllocateHeap(004b0000,00000000,0000008a) ret=7e09f861 0009:Ret ntdll.RtlAllocateHeap() retval=004b0268 ret=7e09f861 0009:Call user32.CharLowerW(004b02d6 L"msacm.msadpcm") ret=7e09f8a9 0009:Ret user32.CharLowerW() retval=004b02d6 ret=7e09f8a9 0009:Call advapi32.RegCreateKeyW(80000002,004b0268 L"Software\\Microsoft\\AudioCompressionManager\\DriverCache\\msacm.msadpcm",0033dd88) ret=7e0a0411 0009:Ret advapi32.RegCreateKeyW() retval=00000000 ret=7e0a0411 0009:Call advapi32.RegQueryValueExA(0000004c,7e0a61c6 "cFormatTags",00000000,0033dd84,004b01dc,0033dd80) ret=7e0a045d 0009:Ret advapi32.RegQueryValueExA() retval=00000000 ret=7e0a045d 0009:Call advapi32.RegQueryValueExA(0000004c,7e0a61d2 "cFilterTags",00000000,0033dd84,004b01d8,0033dd80) ret=7e0a07b4 0009:Ret advapi32.RegQueryValueExA() retval=00000000 ret=7e0a07b4 0009:Call advapi32.RegQueryValueExA(0000004c,7e0a61de "fdwSupport",00000000,0033dd84,004b01e0,0033dd80) ret=7e0a07fe 0009:Ret advapi32.RegQueryValueExA() retval=00000000 ret=7e0a07fe 0009:Call ntdll.RtlAllocateHeap(004b0000,00000008,00000010) ret=7e0a0838 0009:Ret ntdll.RtlAllocateHeap() retval=004b0300 ret=7e0a0838 0009:Call advapi32.RegQueryValueExA(0000004c,7e0a61e9 "aFormatTagCache",00000000,0033dd84,004b0300,0033dd80) ret=7e0a087b 0009:Ret advapi32.RegQueryValueExA() retval=00000000 ret=7e0a087b 0009:Call ntdll.RtlFreeHeap(004b0000,00000000,004b0268) ret=7e0a08a2 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e0a08a2 0009:Call ntdll.RtlAllocateHeap(004b0000,00000000,00000030) ret=7e0a0267 0009:Ret ntdll.RtlAllocateHeap() retval=004b0268 ret=7e0a0267 0009:Call ntdll.RtlAllocateHeap(004b0000,00000000,0000001a) ret=7e0a02dd 0009:Ret ntdll.RtlAllocateHeap() retval=004b02a0 ret=7e0a02dd 0009:Call ntdll.RtlAllocateHeap(004b0000,00000000,00000016) ret=7e0a0356 0009:Ret ntdll.RtlAllocateHeap() retval=004b02c8 ret=7e0a0356 0009:Call ntdll.RtlAllocateHeap(004b0000,00000000,00000088) ret=7e09f861 0009:Ret ntdll.RtlAllocateHeap() retval=004b0318 ret=7e09f861 0009:Call user32.CharLowerW(004b0386 L"msacm.msg711") ret=7e09f8a9 0009:Ret user32.CharLowerW() retval=004b0386 ret=7e09f8a9 0009:Call advapi32.RegCreateKeyW(80000002,004b0318 L"Software\\Microsoft\\AudioCompressionManager\\DriverCache\\msacm.msg711",0033dd88) ret=7e0a0411 0009:Ret advapi32.RegCreateKeyW() retval=00000000 ret=7e0a0411 0009:Call advapi32.RegQueryValueExA(00000050,7e0a61c6 "cFormatTags",00000000,0033dd84,004b028c,0033dd80) ret=7e0a045d 0009:Ret advapi32.RegQueryValueExA() retval=00000000 ret=7e0a045d 0009:Call advapi32.RegQueryValueExA(00000050,7e0a61d2 "cFilterTags",00000000,0033dd84,004b0288,0033dd80) ret=7e0a07b4 0009:Ret advapi32.RegQueryValueExA() retval=00000000 ret=7e0a07b4 0009:Call advapi32.RegQueryValueExA(00000050,7e0a61de "fdwSupport",00000000,0033dd84,004b0290,0033dd80) ret=7e0a07fe 0009:Ret advapi32.RegQueryValueExA() retval=00000000 ret=7e0a07fe 0009:Call ntdll.RtlAllocateHeap(004b0000,00000008,00000018) ret=7e0a0838 0009:Ret ntdll.RtlAllocateHeap() retval=004b03a8 ret=7e0a0838 0009:Call advapi32.RegQueryValueExA(00000050,7e0a61e9 "aFormatTagCache",00000000,0033dd84,004b03a8,0033dd80) ret=7e0a087b 0009:Ret advapi32.RegQueryValueExA() retval=00000000 ret=7e0a087b 0009:Call ntdll.RtlFreeHeap(004b0000,00000000,004b0318) ret=7e0a08a2 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e0a08a2 0009:Call ntdll.RtlAllocateHeap(004b0000,00000000,00000030) ret=7e0a0267 0009:Ret ntdll.RtlAllocateHeap() retval=004b0318 ret=7e0a0267 0009:Call ntdll.RtlAllocateHeap(004b0000,00000000,0000001c) ret=7e0a02dd 0009:Ret ntdll.RtlAllocateHeap() retval=004b0350 ret=7e0a02dd 0009:Call ntdll.RtlAllocateHeap(004b0000,00000000,00000018) ret=7e0a0356 0009:Ret ntdll.RtlAllocateHeap() retval=004b0378 ret=7e0a0356 0009:Call ntdll.RtlAllocateHeap(004b0000,00000000,0000008a) ret=7e09f861 0009:Ret ntdll.RtlAllocateHeap() retval=004b03c8 ret=7e09f861 0009:Call user32.CharLowerW(004b0436 L"msacm.winemp3") ret=7e09f8a9 0009:Ret user32.CharLowerW() retval=004b0436 ret=7e09f8a9 0009:Call advapi32.RegCreateKeyW(80000002,004b03c8 L"Software\\Microsoft\\AudioCompressionManager\\DriverCache\\msacm.winemp3",0033dd88) ret=7e0a0411 0009:Ret advapi32.RegCreateKeyW() retval=00000000 ret=7e0a0411 0009:Call advapi32.RegQueryValueExA(00000054,7e0a61c6 "cFormatTags",00000000,0033dd84,004b033c,0033dd80) ret=7e0a045d 0009:Ret advapi32.RegQueryValueExA() retval=00000000 ret=7e0a045d 0009:Call advapi32.RegQueryValueExA(00000054,7e0a61d2 "cFilterTags",00000000,0033dd84,004b0338,0033dd80) ret=7e0a07b4 0009:Ret advapi32.RegQueryValueExA() retval=00000000 ret=7e0a07b4 0009:Call advapi32.RegQueryValueExA(00000054,7e0a61de "fdwSupport",00000000,0033dd84,004b0340,0033dd80) ret=7e0a07fe 0009:Ret advapi32.RegQueryValueExA() retval=00000000 ret=7e0a07fe 0009:Call ntdll.RtlAllocateHeap(004b0000,00000008,00000010) ret=7e0a0838 0009:Ret ntdll.RtlAllocateHeap() retval=004b0460 ret=7e0a0838 0009:Call advapi32.RegQueryValueExA(00000054,7e0a61e9 "aFormatTagCache",00000000,0033dd84,004b0460,0033dd80) ret=7e0a087b 0009:Ret advapi32.RegQueryValueExA() retval=00000000 ret=7e0a087b 0009:Call ntdll.RtlFreeHeap(004b0000,00000000,004b03c8) ret=7e0a08a2 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e0a08a2 0009:Call ntdll.RtlAllocateHeap(004b0000,00000000,00000010) ret=7e0a0b86 0009:Ret ntdll.RtlAllocateHeap() retval=004b03c8 ret=7e0a0b86 0009:Call advapi32.RegOpenKeyW(80000001,7e0a65e0 L"Software\\Microsoft\\Multimedia\\Audio Compression Manager\\Priority v4.00",0033f03c) ret=7e0a0bb6 0009:Ret advapi32.RegOpenKeyW() retval=00000002 ret=7e0a0bb6 0009:Call ntdll.RtlFreeHeap(004b0000,00000000,004b03c8) ret=7e0a0de3 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e0a0de3 0009:Call ntdll.RtlAllocateHeap(004b0000,00000000,00000030) ret=7e0a0267 0009:Ret ntdll.RtlAllocateHeap() retval=004b03c8 ret=7e0a0267 0009:Call ntdll.RtlAllocateHeap(004b0000,00000000,00000018) ret=7e0a02dd 0009:Ret ntdll.RtlAllocateHeap() retval=004b0400 ret=7e0a02dd 0009:Call ntdll.RtlAllocateHeap(004b0000,00000000,00000018) ret=7e0a0356 0009:Ret ntdll.RtlAllocateHeap() retval=004b0420 ret=7e0a0356 0009:Call ntdll.RtlAllocateHeap(004b0000,00000000,00000086) ret=7e09f861 0009:Ret ntdll.RtlAllocateHeap() retval=004b0478 ret=7e09f861 0009:Call user32.CharLowerW(004b04e6 L"msacm32.dll") ret=7e09f8a9 0009:Ret user32.CharLowerW() retval=004b04e6 ret=7e09f8a9 0009:Call advapi32.RegCreateKeyW(80000002,004b0478 L"Software\\Microsoft\\AudioCompressionManager\\DriverCache\\msacm32.dll",0033dd88) ret=7e0a0411 0009:Ret advapi32.RegCreateKeyW() retval=00000000 ret=7e0a0411 0009:Call advapi32.RegQueryValueExA(00000058,7e0a61c6 "cFormatTags",00000000,0033dd84,004b03ec,0033dd80) ret=7e0a045d 0009:Ret advapi32.RegQueryValueExA() retval=00000000 ret=7e0a045d 0009:Call advapi32.RegQueryValueExA(00000058,7e0a61d2 "cFilterTags",00000000,0033dd84,004b03e8,0033dd80) ret=7e0a07b4 0009:Ret advapi32.RegQueryValueExA() retval=00000000 ret=7e0a07b4 0009:Call advapi32.RegQueryValueExA(00000058,7e0a61de "fdwSupport",00000000,0033dd84,004b03f0,0033dd80) ret=7e0a07fe 0009:Ret advapi32.RegQueryValueExA() retval=00000000 ret=7e0a07fe 0009:Call ntdll.RtlAllocateHeap(004b0000,00000008,00000008) ret=7e0a0838 0009:Ret ntdll.RtlAllocateHeap() retval=004b0440 ret=7e0a0838 0009:Call advapi32.RegQueryValueExA(00000058,7e0a61e9 "aFormatTagCache",00000000,0033dd84,004b0440,0033dd80) ret=7e0a087b 0009:Ret advapi32.RegQueryValueExA() retval=00000000 ret=7e0a087b 0009:Call ntdll.RtlFreeHeap(004b0000,00000000,004b0478) ret=7e0a08a2 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e0a08a2 0009:Ret PE DLL (proc=0x7e0a5400,module=0x7e090000 L"msacm32.dll",reason=PROCESS_ATTACH,res=(nil)) retval=1 0009:Call PE DLL (proc=0x7e0c14f0,module=0x7e0b0000 L"msacm32.drv",reason=PROCESS_ATTACH,res=(nil)) 0009:Call KERNEL32.DisableThreadLibraryCalls(7e0b0000) ret=7e0c15e0 0009:Ret KERNEL32.DisableThreadLibraryCalls() retval=00000001 ret=7e0c15e0 0009:Ret PE DLL (proc=0x7e0c14f0,module=0x7e0b0000 L"msacm32.drv",reason=PROCESS_ATTACH,res=(nil)) retval=1 0009:Ret KERNEL32.LoadLibraryW() retval=7e0b0000 ret=7e7277d6 0009:Call KERNEL32.GetProcAddress(7e0b0000,7e73f633 "DriverProc") ret=7e727802 0009:Ret KERNEL32.GetProcAddress() retval=7e0bd5a4 ret=7e727802 0009:Call msacm32.drv.DriverProc(00000000,0013a750,00000001,00000000,00000000) ret=7e726b16 0009:Ret msacm32.drv.DriverProc() retval=00000001 ret=7e726b16 0009:Call msacm32.drv.DriverProc(00000000,0013a750,00000002,00000000,00000000) ret=7e726bd3 0009:Ret msacm32.drv.DriverProc() retval=00000001 ret=7e726bd3 0009:Call msacm32.drv.DriverProc(00000000,0013a750,00000003,00000000,00000000) ret=7e726c6d 0009:Ret msacm32.drv.DriverProc() retval=00000001 ret=7e726c6d 0009:Call ntdll.RtlFreeHeap(00110000,00000000,0013c760) ret=7e727ce8 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e727ce8 0009:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7e727d0b 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e727d0b 0009:Call KERNEL32.GetProcAddress(7e0b0000,7e73ddf3 "auxMessage") ret=7e72a12f 0009:Ret KERNEL32.GetProcAddress() retval=00000000 ret=7e72a12f 0009:Call KERNEL32.GetProcAddress(7e0b0000,7e73de14 "mxdMessage") ret=7e72a16c 0009:Ret KERNEL32.GetProcAddress() retval=00000000 ret=7e72a16c 0009:Call KERNEL32.GetProcAddress(7e0b0000,7e73de1f "midMessage") ret=7e72a19f 0009:Ret KERNEL32.GetProcAddress() retval=00000000 ret=7e72a19f 0009:Call KERNEL32.GetProcAddress(7e0b0000,7e73de2a "modMessage") ret=7e72a1d2 0009:Ret KERNEL32.GetProcAddress() retval=00000000 ret=7e72a1d2 0009:Call KERNEL32.GetProcAddress(7e0b0000,7e73de35 "widMessage") ret=7e72a205 0009:Ret KERNEL32.GetProcAddress() retval=7e0bd5bc ret=7e72a205 0009:Call KERNEL32.GetProcAddress(7e0b0000,7e73de40 "wodMessage") ret=7e72a238 0009:Ret KERNEL32.GetProcAddress() retval=7e0bd5d4 ret=7e72a238 0009:Call ntdll.RtlAllocateHeap(00110000,00000000,0000000b) ret=7e72a29f 0009:Ret ntdll.RtlAllocateHeap() retval=0013c760 ret=7e72a29f 0009:Call msacm32.drv.widMessage(00000000,00000064,00000000,00000000,00000000) ret=7e7299fe 0009:Ret msacm32.drv.widMessage() retval=00000000 ret=7e7299fe 0009:Call msacm32.drv.widMessage(00000000,00000032,00000000,00000000,00000000) ret=7e729a37 0009:Ret msacm32.drv.widMessage() retval=00000001 ret=7e729a37 0009:Call ntdll.RtlReAllocateHeap(00110000,00000000,0013c6a0,00000054) ret=7e729bf1 0009:Ret ntdll.RtlReAllocateHeap() retval=0013c6a0 ret=7e729bf1 0009:Call msacm32.drv.wodMessage(00000000,00000064,00000000,00000000,00000000) ret=7e7299fe 0009:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e7299fe 0009:Call msacm32.drv.wodMessage(00000000,00000003,00000000,00000000,00000000) ret=7e729a37 0009:Ret msacm32.drv.wodMessage() retval=00000001 ret=7e729a37 0009:Call ntdll.RtlReAllocateHeap(00110000,00000000,0013c700,00000054) ret=7e729bf1 0009:Ret ntdll.RtlReAllocateHeap() retval=0013c700 ret=7e729bf1 0009:Call KERNEL32.MultiByteToWideChar(00000000,00000000,7e73facc "midimap.dll",ffffffff,00000000,00000000) ret=7e727df0 0009:Ret KERNEL32.MultiByteToWideChar() retval=0000000c ret=7e727df0 0009:Call ntdll.RtlAllocateHeap(00110000,00000000,00000018) ret=7e727e18 0009:Ret ntdll.RtlAllocateHeap() retval=0013a3d8 ret=7e727e18 0009:Call KERNEL32.MultiByteToWideChar(00000000,00000000,7e73facc "midimap.dll",ffffffff,0013a3d8,0000000c) ret=7e727e5e 0009:Ret KERNEL32.MultiByteToWideChar() retval=0000000c ret=7e727e5e 0009:Call ntdll.RtlAllocateHeap(00110000,00000000,0000001c) ret=7e7277be 0009:Ret ntdll.RtlAllocateHeap() retval=0013a3f8 ret=7e7277be 0009:Call KERNEL32.LoadLibraryW(0033f662 L"midimap.dll") ret=7e7277d6 0009:Call PE DLL (proc=0x7e1997d0,module=0x7e190000 L"midimap.dll",reason=WINE_PREATTACH,res=(nil)) 0009:Ret PE DLL (proc=0x7e1997d0,module=0x7e190000 L"midimap.dll",reason=WINE_PREATTACH,res=(nil)) retval=1 0009:Call PE DLL (proc=0x7e1997d0,module=0x7e190000 L"midimap.dll",reason=PROCESS_ATTACH,res=(nil)) 0009:Call KERNEL32.DisableThreadLibraryCalls(7e190000) ret=7e1998c0 0009:Ret KERNEL32.DisableThreadLibraryCalls() retval=00000001 ret=7e1998c0 0009:Ret PE DLL (proc=0x7e1997d0,module=0x7e190000 L"midimap.dll",reason=PROCESS_ATTACH,res=(nil)) retval=1 0009:Ret KERNEL32.LoadLibraryW() retval=7e190000 ret=7e7277d6 0009:Call KERNEL32.GetProcAddress(7e190000,7e73f633 "DriverProc") ret=7e727802 0009:Ret KERNEL32.GetProcAddress() retval=7e198628 ret=7e727802 0009:Call midimap.DriverProc(00000000,0013a3f8,00000001,00000000,00000000) ret=7e726b16 0009:Ret midimap.DriverProc() retval=00000001 ret=7e726b16 0009:Call midimap.DriverProc(00000000,0013a3f8,00000002,00000000,00000000) ret=7e726bd3 0009:Ret midimap.DriverProc() retval=00000001 ret=7e726bd3 0009:Call midimap.DriverProc(00000000,0013a3f8,00000003,00000000,00000000) ret=7e726c6d 0009:Call winmm.midiOutGetNumDevs() ret=7e198869 0009:Ret winmm.midiOutGetNumDevs() retval=00000001 ret=7e198869 0009:Call ntdll.RtlAllocateHeap(00110000,00000000,00000090) ret=7e198893 0009:Ret ntdll.RtlAllocateHeap() retval=001441c0 ret=7e198893 0009:Call winmm.midiOutGetDevCapsW(00000000,0033f4a8,00000054) ret=7e1988d6 0009:Call winealsa.drv.modMessage(00000000,00000002,00000000,0033f4a8,00000054) ret=7e728e1f 0009:Ret winealsa.drv.modMessage() retval=00000000 ret=7e728e1f 0009:Ret winmm.midiOutGetDevCapsW() retval=00000000 ret=7e1988d6 0009:Ret midimap.DriverProc() retval=00000001 ret=7e726c6d 0009:Call ntdll.RtlFreeHeap(00110000,00000000,0013a3d8) ret=7e727ce8 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e727ce8 0009:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7e727d0b 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e727d0b 0009:Call KERNEL32.GetProcAddress(7e190000,7e73ddf3 "auxMessage") ret=7e72a12f 0009:Ret KERNEL32.GetProcAddress() retval=00000000 ret=7e72a12f 0009:Call KERNEL32.GetProcAddress(7e190000,7e73de14 "mxdMessage") ret=7e72a16c 0009:Ret KERNEL32.GetProcAddress() retval=00000000 ret=7e72a16c 0009:Call KERNEL32.GetProcAddress(7e190000,7e73de1f "midMessage") ret=7e72a19f 0009:Ret KERNEL32.GetProcAddress() retval=00000000 ret=7e72a19f 0009:Call KERNEL32.GetProcAddress(7e190000,7e73de2a "modMessage") ret=7e72a1d2 0009:Ret KERNEL32.GetProcAddress() retval=7e198640 ret=7e72a1d2 0009:Call KERNEL32.GetProcAddress(7e190000,7e73de35 "widMessage") ret=7e72a205 0009:Ret KERNEL32.GetProcAddress() retval=00000000 ret=7e72a205 0009:Call KERNEL32.GetProcAddress(7e190000,7e73de40 "wodMessage") ret=7e72a238 0009:Ret KERNEL32.GetProcAddress() retval=00000000 ret=7e72a238 0009:Call ntdll.RtlAllocateHeap(00110000,00000000,0000000b) ret=7e72a29f 0009:Ret ntdll.RtlAllocateHeap() retval=0013a3d8 ret=7e72a29f 0009:Call midimap.modMessage(00000000,00000064,00000000,00000000,00000000) ret=7e7299fe 0009:Ret midimap.modMessage() retval=00000000 ret=7e7299fe 0009:Call midimap.modMessage(00000000,00000001,00000000,00000000,00000000) ret=7e729a37 0009:Ret midimap.modMessage() retval=00000001 ret=7e729a37 0009:Call ntdll.RtlReAllocateHeap(00110000,00000000,0013c660,00000038) ret=7e729bf1 0009:Ret ntdll.RtlReAllocateHeap() retval=0013c660 ret=7e729bf1 0009:Ret PE DLL (proc=0x7e73d5a0,module=0x7e710000 L"winmm.dll",reason=PROCESS_ATTACH,res=0x1) retval=1 0009:Starting process L"Z:\\media\\windowsroot\\WINDOWS\\system32\\spider.exe" (entryproc=0x1008fb2) 0009:Call KERNEL32.GetVersionExA(0033fdf8) ret=01008fd8 0009:Ret KERNEL32.GetVersionExA() retval=00000001 ret=01008fd8 0009:Call KERNEL32.HeapCreate(00000001,00001000,00000000) ret=0100a12d 0009:Ret KERNEL32.HeapCreate() retval=005c0000 ret=0100a12d 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,00000100) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c0130 ret=0100a7d2 0009:Call KERNEL32.GetStartupInfoA(0033fda8) ret=01009fa0 0009:Ret KERNEL32.GetStartupInfoA() retval=0033fda8 ret=01009fa0 0009:Call KERNEL32.GetStdHandle(fffffff6) ret=0100a0a2 0009:Ret KERNEL32.GetStdHandle() retval=00000004 ret=0100a0a2 0009:Call KERNEL32.GetFileType(00000004) ret=0100a0b0 0009:Ret KERNEL32.GetFileType() retval=00000002 ret=0100a0b0 0009:Call KERNEL32.GetStdHandle(fffffff5) ret=0100a0a2 0009:Ret KERNEL32.GetStdHandle() retval=00000008 ret=0100a0a2 0009:Call KERNEL32.GetFileType(00000008) ret=0100a0b0 0009:Ret KERNEL32.GetFileType() retval=00000001 ret=0100a0b0 0009:Call KERNEL32.GetStdHandle(fffffff4) ret=0100a0a2 0009:Ret KERNEL32.GetStdHandle() retval=0000000c ret=0100a0a2 0009:Call KERNEL32.GetFileType(0000000c) ret=0100a0b0 0009:Ret KERNEL32.GetFileType() retval=00000001 ret=0100a0b0 0009:Call KERNEL32.SetHandleCount(00000020) ret=0100a0e7 0009:Ret KERNEL32.SetHandleCount() retval=00000020 ret=0100a0e7 0009:Call KERNEL32.GetCommandLineA() ret=010090c3 0009:Ret KERNEL32.GetCommandLineA() retval=00115320 ret=010090c3 0009:Call KERNEL32.GetEnvironmentStringsW() ret=01009e35 0009:Ret KERNEL32.GetEnvironmentStringsW() retval=00230000 ret=01009e35 0009:Call KERNEL32.WideCharToMultiByte(00000000,00000000,00230000 L"PR_BLUE=%{\001b[1m\001b[34m%}",00000a02,00000000,00000000,00000000,00000000) ret=01009e9f 0009:Ret KERNEL32.WideCharToMultiByte() retval=00000a02 ret=01009e9f 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,00000a02) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c0238 ret=0100a7d2 0009:Call KERNEL32.WideCharToMultiByte(00000000,00000000,00230000 L"PR_BLUE=%{\001b[1m\001b[34m%}",00000a02,005c0238,00000a02,00000000,00000000) ret=01009ec2 0009:Ret KERNEL32.WideCharToMultiByte() retval=00000a02 ret=01009ec2 0009:Call KERNEL32.FreeEnvironmentStringsW(00230000) ret=01009edc 0009:Ret KERNEL32.FreeEnvironmentStringsW() retval=00000001 ret=01009edc 0009:Call KERNEL32.GetACP() ret=0100ba51 0009:Ret KERNEL32.GetACP() retval=000004e4 ret=0100ba51 0009:Call KERNEL32.GetCPInfo(000004e4,0033fdb4) ret=0100baa2 0009:Ret KERNEL32.GetCPInfo() retval=00000001 ret=0100baa2 0009:Call KERNEL32.GetCPInfo(000004e4,0033f884) ret=0100b892 0009:Ret KERNEL32.GetCPInfo() retval=00000001 ret=0100b892 0009:Call KERNEL32.GetStringTypeW(00000001,01002568 L"",00000001,0033f840) ret=0100eae8 0009:Ret KERNEL32.GetStringTypeW() retval=00000001 ret=0100eae8 0009:Call KERNEL32.MultiByteToWideChar(000004e4,00000001,0033fc98 " \x01\x02\x03\x04\x05\x06\x07\x08\t\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94"...,00000100,00000000,00000000) ret=0100eb5c 0009:Ret KERNEL32.MultiByteToWideChar() retval=00000100 ret=0100eb5c 0009:Call KERNEL32.MultiByteToWideChar(000004e4,00000001,0033fc98 " \x01\x02\x03\x04\x05\x06\x07\x08\t\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94"...,00000100,0033f624,00000100) ret=0100ebe2 0009:Ret KERNEL32.MultiByteToWideChar() retval=00000100 ret=0100ebe2 0009:Call KERNEL32.GetStringTypeW(00000001,0033f624 L" \0001\0002\0003\0004\0005\0006\0007\0008\t\n\000b\000c\r\000e\000f\0010\0011\0012\0013\0014\0015\0016\0017\0018\0019\001a\001b\001c\001d\001e\001f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\007f\20ac\0081\201a\0192\201e\2026\2020\2021\02c6\2030\0160"...,00000100,0033f898) ret=0100ebf4 0009:Ret KERNEL32.GetStringTypeW() retval=00000001 ret=0100ebf4 0009:Call KERNEL32.LCMapStringW(00000000,00000100,01002568 L"",00000001,00000000,00000000) ret=0100e71a 0009:Ret KERNEL32.LCMapStringW() retval=00000001 ret=0100e71a 0009:Call KERNEL32.MultiByteToWideChar(000004e4,00000001,0033fc98 " \x01\x02\x03\x04\x05\x06\x07\x08\t\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94"...,00000100,00000000,00000000) ret=0100e7b2 0009:Ret KERNEL32.MultiByteToWideChar() retval=00000100 ret=0100e7b2 0009:Call KERNEL32.MultiByteToWideChar(000004e4,00000001,0033fc98 " \x01\x02\x03\x04\x05\x06\x07\x08\t\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94"...,00000100,0033f5ec,00000100) ret=0100e836 0009:Ret KERNEL32.MultiByteToWideChar() retval=00000100 ret=0100e836 0009:Call KERNEL32.LCMapStringW(00000000,00000100,0033f5ec L" \0001\0002\0003\0004\0005\0006\0007\0008\t\n\000b\000c\r\000e\000f\0010\0011\0012\0013\0014\0015\0016\0017\0018\0019\001a\001b\001c\001d\001e\001f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\007f\20ac\0081\201a\0192\201e\2026\2020\2021\02c6\2030\0160"...,00000100,00000000,00000000) ret=0100e850 0009:Ret KERNEL32.LCMapStringW() retval=00000100 ret=0100e850 0009:Call KERNEL32.LCMapStringW(00000000,00000100,0033f5ec L" \0001\0002\0003\0004\0005\0006\0007\0008\t\n\000b\000c\r\000e\000f\0010\0011\0012\0013\0014\0015\0016\0017\0018\0019\001a\001b\001c\001d\001e\001f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\007f\20ac\0081\201a\0192\201e\2026\2020\2021\02c6\2030\0160"...,00000100,0033f3ec,00000100) ret=0100e900 0009:Ret KERNEL32.LCMapStringW() retval=00000100 ret=0100e900 0009:Call KERNEL32.WideCharToMultiByte(000004e4,00000000,0033f3ec L" \0001\0002\0003\0004\0005\0006\0007\0008\t\n\000b\000c\r\000e\000f\0010\0011\0012\0013\0014\0015\0016\0017\0018\0019\001a\001b\001c\001d\001e\001f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\007f\20ac\0081\201a\0192\201e\2026\2020\2021\02c6\2030\0161"...,00000100,0033fb98,00000100,00000000,00000000) ret=0100e923 0009:Ret KERNEL32.WideCharToMultiByte() retval=00000100 ret=0100e923 0009:Call KERNEL32.MultiByteToWideChar(000004e4,00000001,0033fc98 " \x01\x02\x03\x04\x05\x06\x07\x08\t\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94"...,00000100,00000000,00000000) ret=0100e7b2 0009:Ret KERNEL32.MultiByteToWideChar() retval=00000100 ret=0100e7b2 0009:Call KERNEL32.MultiByteToWideChar(000004e4,00000001,0033fc98 " \x01\x02\x03\x04\x05\x06\x07\x08\t\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94"...,00000100,0033f5cc,00000100) ret=0100e836 0009:Ret KERNEL32.MultiByteToWideChar() retval=00000100 ret=0100e836 0009:Call KERNEL32.LCMapStringW(00000000,00000200,0033f5cc L" \0001\0002\0003\0004\0005\0006\0007\0008\t\n\000b\000c\r\000e\000f\0010\0011\0012\0013\0014\0015\0016\0017\0018\0019\001a\001b\001c\001d\001e\001f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\007f\20ac\0081\201a\0192\201e\2026\2020\2021\02c6\2030\0160"...,00000100,00000000,00000000) ret=0100e850 0009:Ret KERNEL32.LCMapStringW() retval=00000100 ret=0100e850 0009:Call KERNEL32.LCMapStringW(00000000,00000200,0033f5cc L" \0001\0002\0003\0004\0005\0006\0007\0008\t\n\000b\000c\r\000e\000f\0010\0011\0012\0013\0014\0015\0016\0017\0018\0019\001a\001b\001c\001d\001e\001f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\007f\20ac\0081\201a\0192\201e\2026\2020\2021\02c6\2030\0160"...,00000100,0033f3cc,00000100) ret=0100e900 0009:Ret KERNEL32.LCMapStringW() retval=00000100 ret=0100e900 0009:Call KERNEL32.WideCharToMultiByte(000004e4,00000000,0033f3cc L" \0001\0002\0003\0004\0005\0006\0007\0008\t\n\000b\000c\r\000e\000f\0010\0011\0012\0013\0014\0015\0016\0017\0018\0019\001a\001b\001c\001d\001e\001f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\007f\20ac\0081\201a\0191\201e\2026\2020\2021\02c6\2030\0160"...,00000100,0033fa98,00000100,00000000,00000000) ret=0100e923 0009:Ret KERNEL32.WideCharToMultiByte() retval=00000100 ret=0100e923 0009:Call KERNEL32.GetModuleFileNameA(00000000,010130b8,00000104) ret=01009d9e 0009:Ret KERNEL32.GetModuleFileNameA() retval=00000030 ret=01009d9e 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,00000039) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c0c48 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,00000170) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c0c90 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,00000016) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c0e08 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,00000015) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c0e28 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,00000017) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c0e48 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,00000030) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c0e68 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,0000000b) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c0ea0 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,00000016) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c0eb8 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,00000018) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c0ed8 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,00000030) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c0ef8 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,00000017) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c0f30 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,00000012) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c0f50 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,0000003a) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c0f70 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,00000019) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c0fb8 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,00000008) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c0fe0 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,00000018) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c0ff8 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,00000012) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c1018 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,0000001b) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c1038 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,00000050) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c1060 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,00000018) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c10b8 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,00000018) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c10d8 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,0000000b) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c10f8 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,0000001c) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c1110 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,0000003a) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c1138 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,0000000b) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c1180 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,00000011) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c1198 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,00000017) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c11b8 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,00000062) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c11d8 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,0000001b) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c1248 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,0000000b) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c1270 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,00000020) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c1288 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,00000019) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c12b0 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,00000018) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c12d8 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,0000000e) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c12f8 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,00000029) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c1310 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,00000012) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c1348 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,00000019) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c1368 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,0000000b) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c1390 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,00000021) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c13a8 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,0000000d) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c13d8 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,0000001b) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c13f0 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,0000000c) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c1418 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,00000014) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c1430 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,00000033) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c1450 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,00000015) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c1490 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,00000026) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c14b0 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,0000000d) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c14e0 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,00000025) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c14f8 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,00000018) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c1528 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,0000000e) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c1548 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,00000011) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c1560 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,00000023) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c1580 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,00000026) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c15b0 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,00000017) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c15e0 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,0000001a) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c1600 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,0000000f) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c1628 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,00000013) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c1640 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,0000001b) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c1660 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,00000017) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c1688 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,00000008) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c16a8 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,00000037) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c16c0 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,00000037) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c1700 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,0000000e) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c1740 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,00000013) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c1758 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,00000024) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c1778 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,00000017) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c17a8 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,0000003c) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c17c8 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,0000000e) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c1810 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,0000001f) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c1828 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,00000011) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c1850 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,00000019) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c1870 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,0000000c) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c1898 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,00000013) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c18b0 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,00000033) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c18d0 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,00000047) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c1910 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,00000017) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c1960 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,0000000e) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c1980 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,0000001b) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c1998 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,00000045) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c19c0 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,00000013) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c1a10 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,00000018) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c1a30 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,0000001e) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c1a50 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,0000000f) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c1a78 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,00000016) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c1a90 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,0000001e) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c1ab0 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,00000024) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c1ad8 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,00000024) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c1b08 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,00000015) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c1b38 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,00000014) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c1b58 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,00000012) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c1b78 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,0000000f) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c1b98 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,00000026) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c1bb0 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,0000002e) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c1be0 ret=0100a7d2 0009:Call ntdll.RtlFreeHeap(005c0000,00000000,005c0238) ret=0100a34c 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=0100a34c 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,00000080) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c0238 ret=0100a7d2 0009:Call KERNEL32.GetSystemTimeAsFileTime(0033fdcc) ret=01008e1b 0009:Ret KERNEL32.GetSystemTimeAsFileTime() retval=01ca112b ret=01008e1b 0009:Call KERNEL32.GetCurrentProcessId() ret=01008e27 0009:Ret KERNEL32.GetCurrentProcessId() retval=00000008 ret=01008e27 0009:Call KERNEL32.GetCurrentThreadId() ret=01008e2f 0009:Ret KERNEL32.GetCurrentThreadId() retval=00000009 ret=01008e2f 0009:Call KERNEL32.GetTickCount() ret=01008e37 0009:Ret KERNEL32.GetTickCount() retval=00000700 ret=01008e37 0009:Call KERNEL32.QueryPerformanceCounter(0033fdc4) ret=01008e43 0009:Ret KERNEL32.QueryPerformanceCounter() retval=00000001 ret=01008e43 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,00000014) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c02c0 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,000004e0) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c02e0 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,00000078) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c07c8 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,00000004) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c0848 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,00000004) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c0860 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,00000004) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c0878 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,00000004) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c0890 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,00000004) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c08a8 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,00000004) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c08c0 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,00000004) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c08d8 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,00000004) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c08f0 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,00000004) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c0908 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,00000004) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c0920 ret=0100a7d2 0009:Call advapi32.RegOpenKeyExA(80000000,010025e0 "CLSID\\{ADB880A6-D8FF-11CF-9377-00AA003B7A11}\\InprocServer32",00000000,00020019,0033fc8c) ret=0100fd69 0009:Ret advapi32.RegOpenKeyExA() retval=00000002 ret=0100fd69 0009:Call KERNEL32.LoadLibraryA(010025d4 "hhctrl.ocx") ret=0100fe0c 0009:Call PE DLL (proc=0x7e045720,module=0x7dfa0000 L"oleaut32.dll",reason=WINE_PREATTACH,res=(nil)) 0009:Ret PE DLL (proc=0x7e045720,module=0x7dfa0000 L"oleaut32.dll",reason=WINE_PREATTACH,res=(nil)) retval=1 0009:Call PE DLL (proc=0x7e07d0b0,module=0x7e070000 L"hhctrl.ocx",reason=WINE_PREATTACH,res=(nil)) 0009:Ret PE DLL (proc=0x7e07d0b0,module=0x7e070000 L"hhctrl.ocx",reason=WINE_PREATTACH,res=(nil)) retval=1 0009:Call PE DLL (proc=0x7e045720,module=0x7dfa0000 L"oleaut32.dll",reason=PROCESS_ATTACH,res=(nil)) 0009:Call KERNEL32.DisableThreadLibraryCalls(7dfa0000) ret=7e0454df 0009:Ret KERNEL32.DisableThreadLibraryCalls() retval=00000001 ret=7e0454df 0009:Ret PE DLL (proc=0x7e045720,module=0x7dfa0000 L"oleaut32.dll",reason=PROCESS_ATTACH,res=(nil)) retval=1 0009:Call PE DLL (proc=0x7e07d0b0,module=0x7e070000 L"hhctrl.ocx",reason=PROCESS_ATTACH,res=(nil)) 0009:Call KERNEL32.DisableThreadLibraryCalls(7e070000) ret=7e07abce 0009:Ret KERNEL32.DisableThreadLibraryCalls() retval=00000001 ret=7e07abce 0009:Ret PE DLL (proc=0x7e07d0b0,module=0x7e070000 L"hhctrl.ocx",reason=PROCESS_ATTACH,res=(nil)) retval=1 0009:Ret KERNEL32.LoadLibraryA() retval=7e070000 ret=0100fe0c 0009:Call KERNEL32.GetProcAddress(7e070000,0000000f) ret=0100fe2a 0009:Ret KERNEL32.GetProcAddress() retval=7e074f74 ret=0100fe2a 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,0000001c,0101303c) ret=0100fe4b 0009:fixme:htmlhelp:HtmlHelpW HH case HH_INITIALIZE not handled. 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.LoadStringW(00000000,00000009,01011800,00000400) ret=0100361b 0009:Ret user32.LoadStringW() retval=00000019 ret=0100361b 0009:Call advapi32.RegOpenKeyExW(80000001,01011800 L"Software\\Microsoft\\Spider",00000000,00020019,0033fdbc) ret=01003d15 0009:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=01003d15 0009:Call user32.LoadStringW(00000000,0000000a,01011800,00000400) ret=0100361b 0009:Ret user32.LoadStringW() retval=00000008 ret=0100361b 0009:Call advapi32.RegQueryValueExW(00000060,01011800 L"WndState",00000000,00000000,0033fd74,0033fdb8) ret=01003d41 0009:Ret advapi32.RegQueryValueExW() retval=00000000 ret=01003d41 0009:Call user32.LoadStringW(00000000,0000000b,01011800,00000400) ret=0100361b 0009:Ret user32.LoadStringW() retval=00000004 ret=0100361b 0009:Call advapi32.RegQueryValueExW(00000060,01011800 L"WndX",00000000,00000000,0033fdac,0033fdb8) ret=01003d58 0009:Ret advapi32.RegQueryValueExW() retval=00000000 ret=01003d58 0009:Call user32.LoadStringW(00000000,0000000c,01011800,00000400) ret=0100361b 0009:Ret user32.LoadStringW() retval=00000004 ret=0100361b 0009:Call advapi32.RegQueryValueExW(00000060,01011800 L"WndY",00000000,00000000,0033fd6c,0033fdb8) ret=01003d6f 0009:Ret advapi32.RegQueryValueExW() retval=00000000 ret=01003d6f 0009:Call user32.LoadStringW(00000000,0000000d,01011800,00000400) ret=0100361b 0009:Ret user32.LoadStringW() retval=00000008 ret=0100361b 0009:Call advapi32.RegQueryValueExW(00000060,01011800 L"WndWidth",00000000,00000000,0033fda4,0033fdb8) ret=01003d86 0009:Ret advapi32.RegQueryValueExW() retval=00000000 ret=01003d86 0009:Call user32.LoadStringW(00000000,0000000e,01011800,00000400) ret=0100361b 0009:Ret user32.LoadStringW() retval=00000009 ret=0100361b 0009:Call advapi32.RegQueryValueExW(00000060,01011800 L"WndHeight",00000000,00000000,0033fd4c,0033fdb8) ret=01003d9d 0009:Ret advapi32.RegQueryValueExW() retval=00000000 ret=01003d9d 0009:Call user32.LoadStringW(00000000,00000015,01011800,00000400) ret=0100361b 0009:Ret user32.LoadStringW() retval=00000008 ret=0100361b 0009:Call advapi32.RegQueryValueExW(00000060,01011800 L"AnimDeal",00000000,00000000,0033fd9c,0033fdb8) ret=01003db4 0009:Ret advapi32.RegQueryValueExW() retval=00000000 ret=01003db4 0009:Call user32.LoadStringW(00000000,00000016,01011800,00000400) ret=0100361b 0009:Ret user32.LoadStringW() retval=0000000a ret=0100361b 0009:Call advapi32.RegQueryValueExW(00000060,01011800 L"SaveOnExit",00000000,00000000,0033fd64,0033fdb8) ret=01003dcb 0009:Ret advapi32.RegQueryValueExW() retval=00000000 ret=01003dcb 0009:Call user32.LoadStringW(00000000,00000017,01011800,00000400) ret=0100361b 0009:Ret user32.LoadStringW() retval=0000000b ret=0100361b 0009:Call advapi32.RegQueryValueExW(00000060,01011800 L"LoadAtStart",00000000,00000000,0033fd94,0033fdb8) ret=01003de2 0009:Ret advapi32.RegQueryValueExW() retval=00000000 ret=01003de2 0009:Call user32.LoadStringW(00000000,00000018,01011800,00000400) ret=0100361b 0009:Ret user32.LoadStringW() retval=0000000a ret=0100361b 0009:Call advapi32.RegQueryValueExW(00000060,01011800 L"PromptSave",00000000,00000000,0033fd40,0033fdb8) ret=01003df9 0009:Ret advapi32.RegQueryValueExW() retval=00000000 ret=01003df9 0009:Call user32.LoadStringW(00000000,00000019,01011800,00000400) ret=0100361b 0009:Ret user32.LoadStringW() retval=0000000a ret=0100361b 0009:Call advapi32.RegQueryValueExW(00000060,01011800 L"PromptLoad",00000000,00000000,0033fd8c,0033fdb8) ret=01003e10 0009:Ret advapi32.RegQueryValueExW() retval=00000000 ret=01003e10 0009:Call user32.LoadStringW(00000000,00000033,01011800,00000400) ret=0100361b 0009:Ret user32.LoadStringW() retval=00000005 ret=0100361b 0009:Call advapi32.RegQueryValueExW(00000060,01011800 L"Sound",00000000,00000000,0033fd5c,0033fdb8) ret=01003e27 0009:Ret advapi32.RegQueryValueExW() retval=00000000 ret=01003e27 0009:Call user32.LoadStringW(00000000,00000031,01011800,00000400) ret=0100361b 0009:Ret user32.LoadStringW() retval=00000008 ret=0100361b 0009:Call advapi32.RegQueryValueExW(00000060,01011800 L"NumSuits",00000000,00000000,0033fd50,0033fdb8) ret=01003e3e 0009:Ret advapi32.RegQueryValueExW() retval=00000000 ret=01003e3e 0009:Call advapi32.RegQueryValueExW(00000060,010015bc L"HighScore_Easy",00000000,00000000,0033fd84,0033fdb8) ret=01003e52 0009:Ret advapi32.RegQueryValueExW() retval=00000000 ret=01003e52 0009:Call advapi32.RegQueryValueExW(00000060,010015a8 L"Wins_Easy",00000000,00000000,0033fd44,0033fdb8) ret=01003e66 0009:Ret advapi32.RegQueryValueExW() retval=00000000 ret=01003e66 0009:Call advapi32.RegQueryValueExW(00000060,01001590 L"Losses_Easy",00000000,00000000,0033fd7c,0033fdb8) ret=01003e7a 0009:Ret advapi32.RegQueryValueExW() retval=00000000 ret=01003e7a 0009:Call advapi32.RegQueryValueExW(00000060,01001570 L"StreakWins_Easy",00000000,00000000,0033fd54,0033fdb8) ret=01003e8e 0009:Ret advapi32.RegQueryValueExW() retval=00000000 ret=01003e8e 0009:Call advapi32.RegQueryValueExW(00000060,0100154c L"StreakLosses_Easy",00000000,00000000,0033fdb4,0033fdb8) ret=01003ea2 0009:Ret advapi32.RegQueryValueExW() retval=00000000 ret=01003ea2 0009:Call advapi32.RegQueryValueExW(00000060,01001524 L"StreakCurrent_Easy",00000000,00000000,0033fd3c,0033fdb8) ret=01003eb9 0009:Ret advapi32.RegQueryValueExW() retval=00000000 ret=01003eb9 0009:Call advapi32.RegQueryValueExW(00000060,01001504 L"FWinStreak_Easy",00000000,00000000,0033fd48,0033fdb8) ret=01003ecd 0009:Ret advapi32.RegQueryValueExW() retval=00000000 ret=01003ecd 0009:Call advapi32.RegQueryValueExW(00000060,010014e0 L"HighScore_Medium",00000000,00000000,0033fdb0,0033fdb8) ret=01003ee1 0009:Ret advapi32.RegQueryValueExW() retval=00000000 ret=01003ee1 0009:Call advapi32.RegQueryValueExW(00000060,010014c8 L"Wins_Medium",00000000,00000000,0033fda8,0033fdb8) ret=01003ef5 0009:Ret advapi32.RegQueryValueExW() retval=00000000 ret=01003ef5 0009:Call advapi32.RegQueryValueExW(00000060,010014ac L"Losses_Medium",00000000,00000000,0033fda0,0033fdb8) ret=01003f09 0009:Ret advapi32.RegQueryValueExW() retval=00000000 ret=01003f09 0009:Call advapi32.RegQueryValueExW(00000060,01001488 L"StreakWins_Medium",00000000,00000000,0033fd98,0033fdb8) ret=01003f1d 0009:Ret advapi32.RegQueryValueExW() retval=00000000 ret=01003f1d 0009:Call advapi32.RegQueryValueExW(00000060,01001460 L"StreakLosses_Medium",00000000,00000000,0033fd90,0033fdb8) ret=01003f31 0009:Ret advapi32.RegQueryValueExW() retval=00000000 ret=01003f31 0009:Call advapi32.RegQueryValueExW(00000060,01001434 L"StreakCurrent_Medium",00000000,00000000,0033fd34,0033fdb8) ret=01003f48 0009:Ret advapi32.RegQueryValueExW() retval=00000000 ret=01003f48 0009:Call advapi32.RegQueryValueExW(00000060,01001410 L"FWinStreak_Medium",00000000,00000000,0033fd88,0033fdb8) ret=01003f5c 0009:Ret advapi32.RegQueryValueExW() retval=00000000 ret=01003f5c 0009:Call advapi32.RegQueryValueExW(00000060,010013e8 L"HighScore_Difficult",00000000,00000000,0033fd80,0033fdb8) ret=01003f70 0009:Ret advapi32.RegQueryValueExW() retval=00000000 ret=01003f70 0009:Call advapi32.RegQueryValueExW(00000060,010013c8 L"Wins_Difficult",00000000,00000000,0033fd78,0033fdb8) ret=01003f84 0009:Ret advapi32.RegQueryValueExW() retval=00000000 ret=01003f84 0009:Call advapi32.RegQueryValueExW(00000060,010013a4 L"Losses_Difficult",00000000,00000000,0033fd70,0033fdb8) ret=01003f98 0009:Ret advapi32.RegQueryValueExW() retval=00000000 ret=01003f98 0009:Call advapi32.RegQueryValueExW(00000060,01001378 L"StreakWins_Difficult",00000000,00000000,0033fd68,0033fdb8) ret=01003fac 0009:Ret advapi32.RegQueryValueExW() retval=00000000 ret=01003fac 0009:Call advapi32.RegQueryValueExW(00000060,01001348 L"StreakLosses_Difficult",00000000,00000000,0033fd60,0033fdb8) ret=01003fc0 0009:Ret advapi32.RegQueryValueExW() retval=00000000 ret=01003fc0 0009:Call advapi32.RegQueryValueExW(00000060,01001318 L"StreakCurrent_Difficult",00000000,00000000,0033fd38,0033fdb8) ret=01003fd7 0009:Ret advapi32.RegQueryValueExW() retval=00000000 ret=01003fd7 0009:Call advapi32.RegQueryValueExW(00000060,010012ec L"FWinStreak_Difficult",00000000,00000000,0033fd58,0033fdb8) ret=01003feb 0009:Ret advapi32.RegQueryValueExW() retval=00000000 ret=01003feb 0009:Call advapi32.RegCloseKey(00000060) ret=01003ff4 0009:Ret advapi32.RegCloseKey() retval=00000000 ret=01003ff4 0009:Call ntdll.RtlSizeHeap(005c0000,00000000,005c0238) ret=0100aa73 0009:Ret ntdll.RtlSizeHeap() retval=00000080 ret=0100aa73 0009:Call KERNEL32.GetStartupInfoA(0033fe98) ret=01009115 0009:Ret KERNEL32.GetStartupInfoA() retval=0033fe98 ret=01009115 0009:Call KERNEL32.GetVersionExA(0033faf0) ret=010070f6 0009:Ret KERNEL32.GetVersionExA() retval=00000001 ret=010070f6 0009:Call comctl32.InitCommonControlsEx(0033fac4) ret=0100716a 0009:Ret comctl32.InitCommonControlsEx() retval=00000001 ret=0100716a 0009:Call user32.LoadIconW(01000000,00000067) ret=0100719b 0009:Ret user32.LoadIconW() retval=00001116 ret=0100719b 0009:Call user32.LoadCursorW(00000000,00007f00) ret=010071ad 0009:Ret user32.LoadCursorW() retval=000010de ret=010071ad 0009:Call user32.LoadStringW(01000000,00000001,01011800,00000400) ret=0100361b 0009:Ret user32.LoadStringW() retval=00000006 ret=0100361b 0009:Call user32.RegisterClassW(0033fa9c) ret=010071dd 0009:Ret user32.RegisterClassW() retval=0000c030 ret=010071dd 0009:Call user32.LoadStringW(01000000,00000002,01011800,00000400) ret=0100361b 0009:Ret user32.LoadStringW() retval=00000006 ret=0100361b 0009:Call user32.LoadStringW(01000000,00000001,01011800,00000400) ret=0100361b 0009:Ret user32.LoadStringW() retval=00000006 ret=0100361b 0009:Call user32.CreateWindowExW(00000000,01011800 L"Spider",01011800 L"Spider",02cf0000,00000000,00000019,000003c0,00000219,00000000,00000000,01000000,00000000) ret=01007229 0019:trace:relay:load_list L"RelayExclude" = L"ntdll.RtlEnterCriticalSection;ntdll.RtlLeaveCriticalSection;kernel32.94;kernel32.95;kernel32.96;kernel32.97;kernel32.98" 0019:trace:relay:load_list L"RelayFromExclude" = L"winex11.drv;user32;gdi32;advapi32;kernel32" 0019:Call KERNEL32.__wine_kernel_init() ret=7ef9c638 0019:Call PE DLL (proc=0x7efd1850,module=0x7ef60000 L"ntdll.dll",reason=PROCESS_ATTACH,res=0x1) 0019:Ret PE DLL (proc=0x7efd1850,module=0x7ef60000 L"ntdll.dll",reason=PROCESS_ATTACH,res=0x1) retval=1 0019:Call PE DLL (proc=0x7ee72a90,module=0x7edf0000 L"KERNEL32.dll",reason=PROCESS_ATTACH,res=0x1) 0019:Ret PE DLL (proc=0x7ee72a90,module=0x7edf0000 L"KERNEL32.dll",reason=PROCESS_ATTACH,res=0x1) retval=1 0019:Call PE DLL (proc=0x7ebd24e0,module=0x7eba0000 L"advapi32.dll",reason=PROCESS_ATTACH,res=0x1) 0019:Ret PE DLL (proc=0x7ebd24e0,module=0x7eba0000 L"advapi32.dll",reason=PROCESS_ATTACH,res=0x1) retval=1 0019:Call PE DLL (proc=0x7ec36e70,module=0x7ebf0000 L"rpcrt4.dll",reason=PROCESS_ATTACH,res=0x1) 0019:Ret PE DLL (proc=0x7ec36e70,module=0x7ebf0000 L"rpcrt4.dll",reason=PROCESS_ATTACH,res=0x1) retval=1 0019:Call PE DLL (proc=0x7ea1e2a0,module=0x7e9c0000 L"gdi32.dll",reason=PROCESS_ATTACH,res=0x1) 0019:Ret PE DLL (proc=0x7ea1e2a0,module=0x7e9c0000 L"gdi32.dll",reason=PROCESS_ATTACH,res=0x1) retval=1 0019:Call PE DLL (proc=0x7eb17790,module=0x7ea60000 L"user32.dll",reason=PROCESS_ATTACH,res=0x1) 0019:Call PE DLL (proc=0x7e6b2a50,module=0x7e6a0000 L"imm32.dll",reason=PROCESS_ATTACH,res=(nil)) 0019:Call user32.RegisterWindowMessageA(7e6b36bb "MSIMEService") ret=7e6b0243 0019:Ret user32.RegisterWindowMessageA() retval=0000c000 ret=7e6b0243 0019:Call user32.RegisterWindowMessageA(7e6b36c8 "MSIMEReconvertOptions") ret=7e6b025a 0019:Ret user32.RegisterWindowMessageA() retval=0000c001 ret=7e6b025a 0019:Call user32.RegisterWindowMessageA(7e6b36de "MSIMEMouseOperation") ret=7e6b0271 0019:Ret user32.RegisterWindowMessageA() retval=0000c002 ret=7e6b0271 0019:Call user32.RegisterWindowMessageA(7e6b36f2 "MSIMEReconvertRequest") ret=7e6b0288 0019:Ret user32.RegisterWindowMessageA() retval=0000c003 ret=7e6b0288 0019:Call user32.RegisterWindowMessageA(7e6b3708 "MSIMEReconvert") ret=7e6b029f 0019:Ret user32.RegisterWindowMessageA() retval=0000c004 ret=7e6b029f 0019:Call user32.RegisterWindowMessageA(7e6b3717 "MSIMEQueryPosition") ret=7e6b02b6 0019:Ret user32.RegisterWindowMessageA() retval=0000c005 ret=7e6b02b6 0019:Call user32.RegisterWindowMessageA(7e6b372a "MSIMEDocumentFeed") ret=7e6b02cd 0019:Ret user32.RegisterWindowMessageA() retval=0000c006 ret=7e6b02cd 0019:Call KERNEL32.TlsAlloc() ret=7e6b02db 0019:Ret KERNEL32.TlsAlloc() retval=00000000 ret=7e6b02db 0019:Ret PE DLL (proc=0x7e6b2a50,module=0x7e6a0000 L"imm32.dll",reason=PROCESS_ATTACH,res=(nil)) retval=1 0019:Call PE DLL (proc=0x7e873f50,module=0x7e810000 L"winex11.drv",reason=PROCESS_ATTACH,res=(nil)) 0019:Ret PE DLL (proc=0x7e873f50,module=0x7e810000 L"winex11.drv",reason=PROCESS_ATTACH,res=(nil)) retval=1 0019:Ret PE DLL (proc=0x7eb17790,module=0x7ea60000 L"user32.dll",reason=PROCESS_ATTACH,res=0x1) retval=1 0019:Starting process L"C:\\windows\\system32\\explorer.exe" (entryproc=0x7ec61760) 0019:Call KERNEL32.GetCommandLineW() ret=7ec61809 0019:Ret KERNEL32.GetCommandLineW() retval=002205ec ret=7ec61809 0019:Call KERNEL32.GetStartupInfoW(0033fe98) ret=7ec6184f 0019:Ret KERNEL32.GetStartupInfoW() retval=0033fe98 ret=7ec6184f 0019:Call KERNEL32.GetModuleHandleW(00000000) ret=7ec6186e 0019:Ret KERNEL32.GetModuleHandleW() retval=7ec50000 ret=7ec6186e 0019:Call user32.GetThreadDesktop(00000019) ret=7ec5eca1 0019:Ret user32.GetThreadDesktop() retval=00000008 ret=7ec5eca1 0019:Call user32.GetUserObjectInformationW(00000008,00000002,7ec63b20,00000104,00000000) ret=7ec5ecd2 0019:Ret user32.GetUserObjectInformationW() retval=00000001 ret=7ec5ecd2 0019:Call advapi32.RegOpenKeyW(80000001,7ec61e60 L"Software\\Wine\\Explorer",0033f958) ret=7ec5ecfa 0019:Ret advapi32.RegOpenKeyW() retval=00000002 ret=7ec5ecfa 0019:Call advapi32.RegOpenKeyW(80000001,7ec61de0 L"Software\\Wine\\X11 Driver",0033f958) ret=7ec5ed34 0019:Ret advapi32.RegOpenKeyW() retval=00000002 ret=7ec5ed34 0019:Call user32.GetSystemMetrics(0000004f) ret=7ec5ea18 0019:Ret user32.GetSystemMetrics() retval=00000320 ret=7ec5ea18 0019:Call user32.GetSystemMetrics(0000004e) ret=7ec5ea2d 0019:Ret user32.GetSystemMetrics() retval=00000500 ret=7ec5ea2d 0019:Call user32.GetSystemMetrics(0000004d) ret=7ec5ea3e 0019:Ret user32.GetSystemMetrics() retval=00000000 ret=7ec5ea3e 0019:Call user32.GetSystemMetrics(0000004c) ret=7ec5ea4f 0019:Ret user32.GetSystemMetrics() retval=00000000 ret=7ec5ea4f 0019:Call user32.CreateWindowExW(00000000,00008001,00000000,96000000,00000000,00000000,00000500,00000320,00000000,00000000,00000000,00000000) ret=7ec5eaac 0019:Call window proc 0x7ea9df90 (hwnd=0x10020,msg=WM_NCCREATE,wp=00000000,lp=0033f6a8) 0019:Ret window proc 0x7ea9df90 (hwnd=0x10020,msg=WM_NCCREATE,wp=00000000,lp=0033f6a8) retval=00000001 0019:Call window proc 0x7ea9df90 (hwnd=0x10020,msg=WM_NCCALCSIZE,wp=00000000,lp=0033f654) 0019:Ret window proc 0x7ea9df90 (hwnd=0x10020,msg=WM_NCCALCSIZE,wp=00000000,lp=0033f654) retval=00000000 0019:Call window proc 0x7ea9df90 (hwnd=0x10020,msg=WM_CREATE,wp=00000000,lp=0033f6a8) 0019:Ret window proc 0x7ea9df90 (hwnd=0x10020,msg=WM_CREATE,wp=00000000,lp=0033f6a8) retval=00000000 0019:Call window proc 0x7ea9df90 (hwnd=0x10020,msg=WM_SIZE,wp=00000000,lp=03200500) 0019:Ret window proc 0x7ea9df90 (hwnd=0x10020,msg=WM_SIZE,wp=00000000,lp=03200500) retval=00000000 0019:Call window proc 0x7ea9df90 (hwnd=0x10020,msg=WM_MOVE,wp=00000000,lp=00000000) 0019:Ret window proc 0x7ea9df90 (hwnd=0x10020,msg=WM_MOVE,wp=00000000,lp=00000000) retval=00000000 0019:Call window proc 0x7ea9df90 (hwnd=0x10020,msg=WM_SHOWWINDOW,wp=00000001,lp=00000000) 0019:Ret window proc 0x7ea9df90 (hwnd=0x10020,msg=WM_SHOWWINDOW,wp=00000001,lp=00000000) retval=00000000 0019:Call window proc 0x7ea9df90 (hwnd=0x10020,msg=WM_WINDOWPOSCHANGING,wp=00000000,lp=0033f300) 0019:Ret window proc 0x7ea9df90 (hwnd=0x10020,msg=WM_WINDOWPOSCHANGING,wp=00000000,lp=0033f300) retval=00000000 0019:Call window proc 0x7ea9df90 (hwnd=0x10020,msg=WM_QUERYNEWPALETTE,wp=00000000,lp=00000000) 0019:Ret window proc 0x7ea9df90 (hwnd=0x10020,msg=WM_QUERYNEWPALETTE,wp=00000000,lp=00000000) retval=00000000 0019:Call window proc 0x7ea9df90 (hwnd=0x10020,msg=WM_NCACTIVATE,wp=00000001,lp=00000000) 0019:Ret window proc 0x7ea9df90 (hwnd=0x10020,msg=WM_NCACTIVATE,wp=00000001,lp=00000000) retval=00000000 0019:Call window proc 0x7ea9df90 (hwnd=0x10020,msg=WM_ACTIVATE,wp=00000001,lp=00000000) 0019:Ret window proc 0x7ea9df90 (hwnd=0x10020,msg=WM_ACTIVATE,wp=00000001,lp=00000000) retval=00000000 0019:Call window proc 0x7ea9df90 (hwnd=0x10020,msg=WM_SETFOCUS,wp=00000000,lp=00000000) 0019:Ret window proc 0x7ea9df90 (hwnd=0x10020,msg=WM_SETFOCUS,wp=00000000,lp=00000000) retval=00000000 0019:Call window proc 0x7ea9df90 (hwnd=0x10020,msg=WM_WINDOWPOSCHANGED,wp=00000000,lp=0033f300) 0019:Ret window proc 0x7ea9df90 (hwnd=0x10020,msg=WM_WINDOWPOSCHANGED,wp=00000000,lp=0033f300) retval=00000000 0019:Ret user32.CreateWindowExW() retval=00010020 ret=7ec5eaac 0019:Call user32.CreateWindowExW(00000000,7ec61e32 L"Message",00000000,86000000,00000000,00000000,00000064,00000064,00000000,00000000,00000000,00000000) ret=7ec5eb17 0019:Call window proc 0x7ead4050 (hwnd=0x10022,msg=WM_NCCREATE,wp=00000000,lp=0033f6a8) 0019:Ret window proc 0x7ead4050 (hwnd=0x10022,msg=WM_NCCREATE,wp=00000000,lp=0033f6a8) retval=00000001 0019:Call window proc 0x7ead4050 (hwnd=0x10022,msg=WM_NCCALCSIZE,wp=00000000,lp=0033f654) 0019:Ret window proc 0x7ead4050 (hwnd=0x10022,msg=WM_NCCALCSIZE,wp=00000000,lp=0033f654) retval=00000000 0019:Call window proc 0x7ead4050 (hwnd=0x10022,msg=WM_CREATE,wp=00000000,lp=0033f6a8) 0019:Ret window proc 0x7ead4050 (hwnd=0x10022,msg=WM_CREATE,wp=00000000,lp=0033f6a8) retval=00000000 0019:Call window proc 0x7ead4050 (hwnd=0x10022,msg=WM_SIZE,wp=00000000,lp=00640064) 0019:Ret window proc 0x7ead4050 (hwnd=0x10022,msg=WM_SIZE,wp=00000000,lp=00640064) retval=00000000 0019:Call window proc 0x7ead4050 (hwnd=0x10022,msg=WM_MOVE,wp=00000000,lp=00000000) 0019:Ret window proc 0x7ead4050 (hwnd=0x10022,msg=WM_MOVE,wp=00000000,lp=00000000) retval=00000000 0019:Ret user32.CreateWindowExW() retval=00010022 ret=7ec5eb17 0019:Call user32.GetDesktopWindow() ret=7ec5eb25 0019:Ret user32.GetDesktopWindow() retval=00010020 ret=7ec5eb25 0019:Call user32.SetWindowLongW(00010020,fffffffc,7ec5f470) ret=7ec5ef75 0019:Ret user32.SetWindowLongW() retval=7ea9df90 ret=7ec5ef75 0019:Call user32.LoadIconW(00000000,00007f05) ret=7ec5ef8c 0019:Ret user32.LoadIconW() retval=000010ee ret=7ec5ef8c 0019:Call user32.SendMessageW(00010020,00000080,00000001,000010ee) ret=7ec5efab 0019:Call window proc 0x7ec5f470 (hwnd=0x10020,msg=WM_SETICON,wp=00000001,lp=000010ee) 0019:Call user32.DefWindowProcW(00010020,00000080,00000001,000010ee) ret=7ec5f4ea 0019:Ret user32.DefWindowProcW() retval=00000000 ret=7ec5f4ea 0019:Ret window proc 0x7ec5f470 (hwnd=0x10020,msg=WM_SETICON,wp=00000001,lp=000010ee) retval=00000000 0019:Ret user32.SendMessageW() retval=00000000 ret=7ec5efab 0019:Call user32.SystemParametersInfoA(00000015,ffffffff,00000000,00000000) ret=7ec5f0e6 0019:Ret user32.SystemParametersInfoA() retval=00000001 ret=7ec5f0e6 0019:Call user32.SetDeskWallPaper(ffffffff) ret=7ec5f0f5 0019:Ret user32.SetDeskWallPaper() retval=00000001 ret=7ec5f0f5 0019:Call rpcrt4.UuidCreate(0033f968) ret=7ec5f100 0019:Call advapi32.SystemFunction036(0033f968,00000010) ret=7ec352f6 0019:Ret advapi32.SystemFunction036() retval=00000001 ret=7ec352f6 0019:Ret rpcrt4.UuidCreate() retval=00000000 ret=7ec5f100 0019:Call rpcrt4.UuidToStringA(0033f968,0033f958) ret=7ec5f118 0019:Call ntdll.RtlAllocateHeap(00110000,00000000,00000025) ret=7ec34f77 0019:Ret ntdll.RtlAllocateHeap() retval=00131128 ret=7ec34f77 0019:Ret rpcrt4.UuidToStringA() retval=00000000 ret=7ec5f118 0019:Call KERNEL32.GlobalAddAtomA(00131128 "282764ce-92b0-403f-a0a3-76041efa31c8") ret=7ec5f139 0019:Ret KERNEL32.GlobalAddAtomA() retval=0000c031 ret=7ec5f139 0019:Call user32.SetPropW(00010020,7ec61f60 L"__wine_display_device_guid",0000c031) ret=7ec5f155 0019:Ret user32.SetPropW() retval=00000001 ret=7ec5f155 0019:Call rpcrt4.RpcStringFreeA(0033f958) ret=7ec5f166 0019:Call ntdll.RtlFreeHeap(00110000,00000000,00131128) ret=7ec34ee9 0019:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec34ee9 0019:Ret rpcrt4.RpcStringFreeA() retval=00000000 ret=7ec5f166 0019:Call user32.EnumDisplaySettingsExW(00000000,ffffffff,0033f7e0,00000000) ret=7ec5f189 0019:Ret user32.EnumDisplaySettingsExW() retval=00000001 ret=7ec5f189 0019:Call user32.ChangeDisplaySettingsExW(00000000,0033f7e0,00000000,10000009,00000000) ret=7ec5f1c5 0019:Ret user32.ChangeDisplaySettingsExW() retval=00000000 ret=7ec5f1c5 0019:Call user32.RegisterClassExW(0033f73c) ret=7ec5df21 0019:Ret user32.RegisterClassExW() retval=0000c033 ret=7ec5df21 0019:Call user32.CreateWindowExW(00000000,7ec61c62 L"WineAppBar",7ec61c62 L"WineAppBar",00000000,00000000,00000000,00000000,00000000,fffffffd,00000000,00000000,00000000) ret=7ec5dfac 0019:Call window proc 0x7ec5e070 (hwnd=0x10024,msg=WM_GETMINMAXINFO,wp=00000000,lp=0033f2f4) 0019:Call user32.DefWindowProcW(00010024,00000024,00000000,0033f2f4) ret=7ec5e0af 0019:Ret user32.DefWindowProcW() retval=00000000 ret=7ec5e0af 0019:Ret window proc 0x7ec5e070 (hwnd=0x10024,msg=WM_GETMINMAXINFO,wp=00000000,lp=0033f2f4) retval=00000000 0019:Call window proc 0x7ec5e070 (hwnd=0x10024,msg=WM_NCCREATE,wp=00000000,lp=0033f628) 0019:Call user32.DefWindowProcW(00010024,00000081,00000000,0033f628) ret=7ec5e0af 0019:Ret user32.DefWindowProcW() retval=00000001 ret=7ec5e0af 0019:Ret window proc 0x7ec5e070 (hwnd=0x10024,msg=WM_NCCREATE,wp=00000000,lp=0033f628) retval=00000001 0019:Call window proc 0x7ec5e070 (hwnd=0x10024,msg=WM_NCCALCSIZE,wp=00000000,lp=0033f5d4) 0019:Call user32.DefWindowProcW(00010024,00000083,00000000,0033f5d4) ret=7ec5e0af 0019:Ret user32.DefWindowProcW() retval=00000000 ret=7ec5e0af 0019:Ret window proc 0x7ec5e070 (hwnd=0x10024,msg=WM_NCCALCSIZE,wp=00000000,lp=0033f5d4) retval=00000000 0019:Call window proc 0x7ec5e070 (hwnd=0x10024,msg=WM_CREATE,wp=00000000,lp=0033f628) 0019:Call user32.DefWindowProcW(00010024,00000001,00000000,0033f628) ret=7ec5e0af 0019:Ret user32.DefWindowProcW() retval=00000000 ret=7ec5e0af 0019:Ret window proc 0x7ec5e070 (hwnd=0x10024,msg=WM_CREATE,wp=00000000,lp=0033f628) retval=00000000 0019:Ret user32.CreateWindowExW() retval=00010024 ret=7ec5dfac 0019:Call KERNEL32.GetModuleHandleA(7ec61c9c "winex11.drv") ret=7ec5ff75 0019:Ret KERNEL32.GetModuleHandleA() retval=7e810000 ret=7ec5ff75 0019:Call KERNEL32.GetProcAddress(7e810000,7ec62014 "wine_notify_icon") ret=7ec5ff90 0019:Ret KERNEL32.GetProcAddress() retval=7e813d44 ret=7ec5ff90 0019:Call user32.GetSystemMetrics(00000031) ret=7ec5ffa7 0019:Ret user32.GetSystemMetrics() retval=00000010 ret=7ec5ffa7 0019:Call user32.GetSystemMetrics(00000032) ret=7ec5ffbf 0019:Ret user32.GetSystemMetrics() retval=00000010 ret=7ec5ffbf 0019:Call advapi32.RegOpenKeyW(80000001,7ec62260 L"Software\\Wine\\X11 Driver",0033f764) ret=7ec5ffe8 0019:Ret advapi32.RegOpenKeyW() retval=00000002 ret=7ec5ffe8 0019:Call user32.LoadIconW(00000000,00007f05) ret=7ec60044 0019:Ret user32.LoadIconW() retval=000010ee ret=7ec60044 0019:Call user32.LoadCursorW(00000000,00007f00) ret=7ec6005e 0019:Ret user32.LoadCursorW() retval=000010de ret=7ec6005e 0019:Call user32.RegisterClassExW(0033f718) ret=7ec60079 0019:Ret user32.RegisterClassExW() retval=0000c034 ret=7ec60079 0019:Call user32.AdjustWindowRect(0033f6b0,00c00000,00000000) ret=7ec5fe81 0019:Ret user32.AdjustWindowRect() retval=00000001 ret=7ec5fe81 0019:Call user32.CreateWindowExW(00000000,7ec62222 L"Shell_TrayWnd",7ec62200 L"Wine System Tray",00c00000,80000000,80000000,000000a6,0000002d,00000000,00000000,00000000,00000000) ret=7ec6013b 0019:Call window proc 0x7ec60b80 (hwnd=0x10026,msg=WM_GETMINMAXINFO,wp=00000000,lp=0033f2c4) 0019:Call user32.DefWindowProcW(00010026,00000024,00000000,0033f2c4) ret=7ec60d2b 0019:Ret user32.DefWindowProcW() retval=00000000 ret=7ec60d2b 0019:Ret window proc 0x7ec60b80 (hwnd=0x10026,msg=WM_GETMINMAXINFO,wp=00000000,lp=0033f2c4) retval=00000000 0019:Call window proc 0x7ec60b80 (hwnd=0x10026,msg=WM_NCCREATE,wp=00000000,lp=0033f5f8) 0019:Call user32.DefWindowProcW(00010026,00000081,00000000,0033f5f8) ret=7ec60d2b 0019:Ret user32.DefWindowProcW() retval=00000001 ret=7ec60d2b 0019:Ret window proc 0x7ec60b80 (hwnd=0x10026,msg=WM_NCCREATE,wp=00000000,lp=0033f5f8) retval=00000001 0019:Call window proc 0x7ec60b80 (hwnd=0x10026,msg=WM_NCCALCSIZE,wp=00000000,lp=0033f5a4) 0019:Call user32.DefWindowProcW(00010026,00000083,00000000,0033f5a4) ret=7ec60d2b 0019:Ret user32.DefWindowProcW() retval=00000000 ret=7ec60d2b 0019:Ret window proc 0x7ec60b80 (hwnd=0x10026,msg=WM_NCCALCSIZE,wp=00000000,lp=0033f5a4) retval=00000000 0019:Call window proc 0x7ec60b80 (hwnd=0x10026,msg=WM_CREATE,wp=00000000,lp=0033f5f8) 0019:Call user32.DefWindowProcW(00010026,00000001,00000000,0033f5f8) ret=7ec60d2b 0019:Ret user32.DefWindowProcW() retval=00000000 ret=7ec60d2b 0019:Ret window proc 0x7ec60b80 (hwnd=0x10026,msg=WM_CREATE,wp=00000000,lp=0033f5f8) retval=00000000 0019:Ret user32.CreateWindowExW() retval=00010026 ret=7ec6013b 0019:Call user32.SetTimer(00010026,00000001,000007d0,00000000) ret=7ec60180 0019:Ret user32.SetTimer() retval=00000001 ret=7ec60180 0019:Call KERNEL32.LoadLibraryA(7ec61ccd "shell32.dll") ret=7ec5f1e0 0019:Call PE DLL (proc=0x7e4aa350,module=0x7e470000 L"shlwapi.dll",reason=PROCESS_ATTACH,res=(nil)) 0019:Call KERNEL32.DisableThreadLibraryCalls(7e470000) ret=7e49e1e1 0019:Ret KERNEL32.DisableThreadLibraryCalls() retval=00000001 ret=7e49e1e1 0019:Call KERNEL32.TlsAlloc() ret=7e49e1f4 0019:Ret KERNEL32.TlsAlloc() retval=00000002 ret=7e49e1f4 0019:Ret PE DLL (proc=0x7e4aa350,module=0x7e470000 L"shlwapi.dll",reason=PROCESS_ATTACH,res=(nil)) retval=1 0019:Call PE DLL (proc=0x7e43ed20,module=0x7e3b0000 L"comctl32.dll",reason=PROCESS_ATTACH,res=(nil)) 0019:Call KERNEL32.DisableThreadLibraryCalls(7e3b0000) ret=7e3c2c80 0019:Ret KERNEL32.DisableThreadLibraryCalls() retval=00000001 ret=7e3c2c80 0019:Call KERNEL32.GlobalAddAtomW(7e441ca0 L"CC32SubclassInfo") ret=7e3c2c9c 0019:Ret KERNEL32.GlobalAddAtomW() retval=0000c015 ret=7e3c2c9c 0019:Call gdi32.CreateBitmap(00000008,00000008,00000001,00000001,7e441cc2) ret=7e3c2ce3 0019:Ret gdi32.CreateBitmap() retval=000001fc ret=7e3c2ce3 0019:Call gdi32.CreatePatternBrush(000001fc) ret=7e3c2cf4 0019:Ret gdi32.CreatePatternBrush() retval=00000204 ret=7e3c2cf4 0019:Call user32.GetSysColor(00000014) ret=7e3c0e3f 0019:Ret user32.GetSysColor() retval=00ffffff ret=7e3c0e3f 0019:Call user32.GetSysColor(00000010) ret=7e3c0e56 0019:Ret user32.GetSysColor() retval=00808080 ret=7e3c0e56 0019:Call user32.GetSysColor(00000012) ret=7e3c0e68 0019:Ret user32.GetSysColor() retval=00000000 ret=7e3c0e68 0019:Call user32.GetSysColor(0000000f) ret=7e3c0e7a 0019:Ret user32.GetSysColor() retval=00c8d0d4 ret=7e3c0e7a 0019:Call user32.GetSysColor(0000000d) ret=7e3c0e8c 0019:Ret user32.GetSysColor() retval=006a240a ret=7e3c0e8c 0019:Call user32.GetSysColor(0000000e) ret=7e3c0e9e 0019:Ret user32.GetSysColor() retval=00ffffff ret=7e3c0e9e 0019:Call user32.GetSysColor(0000001a) ret=7e3c0eb0 0019:Ret user32.GetSysColor() retval=00800000 ret=7e3c0eb0 0019:Call user32.GetSysColor(00000014) ret=7e3c0ec2 0019:Ret user32.GetSysColor() retval=00ffffff ret=7e3c0ec2 0019:Call user32.GetSysColor(00000010) ret=7e3c0ed4 0019:Ret user32.GetSysColor() retval=00808080 ret=7e3c0ed4 0019:Call user32.GetSysColor(00000015) ret=7e3c0ee6 0019:Ret user32.GetSysColor() retval=00404040 ret=7e3c0ee6 0019:Call user32.GetSysColor(0000000f) ret=7e3c0ef8 0019:Ret user32.GetSysColor() retval=00c8d0d4 ret=7e3c0ef8 0019:Call user32.GetSysColor(00000005) ret=7e3c0f0a 0019:Ret user32.GetSysColor() retval=00ffffff ret=7e3c0f0a 0019:Call user32.GetSysColor(00000008) ret=7e3c0f1c 0019:Ret user32.GetSysColor() retval=00000000 ret=7e3c0f1c 0019:Call user32.GetSysColor(00000011) ret=7e3c0f2e 0019:Ret user32.GetSysColor() retval=00808080 ret=7e3c0f2e 0019:Call user32.GetSysColor(00000002) ret=7e3c0f40 0019:Ret user32.GetSysColor() retval=006a240a ret=7e3c0f40 0019:Call user32.GetSysColor(00000018) ret=7e3c0f52 0019:Ret user32.GetSysColor() retval=00e1ffff ret=7e3c0f52 0019:Call user32.GetSysColor(00000017) ret=7e3c0f64 0019:Ret user32.GetSysColor() retval=00000000 ret=7e3c0f64 0019:Call user32.LoadCursorW(00000000,00007f00) ret=7e3b615b 0019:Ret user32.LoadCursorW() retval=000010de ret=7e3b615b 0019:Call user32.RegisterClassW(0033f178) ret=7e3b61c4 0019:Ret user32.RegisterClassW() retval=0000c016 ret=7e3b61c4 0019:Call user32.LoadCursorW(00000000,00007f00) ret=7e3b8c3b 0019:Ret user32.LoadCursorW() retval=000010de ret=7e3b8c3b 0019:Call user32.RegisterClassW(0033f178) ret=7e3b8ca4 0019:Ret user32.RegisterClassW() retval=0000c017 ret=7e3b8ca4 0019:Call user32.LoadCursorW(00000000,00007f00) ret=7e3c342b 0019:Ret user32.LoadCursorW() retval=000010de ret=7e3c342b 0019:Call user32.RegisterClassW(0033f170) ret=7e3c34b2 0019:Ret user32.RegisterClassW() retval=0000c018 ret=7e3c34b2 0019:Call user32.LoadCursorW(00000000,00007f00) ret=7e3c908b 0019:Ret user32.LoadCursorW() retval=000010de ret=7e3c908b 0019:Call user32.RegisterClassW(0033f174) ret=7e3c9100 0019:Ret user32.RegisterClassW() retval=0000c019 ret=7e3c9100 0019:Call user32.LoadCursorW(00000000,00007f00) ret=7e3c959b 0019:Ret user32.LoadCursorW() retval=000010de ret=7e3c959b 0019:Call user32.RegisterClassW(0033f17c) ret=7e3c95f7 0019:Ret user32.RegisterClassW() retval=0000c01a ret=7e3c95f7 0019:Call user32.RegisterClassW(0033f178) ret=7e3cdabc 0019:Ret user32.RegisterClassW() retval=0000c01b ret=7e3cdabc 0019:Call user32.LoadCursorW(00000000,00007f01) ret=7e3d48db 0019:Ret user32.LoadCursorW() retval=000010e6 ret=7e3d48db 0019:Call user32.RegisterClassW(0033f174) ret=7e3d4950 0019:Ret user32.RegisterClassW() retval=0000c01c ret=7e3d4950 0019:Call user32.LoadCursorW(00000000,00007f00) ret=7e3d646b 0019:Ret user32.LoadCursorW() retval=000010de ret=7e3d646b 0019:Call user32.RegisterClassW(0033f178) ret=7e3d64da 0019:Ret user32.RegisterClassW() retval=0000c01d ret=7e3d64da 0019:Call user32.LoadCursorW(00000000,00007f00) ret=7e3eebbb 0019:Ret user32.LoadCursorW() retval=000010de ret=7e3eebbb 0019:Call user32.RegisterClassW(0033f178) ret=7e3eec2a 0019:Ret user32.RegisterClassW() retval=0000c01e ret=7e3eec2a 0019:Call user32.LoadCursorW(00000000,00007f00) ret=7e3f422b 0019:Ret user32.LoadCursorW() retval=000010de ret=7e3f422b 0019:Call user32.RegisterClassW(0033f178) ret=7e3f429a 0019:Ret user32.RegisterClassW() retval=0000c01f ret=7e3f429a 0019:Call user32.LoadCursorW(00000000,00007f00) ret=7e3f459b 0019:Ret user32.LoadCursorW() retval=000010de ret=7e3f459b 0019:Call user32.RegisterClassW(0033f180) ret=7e3f45ec 0019:Ret user32.RegisterClassW() retval=0000c020 ret=7e3f45ec 0019:Call user32.LoadCursorW(00000000,00007f00) ret=7e3f764b 0019:Ret user32.LoadCursorW() retval=000010de ret=7e3f764b 0019:Call user32.RegisterClassW(0033f170) ret=7e3f76cb 0019:Ret user32.RegisterClassW() retval=0000c021 ret=7e3f76cb 0019:Call user32.RegisterClassW(0033f17c) ret=7e4007a0 0019:Ret user32.RegisterClassW() retval=0000c022 ret=7e4007a0 0019:Call user32.GetSystemMetrics(00000044) ret=7e4007af 0019:Ret user32.GetSystemMetrics() retval=00000004 ret=7e4007af 0019:Call user32.GetSystemMetrics(00000045) ret=7e4007c4 0019:Ret user32.GetSystemMetrics() retval=00000004 ret=7e4007c4 0019:Call user32.LoadCursorW(00000000,00007f00) ret=7e408b45 0019:Ret user32.LoadCursorW() retval=000010de ret=7e408b45 0019:Call user32.RegisterClassW(0033f16c) ret=7e408bd2 0019:Ret user32.RegisterClassW() retval=0000c023 ret=7e408bd2 0019:Call user32.LoadCursorW(00000000,00007f00) ret=7e40dbeb 0019:Ret user32.LoadCursorW() retval=000010de ret=7e40dbeb 0019:Call user32.RegisterClassW(0033f184) ret=7e40dc2f 0019:Ret user32.RegisterClassW() retval=0000c024 ret=7e40dc2f 0019:Call user32.LoadCursorW(00000000,00007f00) ret=7e41042b 0019:Ret user32.LoadCursorW() retval=000010de ret=7e41042b 0019:Call user32.RegisterClassW(0033f174) ret=7e4104a6 0019:Ret user32.RegisterClassW() retval=0000c025 ret=7e4104a6 0019:Call user32.LoadCursorW(00000000,00007f00) ret=7e419bdb 0019:Ret user32.LoadCursorW() retval=000010de ret=7e419bdb 0019:Call user32.RegisterClassW(0033f174) ret=7e419c56 0019:Ret user32.RegisterClassW() retval=0000c026 ret=7e419c56 0019:Call user32.LoadCursorW(00000000,00007f00) ret=7e428eb5 0019:Ret user32.LoadCursorW() retval=000010de ret=7e428eb5 0019:Call user32.RegisterClassW(0033f170) ret=7e428f36 0019:Ret user32.RegisterClassW() retval=0000c027 ret=7e428f36 0019:Call user32.LoadImageW(7e3b0000,00000016,00000001,00000000,00000000,00000000) ret=7e428f7b 0019:Ret user32.LoadImageW() retval=000010f6 ret=7e428f7b 0019:Call user32.LoadImageW(7e3b0000,00000019,00000001,00000000,00000000,00000000) ret=7e428fb6 0019:Ret user32.LoadImageW() retval=000010fe ret=7e428fb6 0019:Call user32.LoadImageW(7e3b0000,0000001c,00000001,00000000,00000000,00000000) ret=7e428ff1 0019:Ret user32.LoadImageW() retval=00001106 ret=7e428ff1 0019:Call user32.LoadCursorW(00000000,00007f00) ret=7e42e57b 0019:Ret user32.LoadCursorW() retval=000010de ret=7e42e57b 0019:Call user32.RegisterClassW(0033f170) ret=7e42e602 0019:Ret user32.RegisterClassW() retval=0000c028 ret=7e42e602 0019:Call user32.LoadCursorW(00000000,00007f00) ret=7e432848 0019:Ret user32.LoadCursorW() retval=000010de ret=7e432848 0019:Call user32.RegisterClassW(0033f178) ret=7e4328b7 0019:Ret user32.RegisterClassW() retval=0000c029 ret=7e4328b7 0019:Call user32.LoadCursorW(00000000,00007f00) ret=7e43c84b 0019:Ret user32.LoadCursorW() retval=000010de ret=7e43c84b 0019:Call user32.RegisterClassW(0033f174) ret=7e43c8c6 0019:Ret user32.RegisterClassW() retval=0000c02a ret=7e43c8c6 0019:Call KERNEL32.LoadLibraryA(7e4516e6 "uxtheme.dll") ret=7e43ece0 0019:Call PE DLL (proc=0x7e38e120,module=0x7e370000 L"uxtheme.dll",reason=PROCESS_ATTACH,res=(nil)) 0019:Call KERNEL32.DisableThreadLibraryCalls(7e370000) ret=7e386f76 0019:Ret KERNEL32.DisableThreadLibraryCalls() retval=00000001 ret=7e386f76 0019:Call KERNEL32.GlobalAddAtomW(7e39cc7c L"ux_theme") ret=7e38c33d 0019:Ret KERNEL32.GlobalAddAtomW() retval=0000c02b ret=7e38c33d 0019:Call KERNEL32.GlobalAddAtomW(7e39cc68 L"ux_subapp") ret=7e38c355 0019:Ret KERNEL32.GlobalAddAtomW() retval=0000c02c ret=7e38c355 0019:Call KERNEL32.GlobalAddAtomW(7e39cc50 L"ux_subidlst") ret=7e38c36d 0019:Ret KERNEL32.GlobalAddAtomW() retval=0000c02d ret=7e38c36d 0019:Call KERNEL32.GlobalAddAtomW(7e39cc32 L"ux_dialogtheme") ret=7e38c385 0019:Ret KERNEL32.GlobalAddAtomW() retval=0000c02e ret=7e38c385 0019:Call advapi32.RegOpenKeyW(80000001,7e39c9a0 L"Software\\Microsoft\\Windows\\CurrentVersion\\ThemeManager",0033eba4) ret=7e38c3ae 0019:Ret advapi32.RegOpenKeyW() retval=00000002 ret=7e38c3ae 0019:Ret PE DLL (proc=0x7e38e120,module=0x7e370000 L"uxtheme.dll",reason=PROCESS_ATTACH,res=(nil)) retval=1 0019:Ret KERNEL32.LoadLibraryA() retval=7e370000 ret=7e43ece0 0019:Call KERNEL32.GetProcAddress(7e370000,7e451812 "IsThemeActive") ret=7e43ecb5 0019:Ret KERNEL32.GetProcAddress() retval=7e37f8fc ret=7e43ecb5 0019:Call uxtheme.IsThemeActive() ret=7e419789 0019:Ret uxtheme.IsThemeActive() retval=00000000 ret=7e419789 0019:Ret PE DLL (proc=0x7e43ed20,module=0x7e3b0000 L"comctl32.dll",reason=PROCESS_ATTACH,res=(nil)) retval=1 0019:Call PE DLL (proc=0x7e5399a0,module=0x7e4d0000 L"shell32.dll",reason=PROCESS_ATTACH,res=(nil)) 0019:Call KERNEL32.DisableThreadLibraryCalls(7e4d0000) ret=7e4fb225 0019:Ret KERNEL32.DisableThreadLibraryCalls() retval=00000001 ret=7e4fb225 0019:Call KERNEL32.GetModuleFileNameW(7e4d0000,7e64b0e0,00000104) ret=7e4fb242 0019:Ret KERNEL32.GetModuleFileNameW() retval=0000001f ret=7e4fb242 0019:Call comctl32.InitCommonControlsEx(00000000) ret=7e4fb25a 0019:Ret comctl32.InitCommonControlsEx() retval=00000000 ret=7e4fb25a 0019:Call user32.GetSystemMetrics(00000031) ret=7e4f1bf6 0019:Ret user32.GetSystemMetrics() retval=00000010 ret=7e4f1bf6 0019:Call user32.GetSystemMetrics(00000032) ret=7e4f1c08 0019:Ret user32.GetSystemMetrics() retval=00000010 ret=7e4f1c08 0019:Call user32.GetSystemMetrics(0000000b) ret=7e4f1c19 0019:Ret user32.GetSystemMetrics() retval=00000020 ret=7e4f1c19 0019:Call user32.GetSystemMetrics(0000000c) ret=7e4f1c2b 0019:Ret user32.GetSystemMetrics() retval=00000020 ret=7e4f1c2b 0019:Call comctl32.328(00000010) ret=7e4f1c9c 0019:Call KERNEL32.LocalAlloc(00000040,00000014) ret=7e3bf409 0019:Ret KERNEL32.LocalAlloc() retval=00139958 ret=7e3bf409 0019:Call ntdll.RtlAllocateHeap(00110000,00000008,00000080) ret=7e3c6bf7 0019:Ret ntdll.RtlAllocateHeap() retval=00139978 ret=7e3c6bf7 0019:Ret comctl32.328() retval=00139958 ret=7e4f1c9c 0019:Call comctl32.ImageList_Create(00000010,00000010,00000021,00000000,00000020) ret=7e4f1cd4 0019:Call KERNEL32.LocalAlloc(00000040,00000084) ret=7e3bf409 0019:Ret KERNEL32.LocalAlloc() retval=00139e48 ret=7e3bf409 0019:Call gdi32.CreateCompatibleDC(00000000) ret=7e3d019c 0019:Ret gdi32.CreateCompatibleDC() retval=00000220 ret=7e3d019c 0019:Call gdi32.CreateCompatibleDC(00000000) ret=7e3d0375 0019:Ret gdi32.CreateCompatibleDC() retval=0000022c ret=7e3d0375 0019:Call KERNEL32.LocalAlloc(00000040,00000028) ret=7e3bf409 0019:Ret KERNEL32.LocalAlloc() retval=0013a468 ret=7e3bf409 0019:Call gdi32.CreateDIBSection(00000220,0013a468,00000000,0033f0f8,00000000,00000000) ret=7e3cf2c9 0019:Ret gdi32.CreateDIBSection() retval=00000238 ret=7e3cf2c9 0019:Call KERNEL32.LocalFree(0013a468) ret=7e3bf191 0019:Ret KERNEL32.LocalFree() retval=00000000 ret=7e3bf191 0019:Call gdi32.SelectObject(00000220,00000238) ret=7e3d0202 0019:Ret gdi32.SelectObject() retval=0000006c ret=7e3d0202 0019:Call gdi32.CreateBitmap(00000040,00000010,00000001,00000001,00000000) ret=7e3d03d6 0019:Ret gdi32.CreateBitmap() retval=0000023c ret=7e3d03d6 0019:Call gdi32.SelectObject(0000022c,0000023c) ret=7e3d03ef 0019:Ret gdi32.SelectObject() retval=0000006c ret=7e3d03ef 0019:Call gdi32.CreateBitmap(00000008,00000008,00000001,00000001,7e443aca) ret=7e3d024b 0019:Ret gdi32.CreateBitmap() retval=00000240 ret=7e3d024b 0019:Call gdi32.CreatePatternBrush(00000240) ret=7e3d0258 0019:Ret gdi32.CreatePatternBrush() retval=00000248 ret=7e3d0258 0019:Call gdi32.DeleteObject(00000240) ret=7e3d0266 0019:Ret gdi32.DeleteObject() retval=00000001 ret=7e3d0266 0019:Call gdi32.CreateBitmap(00000008,00000008,00000001,00000001,7e443aba) ret=7e3d0297 0019:Ret gdi32.CreateBitmap() retval=0000024c ret=7e3d0297 0019:Call gdi32.CreatePatternBrush(0000024c) ret=7e3d02a4 0019:Ret gdi32.CreatePatternBrush() retval=00000254 ret=7e3d02a4 0019:Call gdi32.DeleteObject(0000024c) ret=7e3d02b2 0019:Ret gdi32.DeleteObject() retval=00000001 ret=7e3d02b2 0019:Ret comctl32.ImageList_Create() retval=00139e48 ret=7e4f1cd4 0019:Call comctl32.ImageList_Create(00000020,00000020,00000021,00000000,00000020) ret=7e4f1d06 0019:Call KERNEL32.LocalAlloc(00000040,00000084) ret=7e3bf409 0019:Ret KERNEL32.LocalAlloc() retval=0013a820 ret=7e3bf409 0019:Call gdi32.CreateCompatibleDC(00000000) ret=7e3d019c 0019:Ret gdi32.CreateCompatibleDC() retval=00000258 ret=7e3d019c 0019:Call gdi32.CreateCompatibleDC(00000000) ret=7e3d0375 0019:Ret gdi32.CreateCompatibleDC() retval=00000264 ret=7e3d0375 0019:Call KERNEL32.LocalAlloc(00000040,00000028) ret=7e3bf409 0019:Ret KERNEL32.LocalAlloc() retval=0013ae38 ret=7e3bf409 0019:Call gdi32.CreateDIBSection(00000258,0013ae38,00000000,0033f0f8,00000000,00000000) ret=7e3cf2c9 0019:Ret gdi32.CreateDIBSection() retval=00000270 ret=7e3cf2c9 0019:Call KERNEL32.LocalFree(0013ae38) ret=7e3bf191 0019:Ret KERNEL32.LocalFree() retval=00000000 ret=7e3bf191 0019:Call gdi32.SelectObject(00000258,00000270) ret=7e3d0202 0019:Ret gdi32.SelectObject() retval=0000006c ret=7e3d0202 0019:Call gdi32.CreateBitmap(00000080,00000020,00000001,00000001,00000000) ret=7e3d03d6 0019:Ret gdi32.CreateBitmap() retval=00000274 ret=7e3d03d6 0019:Call gdi32.SelectObject(00000264,00000274) ret=7e3d03ef 0019:Ret gdi32.SelectObject() retval=0000006c ret=7e3d03ef 0019:Call gdi32.CreateBitmap(00000008,00000008,00000001,00000001,7e443aca) ret=7e3d024b 0019:Ret gdi32.CreateBitmap() retval=00000278 ret=7e3d024b 0019:Call gdi32.CreatePatternBrush(00000278) ret=7e3d0258 0019:Ret gdi32.CreatePatternBrush() retval=00000280 ret=7e3d0258 0019:Call gdi32.DeleteObject(00000278) ret=7e3d0266 0019:Ret gdi32.DeleteObject() retval=00000001 ret=7e3d0266 0019:Call gdi32.CreateBitmap(00000008,00000008,00000001,00000001,7e443aba) ret=7e3d0297 0019:Ret gdi32.CreateBitmap() retval=00000284 ret=7e3d0297 0019:Call gdi32.CreatePatternBrush(00000284) ret=7e3d02a4 0019:Ret gdi32.CreatePatternBrush() retval=0000028c ret=7e3d02a4 0019:Call gdi32.DeleteObject(00000284) ret=7e3d02b2 0019:Ret gdi32.DeleteObject() retval=00000001 ret=7e3d02b2 0019:Ret comctl32.ImageList_Create() retval=0013a820 ret=7e4f1d06 0019:Call comctl32.ImageList_SetBkColor(00139e48,ffffffff) ret=7e4f1d29 0019:Ret comctl32.ImageList_SetBkColor() retval=ffffffff ret=7e4f1d29 0019:Call comctl32.ImageList_SetBkColor(0013a820,ffffffff) ret=7e4f1d44 0019:Ret comctl32.ImageList_SetBkColor() retval=ffffffff ret=7e4f1d44 0019:Call user32.LoadImageA(7e4d0000,00000001,00000001,00000010,00000010,00008000) ret=7e4f1d7a 0019:Ret user32.LoadImageA() retval=0000110e ret=7e4f1d7a 0019:Call user32.LoadImageA(7e4d0000,00000001,00000001,00000020,00000020,00008000) ret=7e4f1dad 0019:Ret user32.LoadImageA() retval=00001116 ret=7e4f1dad 0019:Call KERNEL32.LoadLibraryA(7e55b8f0 "ole32.dll") ret=7e539960 0019:Call PE DLL (proc=0x7e34e580,module=0x7e290000 L"ole32.dll",reason=PROCESS_ATTACH,res=(nil)) 0019:Call user32.RegisterClassW(0033e9b4) ret=7e2ac83d 0019:Ret user32.RegisterClassW() retval=0000c02f ret=7e2ac83d 0019:Ret PE DLL (proc=0x7e34e580,module=0x7e290000 L"ole32.dll",reason=PROCESS_ATTACH,res=(nil)) retval=1 0019:Ret KERNEL32.LoadLibraryA() retval=7e290000 ret=7e539960 0019:Call KERNEL32.GetProcAddress(7e290000,7e55b963 "CoTaskMemAlloc") ret=7e539935 0019:Ret KERNEL32.GetProcAddress() retval=7e29ada8 ret=7e539935 0019:Call ole32.CoTaskMemAlloc(00000014) ret=7e5055b5 0019:Call ntdll.RtlAllocateHeap(00110000,00000000,00000014) ret=7e2c4e29 0019:Ret ntdll.RtlAllocateHeap() retval=0013b2d0 ret=7e2c4e29 0019:Ret ole32.CoTaskMemAlloc() retval=0013b2d0 ret=7e5055b5 0019:Call KERNEL32.GetFullPathNameW(7e64b0e0 L"C:\\windows\\system32\\shell32.dll",00000104,0033efc4,00000000) ret=7e4f0f1f 0019:Ret KERNEL32.GetFullPathNameW() retval=0000001f ret=7e4f0f1f 0019:Call ntdll.RtlAllocateHeap(00110000,00000000,00000040) ret=7e4f0f61 0019:Ret ntdll.RtlAllocateHeap() retval=0013b1d8 ret=7e4f0f61 0019:Call comctl32.334(00139958,00007fff,0013b2d0) ret=7e4f0fc1 0019:Ret comctl32.334() retval=00000000 ret=7e4f0fc1 0019:Call comctl32.ImageList_ReplaceIcon(00139e48,ffffffff,0000110e) ret=7e4f0fef 0019:Call user32.CopyImage(0000110e,00000001,00000010,00000010,00004000) ret=7e3d095f 0019:Ret user32.CopyImage() retval=0000111e ret=7e3d095f 0019:Call user32.GetIconInfo(0000111e,0033eed8) ret=7e3d098a 0019:Ret user32.GetIconInfo() retval=00000001 ret=7e3d098a 0019:Call gdi32.GetObjectW(000002ac,00000018,0033eec0) ret=7e3d09af 0019:Ret gdi32.GetObjectW() retval=00000018 ret=7e3d09af 0019:Call gdi32.CreateCompatibleDC(00000000) ret=7e3d09cf 0019:Ret gdi32.CreateCompatibleDC() retval=000002b0 ret=7e3d09cf 0019:Call gdi32.SetTextColor(00000220,00000000) ret=7e3d0a1e 0019:Ret gdi32.SetTextColor() retval=00000000 ret=7e3d0a1e 0019:Call gdi32.SetBkColor(00000220,00ffffff) ret=7e3d0a34 0019:Ret gdi32.SetBkColor() retval=00ffffff ret=7e3d0a34 0019:Call gdi32.SelectObject(000002b0,000002a8) ret=7e3d0a51 0019:Ret gdi32.SelectObject() retval=0000006c ret=7e3d0a51 0019:Call gdi32.StretchBlt(00000220,00000000,00000000,00000010,00000010,000002b0,00000000,00000000,00000010,00000010,00cc0020) ret=7e3d0aab 0019:Ret gdi32.StretchBlt() retval=00000001 ret=7e3d0aab 0019:Call gdi32.SelectObject(000002b0,000002ac) ret=7e3d0ac7 0019:Ret gdi32.SelectObject() retval=000002a8 ret=7e3d0ac7 0019:Call gdi32.StretchBlt(0000022c,00000000,00000000,00000010,00000010,000002b0,00000000,00000000,00000010,00000010,00cc0020) ret=7e3d0b1e 0019:Ret gdi32.StretchBlt() retval=00000001 ret=7e3d0b1e 0019:Call gdi32.SelectObject(000002b0,0000006c) ret=7e3d0b33 0019:Ret gdi32.SelectObject() retval=000002ac ret=7e3d0b33 0019:Call user32.DestroyIcon(0000111e) ret=7e3d0b41 0019:Ret user32.DestroyIcon() retval=00000001 ret=7e3d0b41 0019:Call gdi32.DeleteDC(000002b0) ret=7e3d0b56 0019:Ret gdi32.DeleteDC() retval=00000001 ret=7e3d0b56 0019:Call gdi32.DeleteObject(000002a8) ret=7e3d0b68 0019:Ret gdi32.DeleteObject() retval=00000001 ret=7e3d0b68 0019:Call gdi32.DeleteObject(000002ac) ret=7e3d0b7a 0019:Ret gdi32.DeleteObject() retval=00000001 ret=7e3d0b7a 0019:Ret comctl32.ImageList_ReplaceIcon() retval=00000000 ret=7e4f0fef 0019:Call comctl32.ImageList_ReplaceIcon(0013a820,ffffffff,00001116) ret=7e4f1013 0019:Call user32.CopyImage(00001116,00000001,00000020,00000020,00004000) ret=7e3d095f 0019:Ret user32.CopyImage() retval=0000111e ret=7e3d095f 0019:Call user32.GetIconInfo(0000111e,0033eed8) ret=7e3d098a 0019:Ret user32.GetIconInfo() retval=00000001 ret=7e3d098a 0019:Call gdi32.GetObjectW(000002c8,00000018,0033eec0) ret=7e3d09af 0019:Ret gdi32.GetObjectW() retval=00000018 ret=7e3d09af 0019:Call gdi32.CreateCompatibleDC(00000000) ret=7e3d09cf 0019:Ret gdi32.CreateCompatibleDC() retval=000002cc ret=7e3d09cf 0019:Call gdi32.SetTextColor(00000258,00000000) ret=7e3d0a1e 0019:Ret gdi32.SetTextColor() retval=00000000 ret=7e3d0a1e 0019:Call gdi32.SetBkColor(00000258,00ffffff) ret=7e3d0a34 0019:Ret gdi32.SetBkColor() retval=00ffffff ret=7e3d0a34 0019:Call gdi32.SelectObject(000002cc,000002c4) ret=7e3d0a51 0019:Ret gdi32.SelectObject() retval=0000006c ret=7e3d0a51 0019:Call gdi32.StretchBlt(00000258,00000000,00000000,00000020,00000020,000002cc,00000000,00000000,00000020,00000020,00cc0020) ret=7e3d0aab 0019:Ret gdi32.StretchBlt() retval=00000001 ret=7e3d0aab 0019:Call gdi32.SelectObject(000002cc,000002c8) ret=7e3d0ac7 0019:Ret gdi32.SelectObject() retval=000002c4 ret=7e3d0ac7 0019:Call gdi32.StretchBlt(00000264,00000000,00000000,00000020,00000020,000002cc,00000000,00000000,00000020,00000020,00cc0020) ret=7e3d0b1e 0019:Ret gdi32.StretchBlt() retval=00000001 ret=7e3d0b1e 0019:Call gdi32.SelectObject(000002cc,0000006c) ret=7e3d0b33 0019:Ret gdi32.SelectObject() retval=000002c8 ret=7e3d0b33 0019:Call user32.DestroyIcon(0000111e) ret=7e3d0b41 0019:Ret user32.DestroyIcon() retval=00000001 ret=7e3d0b41 0019:Call gdi32.DeleteDC(000002cc) ret=7e3d0b56 0019:Ret gdi32.DeleteDC() retval=00000001 ret=7e3d0b56 0019:Call gdi32.DeleteObject(000002c4) ret=7e3d0b68 0019:Ret gdi32.DeleteObject() retval=00000001 ret=7e3d0b68 0019:Call gdi32.DeleteObject(000002c8) ret=7e3d0b7a 0019:Ret gdi32.DeleteObject() retval=00000001 ret=7e3d0b7a 0019:Ret comctl32.ImageList_ReplaceIcon() retval=00000000 ret=7e4f1013 0019:Call ole32.CoTaskMemAlloc(00000014) ret=7e5055b5 0019:Call ntdll.RtlAllocateHeap(00110000,00000000,00000014) ret=7e2c4e29 0019:Ret ntdll.RtlAllocateHeap() retval=0013b220 ret=7e2c4e29 0019:Ret ole32.CoTaskMemAlloc() retval=0013b220 ret=7e5055b5 0019:Call KERNEL32.GetFullPathNameW(7e64b0e0 L"C:\\windows\\system32\\shell32.dll",00000104,0033efc4,00000000) ret=7e4f0f1f 0019:Ret KERNEL32.GetFullPathNameW() retval=0000001f ret=7e4f0f1f 0019:Call ntdll.RtlAllocateHeap(00110000,00000000,00000040) ret=7e4f0f61 0019:Ret ntdll.RtlAllocateHeap() retval=0013b240 ret=7e4f0f61 0019:Call comctl32.334(00139958,00007fff,0013b220) ret=7e4f0fc1 0019:Ret comctl32.334() retval=00000001 ret=7e4f0fc1 0019:Call comctl32.ImageList_ReplaceIcon(00139e48,ffffffff,0000110e) ret=7e4f0fef 0019:Call user32.CopyImage(0000110e,00000001,00000010,00000010,00004000) ret=7e3d095f 0019:Ret user32.CopyImage() retval=0000111e ret=7e3d095f 0019:Call user32.GetIconInfo(0000111e,0033eed8) ret=7e3d098a 0019:Ret user32.GetIconInfo() retval=00000001 ret=7e3d098a 0019:Call gdi32.GetObjectW(000002e4,00000018,0033eec0) ret=7e3d09af 0019:Ret gdi32.GetObjectW() retval=00000018 ret=7e3d09af 0019:Call gdi32.CreateCompatibleDC(00000000) ret=7e3cf3e7 0019:Ret gdi32.CreateCompatibleDC() retval=000002e8 ret=7e3cf3e7 0019:Call KERNEL32.LocalAlloc(00000040,00000028) ret=7e3bf409 0019:Ret KERNEL32.LocalAlloc() retval=0013c690 ret=7e3bf409 0019:Call gdi32.CreateDIBSection(000002e8,0013c690,00000000,0033ee08,00000000,00000000) ret=7e3cf2c9 0019:Ret gdi32.CreateDIBSection() retval=000002f4 ret=7e3cf2c9 0019:Call KERNEL32.LocalFree(0013c690) ret=7e3bf191 0019:Ret KERNEL32.LocalFree() retval=00000000 ret=7e3bf191 0019:Call gdi32.SelectObject(000002e8,000002f4) ret=7e3cf502 0019:Ret gdi32.SelectObject() retval=0000006c ret=7e3cf502 0019:Call gdi32.BitBlt(000002e8,00000000,00000000,00000040,00000090,00000220,00000000,00000000,00cc0020) ret=7e3cf54f 0019:Ret gdi32.BitBlt() retval=00000001 ret=7e3cf54f 0019:Call gdi32.SelectObject(000002e8,0000006c) ret=7e3cf561 0019:Ret gdi32.SelectObject() retval=000002f4 ret=7e3cf561 0019:Call gdi32.SelectObject(00000220,000002f4) ret=7e3cf422 0019:Ret gdi32.SelectObject() retval=00000238 ret=7e3cf422 0019:Call gdi32.DeleteObject(00000238) ret=7e3cf430 0019:Ret gdi32.DeleteObject() retval=00000001 ret=7e3cf430 0019:Call gdi32.CreateBitmap(00000040,00000090,00000001,00000001,00000000) ret=7e3cf4a2 0019:Ret gdi32.CreateBitmap() retval=000002f8 ret=7e3cf4a2 0019:Call gdi32.SelectObject(000002e8,000002f8) ret=7e3cf5c7 0019:Ret gdi32.SelectObject() retval=0000006c ret=7e3cf5c7 0019:Call gdi32.BitBlt(000002e8,00000000,00000000,00000040,00000090,0000022c,00000000,00000000,00cc0020) ret=7e3cf614 0019:Ret gdi32.BitBlt() retval=00000001 ret=7e3cf614 0019:Call gdi32.SelectObject(000002e8,0000006c) ret=7e3cf626 0019:Ret gdi32.SelectObject() retval=000002f8 ret=7e3cf626 0019:Call gdi32.SelectObject(0000022c,000002f8) ret=7e3cf4cd 0019:Ret gdi32.SelectObject() retval=0000023c ret=7e3cf4cd 0019:Call gdi32.DeleteObject(0000023c) ret=7e3cf4db 0019:Ret gdi32.DeleteObject() retval=00000001 ret=7e3cf4db 0019:Call gdi32.DeleteDC(000002e8) ret=7e3cf450 0019:Ret gdi32.DeleteDC() retval=00000001 ret=7e3cf450 0019:Call gdi32.CreateCompatibleDC(00000000) ret=7e3d09cf 0019:Ret gdi32.CreateCompatibleDC() retval=000002fc ret=7e3d09cf 0019:Call gdi32.SetTextColor(00000220,00000000) ret=7e3d0a1e 0019:Ret gdi32.SetTextColor() retval=00000000 ret=7e3d0a1e 0019:Call gdi32.SetBkColor(00000220,00ffffff) ret=7e3d0a34 0019:Ret gdi32.SetBkColor() retval=00ffffff ret=7e3d0a34 0019:Call gdi32.SelectObject(000002fc,000002e0) ret=7e3d0a51 0019:Ret gdi32.SelectObject() retval=0000006c ret=7e3d0a51 0019:Call gdi32.StretchBlt(00000220,00000010,00000000,00000010,00000010,000002fc,00000000,00000000,00000010,00000010,00cc0020) ret=7e3d0aab 0019:Ret gdi32.StretchBlt() retval=00000001 ret=7e3d0aab 0019:Call gdi32.SelectObject(000002fc,000002e4) ret=7e3d0ac7 0019:Ret gdi32.SelectObject() retval=000002e0 ret=7e3d0ac7 0019:Call gdi32.StretchBlt(0000022c,00000010,00000000,00000010,00000010,000002fc,00000000,00000000,00000010,00000010,00cc0020) ret=7e3d0b1e 0019:Ret gdi32.StretchBlt() retval=00000001 ret=7e3d0b1e 0019:Call gdi32.SelectObject(000002fc,0000006c) ret=7e3d0b33 0019:Ret gdi32.SelectObject() retval=000002e4 ret=7e3d0b33 0019:Call user32.DestroyIcon(0000111e) ret=7e3d0b41 0019:Ret user32.DestroyIcon() retval=00000001 ret=7e3d0b41 0019:Call gdi32.DeleteDC(000002fc) ret=7e3d0b56 0019:Ret gdi32.DeleteDC() retval=00000001 ret=7e3d0b56 0019:Call gdi32.DeleteObject(000002e0) ret=7e3d0b68 0019:Ret gdi32.DeleteObject() retval=00000001 ret=7e3d0b68 0019:Call gdi32.DeleteObject(000002e4) ret=7e3d0b7a 0019:Ret gdi32.DeleteObject() retval=00000001 ret=7e3d0b7a 0019:Ret comctl32.ImageList_ReplaceIcon() retval=00000001 ret=7e4f0fef 0019:Call comctl32.ImageList_ReplaceIcon(0013a820,ffffffff,00001116) ret=7e4f1013 0019:Call user32.CopyImage(00001116,00000001,00000020,00000020,00004000) ret=7e3d095f 0019:Ret user32.CopyImage() retval=0000111e ret=7e3d095f 0019:Call user32.GetIconInfo(0000111e,0033eed8) ret=7e3d098a 0019:Ret user32.GetIconInfo() retval=00000001 ret=7e3d098a 0019:Call gdi32.GetObjectW(00000314,00000018,0033eec0) ret=7e3d09af 0019:Ret gdi32.GetObjectW() retval=00000018 ret=7e3d09af 0019:Call gdi32.CreateCompatibleDC(00000000) ret=7e3cf3e7 0019:Ret gdi32.CreateCompatibleDC() retval=00000318 ret=7e3cf3e7 0019:Call KERNEL32.LocalAlloc(00000040,00000028) ret=7e3bf409 0019:Ret KERNEL32.LocalAlloc() retval=0013c1b0 ret=7e3bf409 0019:Call gdi32.CreateDIBSection(00000318,0013c1b0,00000000,0033ee08,00000000,00000000) ret=7e3cf2c9 0019:Ret gdi32.CreateDIBSection() retval=00000324 ret=7e3cf2c9 0019:Call KERNEL32.LocalFree(0013c1b0) ret=7e3bf191 0019:Ret KERNEL32.LocalFree() retval=00000000 ret=7e3bf191 0019:Call gdi32.SelectObject(00000318,00000324) ret=7e3cf502 0019:Ret gdi32.SelectObject() retval=0000006c ret=7e3cf502 0019:Call gdi32.BitBlt(00000318,00000000,00000000,00000080,00000120,00000258,00000000,00000000,00cc0020) ret=7e3cf54f 0019:Ret gdi32.BitBlt() retval=00000001 ret=7e3cf54f 0019:Call gdi32.SelectObject(00000318,0000006c) ret=7e3cf561 0019:Ret gdi32.SelectObject() retval=00000324 ret=7e3cf561 0019:Call gdi32.SelectObject(00000258,00000324) ret=7e3cf422 0019:Ret gdi32.SelectObject() retval=00000270 ret=7e3cf422 0019:Call gdi32.DeleteObject(00000270) ret=7e3cf430 0019:Ret gdi32.DeleteObject() retval=00000001 ret=7e3cf430 0019:Call gdi32.CreateBitmap(00000080,00000120,00000001,00000001,00000000) ret=7e3cf4a2 0019:Ret gdi32.CreateBitmap() retval=00000328 ret=7e3cf4a2 0019:Call gdi32.SelectObject(00000318,00000328) ret=7e3cf5c7 0019:Ret gdi32.SelectObject() retval=0000006c ret=7e3cf5c7 0019:Call gdi32.BitBlt(00000318,00000000,00000000,00000080,00000120,00000264,00000000,00000000,00cc0020) ret=7e3cf614 0019:Ret gdi32.BitBlt() retval=00000001 ret=7e3cf614 0019:Call gdi32.SelectObject(00000318,0000006c) ret=7e3cf626 0019:Ret gdi32.SelectObject() retval=00000328 ret=7e3cf626 0019:Call gdi32.SelectObject(00000264,00000328) ret=7e3cf4cd 0019:Ret gdi32.SelectObject() retval=00000274 ret=7e3cf4cd 0019:Call gdi32.DeleteObject(00000274) ret=7e3cf4db 0019:Ret gdi32.DeleteObject() retval=00000001 ret=7e3cf4db 0019:Call gdi32.DeleteDC(00000318) ret=7e3cf450 0019:Ret gdi32.DeleteDC() retval=00000001 ret=7e3cf450 0019:Call gdi32.CreateCompatibleDC(00000000) ret=7e3d09cf 0019:Ret gdi32.CreateCompatibleDC() retval=0000032c ret=7e3d09cf 0019:Call gdi32.SetTextColor(00000258,00000000) ret=7e3d0a1e 0019:Ret gdi32.SetTextColor() retval=00000000 ret=7e3d0a1e 0019:Call gdi32.SetBkColor(00000258,00ffffff) ret=7e3d0a34 0019:Ret gdi32.SetBkColor() retval=00ffffff ret=7e3d0a34 0019:Call gdi32.SelectObject(0000032c,00000310) ret=7e3d0a51 0019:Ret gdi32.SelectObject() retval=0000006c ret=7e3d0a51 0019:Call gdi32.StretchBlt(00000258,00000020,00000000,00000020,00000020,0000032c,00000000,00000000,00000020,00000020,00cc0020) ret=7e3d0aab 0019:Ret gdi32.StretchBlt() retval=00000001 ret=7e3d0aab 0019:Call gdi32.SelectObject(0000032c,00000314) ret=7e3d0ac7 0019:Ret gdi32.SelectObject() retval=00000310 ret=7e3d0ac7 0019:Call gdi32.StretchBlt(00000264,00000020,00000000,00000020,00000020,0000032c,00000000,00000000,00000020,00000020,00cc0020) ret=7e3d0b1e 0019:Ret gdi32.StretchBlt() retval=00000001 ret=7e3d0b1e 0019:Call gdi32.SelectObject(0000032c,0000006c) ret=7e3d0b33 0019:Ret gdi32.SelectObject() retval=00000314 ret=7e3d0b33 0019:Call user32.DestroyIcon(0000111e) ret=7e3d0b41 0019:Ret user32.DestroyIcon() retval=00000001 ret=7e3d0b41 0019:Call gdi32.DeleteDC(0000032c) ret=7e3d0b56 0019:Ret gdi32.DeleteDC() retval=00000001 ret=7e3d0b56 0019:Call gdi32.DeleteObject(00000310) ret=7e3d0b68 0019:Ret gdi32.DeleteObject() retval=00000001 ret=7e3d0b68 0019:Call gdi32.DeleteObject(00000314) ret=7e3d0b7a 0019:Ret gdi32.DeleteObject() retval=00000001 ret=7e3d0b7a 0019:Ret comctl32.ImageList_ReplaceIcon() retval=00000001 ret=7e4f1013 0019:Ret PE DLL (proc=0x7e5399a0,module=0x7e4d0000 L"shell32.dll",reason=PROCESS_ATTACH,res=(nil)) retval=1 0019:Ret KERNEL32.LoadLibraryA() retval=7e4d0000 ret=7ec5f1e0 0019:Call KERNEL32.GetProcAddress(7e4d0000,000000bc) ret=7ec5f1fb 0019:Ret KERNEL32.GetProcAddress() retval=7e4dd0f4 ret=7ec5f1fb 0019:Call shell32.188(00000001) ret=7ec5f20f 0019:Call user32.DdeInitializeW(7e64b064,7e4ec1f0,00014000,00000000) ret=7e4ebf91 0019:Call window proc 0x7ea98130 (hwnd=0x10028,msg=WM_NCCREATE,wp=00000000,lp=0033f578) 0019:Ret window proc 0x7ea98130 (hwnd=0x10028,msg=WM_NCCREATE,wp=00000000,lp=0033f578) retval=00000001 0019:Call window proc 0x7ea98130 (hwnd=0x10028,msg=WM_NCCALCSIZE,wp=00000000,lp=0033f524) 0019:Ret window proc 0x7ea98130 (hwnd=0x10028,msg=WM_NCCALCSIZE,wp=00000000,lp=0033f524) retval=00000000 0019:Call window proc 0x7ea98130 (hwnd=0x10028,msg=WM_CREATE,wp=00000000,lp=0033f578) 0019:Ret window proc 0x7ea98130 (hwnd=0x10028,msg=WM_CREATE,wp=00000000,lp=0033f578) retval=00000000 0019:Call window proc 0x7ea98130 (hwnd=0x10028,msg=WM_SIZE,wp=00000000,lp=00000000) 0019:Ret window proc 0x7ea98130 (hwnd=0x10028,msg=WM_SIZE,wp=00000000,lp=00000000) retval=00000000 0019:Call window proc 0x7ea98130 (hwnd=0x10028,msg=WM_MOVE,wp=00000000,lp=00000000) 0019:Ret window proc 0x7ea98130 (hwnd=0x10028,msg=WM_MOVE,wp=00000000,lp=00000000) retval=00000000 0019:Ret user32.DdeInitializeW() retval=00000000 ret=7e4ebf91 0019:Call user32.DdeCreateStringHandleW(00000001,7e53eb1e L"Progman",000004b0) ret=7e4ebfae 0019:Ret user32.DdeCreateStringHandleW() retval=0000c000 ret=7e4ebfae 0019:Call user32.DdeCreateStringHandleW(00000001,7e53eb1e L"Progman",000004b0) ret=7e4ebfd1 0019:Ret user32.DdeCreateStringHandleW() retval=0000c000 ret=7e4ebfd1 0019:Call user32.DdeCreateStringHandleW(00000001,7e53eb1a L"*",000004b0) ret=7e4ebffa 0019:Ret user32.DdeCreateStringHandleW() retval=0000c001 ret=7e4ebffa 0019:Call user32.DdeCreateStringHandleW(00000001,7e53eb0e L"Shell",000004b0) ret=7e4ec023 0019:Ret user32.DdeCreateStringHandleW() retval=0000c002 ret=7e4ec023 0019:Call user32.DdeCreateStringHandleW(00000001,7e53eaf2 L"AppProperties",000004b0) ret=7e4ec04c 0019:Ret user32.DdeCreateStringHandleW() retval=0000c003 ret=7e4ec04c 0019:Call user32.DdeCreateStringHandleW(00000001,7e53eae2 L"Folders",000004b0) ret=7e4ec075 0019:Ret user32.DdeCreateStringHandleW() retval=0000c004 ret=7e4ec075 0019:Call user32.DdeNameService(00000001,0000c004,00000000,00000001) ret=7e4ec0a0 0019:Call window proc 0x7ea99670 (hwnd=0x1002a,msg=WM_NCCREATE,wp=00000000,lp=0033f598) 0019:Ret window proc 0x7ea99670 (hwnd=0x1002a,msg=WM_NCCREATE,wp=00000000,lp=0033f598) retval=00000001 0019:Call window proc 0x7ea99670 (hwnd=0x1002a,msg=WM_NCCALCSIZE,wp=00000000,lp=0033f544) 0019:Ret window proc 0x7ea99670 (hwnd=0x1002a,msg=WM_NCCALCSIZE,wp=00000000,lp=0033f544) retval=00000000 0019:Call window proc 0x7ea99670 (hwnd=0x1002a,msg=WM_CREATE,wp=00000000,lp=0033f598) 0019:Ret window proc 0x7ea99670 (hwnd=0x1002a,msg=WM_CREATE,wp=00000000,lp=0033f598) retval=00000000 0019:Call window proc 0x7ea99670 (hwnd=0x1002a,msg=WM_SIZE,wp=00000000,lp=00000000) 0019:Ret window proc 0x7ea99670 (hwnd=0x1002a,msg=WM_SIZE,wp=00000000,lp=00000000) retval=00000000 0019:Call window proc 0x7ea99670 (hwnd=0x1002a,msg=WM_MOVE,wp=00000000,lp=00000000) 0019:Ret window proc 0x7ea99670 (hwnd=0x1002a,msg=WM_MOVE,wp=00000000,lp=00000000) retval=00000000 0019:Ret user32.DdeNameService() retval=00000001 ret=7e4ec0a0 0019:Call user32.DdeNameService(00000001,0000c000,00000000,00000001) ret=7e4ec0cb 0019:Call window proc 0x7ea99670 (hwnd=0x1002c,msg=WM_NCCREATE,wp=00000000,lp=0033f598) 0019:Ret window proc 0x7ea99670 (hwnd=0x1002c,msg=WM_NCCREATE,wp=00000000,lp=0033f598) retval=00000001 0019:Call window proc 0x7ea99670 (hwnd=0x1002c,msg=WM_NCCALCSIZE,wp=00000000,lp=0033f544) 0019:Ret window proc 0x7ea99670 (hwnd=0x1002c,msg=WM_NCCALCSIZE,wp=00000000,lp=0033f544) retval=00000000 0019:Call window proc 0x7ea99670 (hwnd=0x1002c,msg=WM_CREATE,wp=00000000,lp=0033f598) 0019:Ret window proc 0x7ea99670 (hwnd=0x1002c,msg=WM_CREATE,wp=00000000,lp=0033f598) retval=00000000 0019:Call window proc 0x7ea99670 (hwnd=0x1002c,msg=WM_SIZE,wp=00000000,lp=00000000) 0019:Ret window proc 0x7ea99670 (hwnd=0x1002c,msg=WM_SIZE,wp=00000000,lp=00000000) retval=00000000 0019:Call window proc 0x7ea99670 (hwnd=0x1002c,msg=WM_MOVE,wp=00000000,lp=00000000) 0019:Ret window proc 0x7ea99670 (hwnd=0x1002c,msg=WM_MOVE,wp=00000000,lp=00000000) retval=00000000 0019:Ret user32.DdeNameService() retval=00000001 ret=7e4ec0cb 0019:Call user32.DdeNameService(00000001,0000c002,00000000,00000001) ret=7e4ec0f6 0019:Call window proc 0x7ea99670 (hwnd=0x1002e,msg=WM_NCCREATE,wp=00000000,lp=0033f598) 0019:Ret window proc 0x7ea99670 (hwnd=0x1002e,msg=WM_NCCREATE,wp=00000000,lp=0033f598) retval=00000001 0019:Call window proc 0x7ea99670 (hwnd=0x1002e,msg=WM_NCCALCSIZE,wp=00000000,lp=0033f544) 0019:Ret window proc 0x7ea99670 (hwnd=0x1002e,msg=WM_NCCALCSIZE,wp=00000000,lp=0033f544) retval=00000000 0019:Call window proc 0x7ea99670 (hwnd=0x1002e,msg=WM_CREATE,wp=00000000,lp=0033f598) 0019:Ret window proc 0x7ea99670 (hwnd=0x1002e,msg=WM_CREATE,wp=00000000,lp=0033f598) retval=00000000 0019:Call window proc 0x7ea99670 (hwnd=0x1002e,msg=WM_SIZE,wp=00000000,lp=00000000) 0019:Ret window proc 0x7ea99670 (hwnd=0x1002e,msg=WM_SIZE,wp=00000000,lp=00000000) retval=00000000 0019:Call window proc 0x7ea99670 (hwnd=0x1002e,msg=WM_MOVE,wp=00000000,lp=00000000) 0019:Ret window proc 0x7ea99670 (hwnd=0x1002e,msg=WM_MOVE,wp=00000000,lp=00000000) retval=00000000 0019:Ret user32.DdeNameService() retval=00000001 ret=7e4ec0f6 0019:Ret shell32.188() retval=00000001 ret=7ec5f20f 0019:Call user32.GetAncestor(00010022,00000001) ret=7ec5eb50 0019:Ret user32.GetAncestor() retval=00000000 ret=7ec5eb50 0019:Call user32.GetMessageW(0033f93c,00000000,00000000,00000000) ret=7ec5ec4b 0019:Ret user32.GetMessageW() retval=00000001 ret=7ec5ec4b 0019:Call user32.DispatchMessageW(0033f93c) ret=7ec5ec28 0019:Call window proc 0x7ea98130 (hwnd=0x10028,msg=WM_USER+512,wp=0000c036,lp=0000c037) 0019:Ret window proc 0x7ea98130 (hwnd=0x10028,msg=WM_USER+512,wp=0000c036,lp=0000c037) retval=00000000 0019:Ret user32.DispatchMessageW() retval=00000000 ret=7ec5ec28 0019:Call user32.GetMessageW(0033f93c,00000000,00000000,00000000) ret=7ec5ec4b 0019:Ret user32.GetMessageW() retval=00000001 ret=7ec5ec4b 0019:Call user32.DispatchMessageW(0033f93c) ret=7ec5ec28 0019:Call window proc 0x7ea98130 (hwnd=0x10028,msg=WM_USER+512,wp=0000c039,lp=0000c03a) 0019:Ret window proc 0x7ea98130 (hwnd=0x10028,msg=WM_USER+512,wp=0000c039,lp=0000c03a) retval=00000000 0019:Ret user32.DispatchMessageW() retval=00000000 ret=7ec5ec28 0019:Call user32.GetMessageW(0033f93c,00000000,00000000,00000000) ret=7ec5ec4b 0019:Ret user32.GetMessageW() retval=00000001 ret=7ec5ec4b 0019:Call user32.DispatchMessageW(0033f93c) ret=7ec5ec28 0019:Call window proc 0x7ea98130 (hwnd=0x10028,msg=WM_USER+512,wp=0000c03b,lp=0000c03c) 0019:Ret window proc 0x7ea98130 (hwnd=0x10028,msg=WM_USER+512,wp=0000c03b,lp=0000c03c) retval=00000000 0019:Ret user32.DispatchMessageW() retval=00000000 ret=7ec5ec28 0019:Call user32.GetMessageW(0033f93c,00000000,00000000,00000000) ret=7ec5ec4b 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_GETMINMAXINFO,wp=00000000,lp=0033f654) 0009:Call user32.GetSystemMetrics(00000020) ret=01006fae 0009:Ret user32.GetSystemMetrics() retval=00000004 ret=01006fae 0009:Call user32.GetSystemMetrics(00000021) ret=01006fb4 0009:Ret user32.GetSystemMetrics() retval=00000004 ret=01006fb4 0009:Call user32.GetSystemMetrics(0000000f) ret=01006fbb 0009:Ret user32.GetSystemMetrics() retval=00000013 ret=01006fbb 0009:Call user32.GetSystemMetrics(00000004) ret=01006fc2 0009:Ret user32.GetSystemMetrics() retval=00000013 ret=01006fc2 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_GETMINMAXINFO,wp=00000000,lp=0033f654) retval=00000000 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCCREATE,wp=00000000,lp=0033f988) 0009:Call user32.DefWindowProcW(00010030,00000081,00000000,0033f988) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCCREATE,wp=00000000,lp=0033f988) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCCALCSIZE,wp=00000000,lp=0033f934) 0009:Call user32.DefWindowProcW(00010030,00000083,00000000,0033f934) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000300 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCCALCSIZE,wp=00000000,lp=0033f934) retval=00000300 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_CREATE,wp=00000000,lp=0033f988) 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,0000398c) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c1c18 ret=0100a7d2 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_CREATE,wp=00000000,lp=0033f988) retval=00000000 0009:Ret user32.CreateWindowExW() retval=00010030 ret=01007229 0009:Call shell32.SHGetSpecialFolderPathW(00010030,0033f864,00000005,00000001) ret=010044f9 0009:Call advapi32.RegCreateKeyW(80000001,7e93e420 L"Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Shell Folders",0033f24c) ret=7e906ac3 0009:Ret advapi32.RegCreateKeyW() retval=00000000 ret=7e906ac3 0009:Call advapi32.RegCreateKeyW(80000001,7e93e380 L"Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders",0033f250) ret=7e906ae7 0009:Ret advapi32.RegCreateKeyW() retval=00000000 ret=7e906ae7 0009:Call advapi32.RegQueryValueExW(00000068,7e93e2ec L"Personal",00000000,0033f258,0033f350,0033f254) ret=7e906b24 0009:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7e906b24 0009:Call advapi32.RegCreateKeyExW(80000002,7e93e680 L"Software\\Microsoft\\Windows NT\\CurrentVersion\\ProfileList",00000000,00000000,00000000,000f003f,00000000,0033ebd8,0033ebd4) ret=7e906514 0009:Ret advapi32.RegCreateKeyExW() retval=00000000 ret=7e906514 0009:Call KERNEL32.GetSystemDirectoryW(0033e5bc,00000104) ret=7e906551 0009:Ret KERNEL32.GetSystemDirectoryW() retval=00000013 ret=7e906551 0009:Call advapi32.RegQueryValueExW(00000070,7e93e560 L"ProfilesDirectory",00000000,0033e558,0033e7c4,0033e554) ret=7e90611f 0009:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7e90611f 0009:Call advapi32.GetUserNameW(0033e5bc,0033ebd4) ret=7e90676c 0009:Ret advapi32.GetUserNameW() retval=00000001 ret=7e90676c 0009:Call shlwapi.PathAppendW(0033ec34 L"C:\\windows\\profiles",0033e5bc L"david") ret=7e90677b 0009:Ret shlwapi.PathAppendW() retval=00000001 ret=7e90677b 0009:Call shlwapi.PathAppendW(0033ec34 L"C:\\windows\\profiles\\david",0033e9e6 L"\\My Documents") ret=7e9067a8 0009:Ret shlwapi.PathAppendW() retval=00000001 ret=7e9067a8 0009:Call advapi32.RegCloseKey(00000070) ret=7e9063d1 0009:Ret advapi32.RegCloseKey() retval=00000000 ret=7e9063d1 0009:Call advapi32.RegSetValueExW(00000064,7e93e2ec L"Personal",00000000,00000001,0033f350,0000004e) ret=7e906bdd 0009:Ret advapi32.RegSetValueExW() retval=00000000 ret=7e906bdd 0009:Call advapi32.RegCloseKey(00000064) ret=7e906b3b 0009:Ret advapi32.RegCloseKey() retval=00000000 ret=7e906b3b 0009:Call advapi32.RegCloseKey(00000068) ret=7e906b49 0009:Ret advapi32.RegCloseKey() retval=00000000 ret=7e906b49 0009:Call shlwapi.PathFileExistsW(0033f558 L"C:\\windows\\profiles\\david\\My Documents") ret=7e907a0f 0009:Call KERNEL32.SetErrorMode(00000001) ret=7e88c4a8 0009:Ret KERNEL32.SetErrorMode() retval=00000000 ret=7e88c4a8 0009:Call KERNEL32.GetFileAttributesW(0033f558 L"C:\\windows\\profiles\\david\\My Documents") ret=7e88c4b5 0009:Ret KERNEL32.GetFileAttributesW() retval=00000010 ret=7e88c4b5 0009:Call KERNEL32.SetErrorMode(00000000) ret=7e88c4c2 0009:Ret KERNEL32.SetErrorMode() retval=00000001 ret=7e88c4c2 0009:Ret shlwapi.PathFileExistsW() retval=00000001 ret=7e907a0f 0009:Ret shell32.SHGetSpecialFolderPathW() retval=00000001 ret=010044f9 0009:Call KERNEL32.lstrcatW(0033f864 L"C:\\windows\\profiles\\david\\My Documents",010015dc L"\\") ret=0100450d 0009:Ret KERNEL32.lstrcatW() retval=0033f864 ret=0100450d 0009:Call user32.LoadStringW(01000000,00000014,01011800,00000400) ret=0100361b 0009:Ret user32.LoadStringW() retval=0000000a ret=0100361b 0009:Call KERNEL32.lstrcatW(0033f864 L"C:\\windows\\profiles\\david\\My Documents\\",01011800 L"spider.sav") ret=0100451e 0009:Ret KERNEL32.lstrcatW() retval=0033f864 ret=0100451e 0009:Call KERNEL32.CreateFileW(0033f864 L"C:\\windows\\profiles\\david\\My Documents\\spider.sav",80000000,00000000,00000000,00000003,08000000,00000000) ret=0100453b 0009:Ret KERNEL32.CreateFileW() retval=ffffffff ret=0100453b 0009:Call user32.GetMenu(00010030) ret=01004f63 0009:Ret user32.GetMenu() retval=000000f0 ret=01004f63 0009:Call user32.EnableMenuItem(000000f0,00009c4c,00000001) ret=01004f97 0009:Ret user32.EnableMenuItem() retval=00000000 ret=01004f97 0009:Call user32.ShowWindow(00010030,00000003) ret=01007259 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_GETMINMAXINFO,wp=00000000,lp=0033f884) 0009:Call user32.GetSystemMetrics(00000020) ret=01006fae 0009:Ret user32.GetSystemMetrics() retval=00000004 ret=01006fae 0009:Call user32.GetSystemMetrics(00000021) ret=01006fb4 0009:Ret user32.GetSystemMetrics() retval=00000004 ret=01006fb4 0009:Call user32.GetSystemMetrics(0000000f) ret=01006fbb 0009:Ret user32.GetSystemMetrics() retval=00000013 ret=01006fbb 0009:Call user32.GetSystemMetrics(00000004) ret=01006fc2 0009:Ret user32.GetSystemMetrics() retval=00000013 ret=01006fc2 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_GETMINMAXINFO,wp=00000000,lp=0033f884) retval=00000000 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_WINDOWPOSCHANGING,wp=00000000,lp=0033f950) 0009:Call user32.DefWindowProcW(00010030,00000046,00000000,0033f950) ret=01006e3b 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_GETMINMAXINFO,wp=00000000,lp=0033f3b4) 0009:Call user32.GetSystemMetrics(00000020) ret=01006fae 0009:Ret user32.GetSystemMetrics() retval=00000004 ret=01006fae 0009:Call user32.GetSystemMetrics(00000021) ret=01006fb4 0009:Ret user32.GetSystemMetrics() retval=00000004 ret=01006fb4 0009:Call user32.GetSystemMetrics(0000000f) ret=01006fbb 0009:Ret user32.GetSystemMetrics() retval=00000013 ret=01006fbb 0009:Call user32.GetSystemMetrics(00000004) ret=01006fc2 0009:Ret user32.GetSystemMetrics() retval=00000013 ret=01006fc2 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_GETMINMAXINFO,wp=00000000,lp=0033f3b4) retval=00000000 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_WINDOWPOSCHANGING,wp=00000000,lp=0033f950) retval=00000000 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCCALCSIZE,wp=00000001,lp=0033f86c) 0009:Call user32.DefWindowProcW(00010030,00000083,00000001,0033f86c) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000300 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCCALCSIZE,wp=00000001,lp=0033f86c) retval=00000300 0009:Call KERNEL32.TlsGetValue(00000000) ret=7e3f02b5 0009:Ret KERNEL32.TlsGetValue() retval=00000000 ret=7e3f02b5 0009:Call ntdll.RtlAllocateHeap(00110000,00000008,00000008) ret=7e3f02f1 0009:Ret ntdll.RtlAllocateHeap() retval=00147218 ret=7e3f02f1 0009:Call KERNEL32.TlsSetValue(00000000,00147218) ret=7e3f0308 0009:Ret KERNEL32.TlsSetValue() retval=00000001 ret=7e3f0308 0009:Call KERNEL32.TlsGetValue(00000000) ret=7e3f02b5 0009:Ret KERNEL32.TlsGetValue() retval=00147218 ret=7e3f02b5 0009:Call ntdll.RtlAllocateHeap(00110000,00000008,00000150) ret=7e3f3695 0009:Ret ntdll.RtlAllocateHeap() retval=00147230 ret=7e3f3695 0009:Call user32.GetKeyboardLayout(00000000) ret=7e3f36a6 0009:Ret user32.GetKeyboardLayout() retval=08090809 ret=7e3f36a6 0009:Call ntdll.RtlAllocateHeap(00110000,00000008,00000094) ret=7e3f153a 0009:Ret ntdll.RtlAllocateHeap() retval=00147388 ret=7e3f153a 0009:Call advapi32.RegOpenKeyW(80000002,0033f034 L"System\\CurrentControlSet\\Control\\Keyboard Layouts\\08090809",0033f0b8) ret=7e3f1373 0009:Ret advapi32.RegOpenKeyW() retval=00000002 ret=7e3f1373 0009:Call advapi32.RegOpenKeyA(80000001,7e3f742e "Software\\Wine\\Drivers",0033f340) ret=7e3f1691 0009:Ret advapi32.RegOpenKeyA() retval=00000000 ret=7e3f1691 0009:Call advapi32.RegQueryValueExA(00000064,7e3f7444 "Ime",00000000,0033f33c,0033f344,0033f338) ret=7e3f1aaf 0009:Ret advapi32.RegQueryValueExA() retval=00000002 ret=7e3f1aaf 0009:Call advapi32.RegCloseKey(00000064) ret=7e3f1ac0 0009:Ret advapi32.RegCloseKey() retval=00000000 ret=7e3f1ac0 0009:Call KERNEL32.LoadLibraryA(0033f448 "winex11.drv") ret=7e3f1719 0009:Ret KERNEL32.LoadLibraryA() retval=7e550000 ret=7e3f1719 0009:Call KERNEL32.GetProcAddress(7e550000,7e3f7453 "ImeInquire") ret=7e3f158a 0009:Ret KERNEL32.GetProcAddress() retval=7e557e64 ret=7e3f158a 0009:Call winex11.drv.ImeInquire(00147398,001473b4 L"",00000000) ret=7e3f15bd 0009:Ret winex11.drv.ImeInquire() retval=00000001 ret=7e3f15bd 0009:Call KERNEL32.GetProcAddress(7e550000,7e3f745e "ImeDestroy") ret=7e3f174a 0009:Ret KERNEL32.GetProcAddress() retval=7e557e94 ret=7e3f174a 0009:Call KERNEL32.GetProcAddress(7e550000,7e3f7469 "ImeSelect") ret=7e3f176d 0009:Ret KERNEL32.GetProcAddress() retval=7e557ec4 ret=7e3f176d 0009:Call KERNEL32.GetProcAddress(7e550000,7e3f7473 "ImeConfigure") ret=7e3f179b 0009:Ret KERNEL32.GetProcAddress() retval=7e557e7c ret=7e3f179b 0009:Call KERNEL32.GetProcAddress(7e550000,7e3f7480 "ImeEscape") ret=7e3f17be 0009:Ret KERNEL32.GetProcAddress() retval=7e557eac ret=7e3f17be 0009:Call KERNEL32.GetProcAddress(7e550000,7e3f748a "ImeSetActiveContext") ret=7e3f17e1 0009:Ret KERNEL32.GetProcAddress() retval=7e557edc ret=7e3f17e1 0009:Call KERNEL32.GetProcAddress(7e550000,7e3f749e "ImeToAsciiEx") ret=7e3f1804 0009:Ret KERNEL32.GetProcAddress() retval=7e557ef4 ret=7e3f1804 0009:Call KERNEL32.GetProcAddress(7e550000,7e3f74ab "NotifyIME") ret=7e3f1827 0009:Ret KERNEL32.GetProcAddress() retval=7e557f0c ret=7e3f1827 0009:Call KERNEL32.GetProcAddress(7e550000,7e3f74b5 "ImeRegisterWord") ret=7e3f184a 0009:Ret KERNEL32.GetProcAddress() retval=7e557f24 ret=7e3f184a 0009:Call KERNEL32.GetProcAddress(7e550000,7e3f74c5 "ImeUnregisterWord") ret=7e3f186d 0009:Ret KERNEL32.GetProcAddress() retval=7e557f3c ret=7e3f186d 0009:Call KERNEL32.GetProcAddress(7e550000,7e3f74d7 "ImeEnumRegisterWord") ret=7e3f1890 0009:Ret KERNEL32.GetProcAddress() retval=7e557f54 ret=7e3f1890 0009:Call KERNEL32.GetProcAddress(7e550000,7e3f74eb "ImeSetCompositionString") ret=7e3f18b3 0009:Ret KERNEL32.GetProcAddress() retval=7e557f6c ret=7e3f18b3 0009:Call KERNEL32.GetProcAddress(7e550000,7e3f7503 "ImeConversionList") ret=7e3f18d9 0009:Ret KERNEL32.GetProcAddress() retval=7e557f84 ret=7e3f18d9 0009:Call KERNEL32.GetProcAddress(7e550000,7e3f7515 "ImeProcessKey") ret=7e3f18ff 0009:Ret KERNEL32.GetProcAddress() retval=7e557f9c ret=7e3f18ff 0009:Call KERNEL32.GetProcAddress(7e550000,7e3f7523 "ImeGetRegisterWordStyle") ret=7e3f1925 0009:Ret KERNEL32.GetProcAddress() retval=7e557fb4 ret=7e3f1925 0009:Call KERNEL32.GetProcAddress(7e550000,7e3f753b "ImeGetImeMenuItems") ret=7e3f194b 0009:Ret KERNEL32.GetProcAddress() retval=7e557fcc ret=7e3f194b 0009:Call ntdll.RtlAllocateHeap(00110000,00000008,0000006c) ret=7e3f346a 0009:Ret ntdll.RtlAllocateHeap() retval=00147690 ret=7e3f346a 0009:Call ntdll.RtlAllocateHeap(00110000,00000008,00000008) ret=7e3f346a 0009:Ret ntdll.RtlAllocateHeap() retval=00147708 ret=7e3f346a 0009:Call ntdll.RtlAllocateHeap(00110000,00000008,00000098) ret=7e3f346a 0009:Ret ntdll.RtlAllocateHeap() retval=00147720 ret=7e3f346a 0009:Call ntdll.RtlAllocateHeap(00110000,00000008,00000024) ret=7e3f346a 0009:Ret ntdll.RtlAllocateHeap() retval=001477c0 ret=7e3f346a 0009:Call ntdll.RtlAllocateHeap(00110000,00000008,00000018) ret=7e3f346a 0009:Ret ntdll.RtlAllocateHeap() retval=001477f0 ret=7e3f346a 0009:Call winex11.drv.ImeSelect(00147230,00000001) ret=7e3f3805 0009:Ret winex11.drv.ImeSelect() retval=00000001 ret=7e3f3805 0009:Call user32.GetKeyboardLayout(00000000) ret=7e3f381c 0009:Ret user32.GetKeyboardLayout() retval=08090809 ret=7e3f381c 0009:Call user32.GetFocus() ret=7e3f3826 0009:Ret user32.GetFocus() retval=00000000 ret=7e3f3826 0009:Call user32.SendMessageW(00000000,00000285,00000001,08090809) ret=7e3f3842 0009:Ret user32.SendMessageW() retval=00000000 ret=7e3f3842 0009:Call user32.GetPropW(00000000,7e3f7d40 L"WineImmHIMCProperty") ret=7e3f398b 0009:Ret user32.GetPropW() retval=00000000 ret=7e3f398b 0009:Call KERNEL32.TlsGetValue(00000000) ret=7e3f02b5 0009:Ret KERNEL32.TlsGetValue() retval=00147218 ret=7e3f02b5 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_GETICON,wp=00000001,lp=00000000) 0009:Call user32.DefWindowProcW(00010030,0000007f,00000001,00000000) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_GETICON,wp=00000001,lp=00000000) retval=00000000 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_QUERYNEWPALETTE,wp=00000000,lp=00000000) 0009:Call user32.DefWindowProcW(00010030,0000030f,00000000,00000000) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_QUERYNEWPALETTE,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_ACTIVATEAPP,wp=00000001,lp=00000000) 0009:Call user32.DefWindowProcW(00010030,0000001c,00000001,00000000) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_ACTIVATEAPP,wp=00000001,lp=00000000) retval=00000000 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCACTIVATE,wp=00000001,lp=00000000) 0009:Call user32.DefWindowProcW(00010030,00000086,00000001,00000000) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCACTIVATE,wp=00000001,lp=00000000) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_ACTIVATE,wp=00000001,lp=00000000) 0009:Call user32.DefWindowProcW(00010030,00000006,00000001,00000000) ret=01006e3b 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETFOCUS,wp=00000000,lp=00000000) 0009:Call user32.DefWindowProcW(00010030,00000007,00000000,00000000) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETFOCUS,wp=00000000,lp=00000000) retval=00000000 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_ACTIVATE,wp=00000001,lp=00000000) retval=00000000 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_WINDOWPOSCHANGED,wp=00000000,lp=0033f950) 0009:Call user32.DefWindowProcW(00010030,00000047,00000000,0033f950) ret=01006e3b 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOVE,wp=00000000,lp=003f0000) 0009:Call user32.IsIconic(00010030) ret=01006f47 0009:Ret user32.IsIconic() retval=00000000 ret=01006f47 0009:Call user32.DefWindowProcW(00010030,00000003,00000000,003f0000) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOVE,wp=00000000,lp=003f0000) retval=00000000 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SIZE,wp=00000002,lp=02c80500) 0009:Call user32.GetClientRect(00010030,0033f1f8) ret=01002eb3 0009:Ret user32.GetClientRect() retval=00000001 ret=01002eb3 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SIZE,wp=00000002,lp=02c80500) retval=00000000 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_WINDOWPOSCHANGED,wp=00000000,lp=0033f950) retval=00000000 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SIZE,wp=00000002,lp=02c80500) 0009:Call user32.GetClientRect(00010030,0033f738) ret=01002eb3 0009:Ret user32.GetClientRect() retval=00000001 ret=01002eb3 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SIZE,wp=00000002,lp=02c80500) retval=00000000 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOVE,wp=00000000,lp=003f0000) 0009:Call user32.IsIconic(00010030) ret=01006f47 0009:Ret user32.IsIconic() retval=00000000 ret=01006f47 0009:Call user32.DefWindowProcW(00010030,00000003,00000000,003f0000) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOVE,wp=00000000,lp=003f0000) retval=00000000 0009:Ret user32.ShowWindow() retval=00000000 ret=01007259 0009:Call user32.PostMessageW(00010030,00000111,00009c51,00000000) ret=010072b9 0009:Ret user32.PostMessageW() retval=00000001 ret=010072b9 0009:Call user32.LoadAcceleratorsW(01000000,00000066) ret=010072c2 0009:Ret user32.LoadAcceleratorsW() retval=00001127 ret=010072c2 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_WINDOWPOSCHANGING,wp=00000000,lp=0033f7b0) 0009:Call user32.DefWindowProcW(00010030,00000046,00000000,0033f7b0) ret=01006e3b 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_GETMINMAXINFO,wp=00000000,lp=0033f214) 0009:Call user32.GetSystemMetrics(00000020) ret=01006fae 0009:Ret user32.GetSystemMetrics() retval=00000004 ret=01006fae 0009:Call user32.GetSystemMetrics(00000021) ret=01006fb4 0009:Ret user32.GetSystemMetrics() retval=00000004 ret=01006fb4 0009:Call user32.GetSystemMetrics(0000000f) ret=01006fbb 0009:Ret user32.GetSystemMetrics() retval=00000013 ret=01006fbb 0009:Call user32.GetSystemMetrics(00000004) ret=01006fc2 0009:Ret user32.GetSystemMetrics() retval=00000013 ret=01006fc2 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_GETMINMAXINFO,wp=00000000,lp=0033f214) retval=00000000 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_WINDOWPOSCHANGING,wp=00000000,lp=0033f7b0) retval=00000000 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCCALCSIZE,wp=00000001,lp=0033f6cc) 0009:Call user32.DefWindowProcW(00010030,00000083,00000001,0033f6cc) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000300 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCCALCSIZE,wp=00000001,lp=0033f6cc) retval=00000300 0019:Ret user32.GetMessageW() retval=00000001 ret=7ec5ec4b 0019:Call user32.DispatchMessageW(0033f93c) ret=7ec5ec28 0019:Call window proc 0x7ec5f470 (hwnd=0x10020,msg=WM_PAINT,wp=00000000,lp=00000000) 0019:Call user32.BeginPaint(00010020,0033f5b8) ret=7ec5f68f 0019:Call window proc 0x7ec5f470 (hwnd=0x10020,msg=WM_ERASEBKGND,wp=000001e4,lp=00000000) 0019:Ret window proc 0x7ec5f470 (hwnd=0x10020,msg=WM_ERASEBKGND,wp=000001e4,lp=00000000) retval=00000001 0019:Ret user32.BeginPaint() retval=000001e4 ret=7ec5f68f 0019:Call user32.EndPaint(00010020,0033f5b8) ret=7ec5f6af 0019:Ret user32.EndPaint() retval=00000001 ret=7ec5f6af 0019:Ret window proc 0x7ec5f470 (hwnd=0x10020,msg=WM_PAINT,wp=00000000,lp=00000000) retval=00000000 0019:Ret user32.DispatchMessageW() retval=00000000 ret=7ec5ec28 0019:Call user32.GetMessageW(0033f93c,00000000,00000000,00000000) ret=7ec5ec4b 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCPAINT,wp=000003c4,lp=00000000) 0009:Call user32.DefWindowProcW(00010030,00000085,000003c4,00000000) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCPAINT,wp=000003c4,lp=00000000) retval=00000000 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_ERASEBKGND,wp=00000314,lp=00000000) 0009:Call user32.DefWindowProcW(00010030,00000014,00000314,00000000) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_ERASEBKGND,wp=00000314,lp=00000000) retval=00000000 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_WINDOWPOSCHANGED,wp=00000000,lp=0033f7b0) 0009:Call user32.DefWindowProcW(00010030,00000047,00000000,0033f7b0) ret=01006e3b 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOVE,wp=00000000,lp=00440001) 0009:Call user32.IsIconic(00010030) ret=01006f47 0009:Ret user32.IsIconic() retval=00000000 ret=01006f47 0009:Call user32.DefWindowProcW(00010030,00000003,00000000,00440001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOVE,wp=00000000,lp=00440001) retval=00000000 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SIZE,wp=00000002,lp=02c204ff) 0009:Call user32.GetClientRect(00010030,0033f058) ret=01002eb3 0009:Ret user32.GetClientRect() retval=00000001 ret=01002eb3 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SIZE,wp=00000002,lp=02c204ff) retval=00000000 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_WINDOWPOSCHANGED,wp=00000000,lp=0033f7b0) retval=00000000 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEACTIVATE,wp=00010030,lp=02010002) 0009:Call user32.DefWindowProcW(00010030,00000021,00010030,02010002) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEACTIVATE,wp=00010030,lp=02010002) retval=00000001 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:fixme:htmlhelp:HtmlHelpW HH_PRETRANSLATEMESSAGE unimplemented 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_COMMAND,wp=00009c51,lp=00000000) 0009:Call user32.GetForegroundWindow() ret=01006c03 0009:Ret user32.GetForegroundWindow() retval=00010030 ret=01006c03 0009:Call user32.GetMenu(00010030) ret=01006c3f 0009:Ret user32.GetMenu() retval=000000f0 ret=01006c3f 0009:Call user32.DialogBoxParamW(01000000,00000077,00010030,01007b06,01012008) ret=0100671e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_CANCELMODE,wp=00000000,lp=00000000) 0009:Call user32.DefWindowProcW(00010030,0000001f,00000000,00000000) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_CANCELMODE,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_KILLFOCUS,wp=00000000,lp=00000000) 0009:Call user32.DefWindowProcW(00010030,00000008,00000000,00000000) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_KILLFOCUS,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_ENABLE,wp=00000000,lp=00000000) 0009:Call user32.DefWindowProcW(00010030,0000000a,00000000,00000000) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_ENABLE,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_NCCREATE,wp=00000000,lp=0033f1f8) 0009:Ret window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_NCCREATE,wp=00000000,lp=0033f1f8) retval=00000001 0009:Call window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_NCCALCSIZE,wp=00000000,lp=0033f1a4) 0009:Ret window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_NCCALCSIZE,wp=00000000,lp=0033f1a4) retval=00000000 0009:Call window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_CREATE,wp=00000000,lp=0033f1f8) 0009:Ret window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_CREATE,wp=00000000,lp=0033f1f8) retval=00000000 0009:Call window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_SIZE,wp=00000000,lp=00b10128) 0009:Ret window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_SIZE,wp=00000000,lp=00b10128) retval=00000000 0009:Call window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_MOVE,wp=00000000,lp=014101ec) 0009:Ret window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_MOVE,wp=00000000,lp=014101ec) retval=00000000 0009:Call window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_SETFONT,wp=00000418,lp=00000000) 0009:Call dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_SETFONT,wp=00000418,lp=00000000) 0009:Ret dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_SETFONT,wp=00000418,lp=00000000) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_SETFONT,wp=00000418,lp=00000000) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x10034,msg=WM_NCCREATE,wp=00000000,lp=0033f1f8) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x10034,msg=WM_NCCREATE,wp=00000000,lp=0033f1f8) retval=00000001 0009:Call window proc 0x7eaf1c70 (hwnd=0x10034,msg=WM_NCCALCSIZE,wp=00000000,lp=0033f1a4) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x10034,msg=WM_NCCALCSIZE,wp=00000000,lp=0033f1a4) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x10034,msg=WM_CREATE,wp=00000000,lp=0033f1f8) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x10034,msg=WM_CREATE,wp=00000000,lp=0033f1f8) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x10034,msg=WM_SIZE,wp=00000000,lp=001f0113) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x10034,msg=WM_SIZE,wp=00000000,lp=001f0113) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x10034,msg=WM_MOVE,wp=00000000,lp=000b000b) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x10034,msg=WM_MOVE,wp=00000000,lp=000b000b) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x10034,msg=WM_SHOWWINDOW,wp=00000001,lp=00000000) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x10034,msg=WM_SHOWWINDOW,wp=00000001,lp=00000000) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x10034,msg=WM_SETFONT,wp=00000418,lp=00000000) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x10034,msg=WM_SETFONT,wp=00000418,lp=00000000) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x10034,msg=WM_GETDLGCODE,wp=00000000,lp=00000000) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x10034,msg=WM_GETDLGCODE,wp=00000000,lp=00000000) retval=00000100 0009:Call window proc 0x7eaf1c70 (hwnd=0x10036,msg=WM_NCCREATE,wp=00000000,lp=0033f1f8) 0009:Call window proc 0x7eaf1c70 (hwnd=0x10036,msg=WM_WINDOWPOSCHANGING,wp=00000000,lp=0033ec40) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x10036,msg=WM_WINDOWPOSCHANGING,wp=00000000,lp=0033ec40) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x10036,msg=WM_NCCALCSIZE,wp=00000001,lp=0033eb5c) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x10036,msg=WM_NCCALCSIZE,wp=00000001,lp=0033eb5c) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x10036,msg=WM_WINDOWPOSCHANGED,wp=00000000,lp=0033ec40) 0009:Call window proc 0x7eaf1c70 (hwnd=0x10036,msg=WM_SIZE,wp=00000000,lp=00200020) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x10036,msg=WM_SIZE,wp=00000000,lp=00200020) retval=00000000 0009:Ret window proc 0x7eaf1c70 (hwnd=0x10036,msg=WM_WINDOWPOSCHANGED,wp=00000000,lp=0033ec40) retval=00000000 0009:Ret window proc 0x7eaf1c70 (hwnd=0x10036,msg=WM_NCCREATE,wp=00000000,lp=0033f1f8) retval=00000001 0009:Call window proc 0x7eaf1c70 (hwnd=0x10036,msg=WM_NCCALCSIZE,wp=00000000,lp=0033f1a4) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x10036,msg=WM_NCCALCSIZE,wp=00000000,lp=0033f1a4) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x10036,msg=WM_CREATE,wp=00000000,lp=0033f1f8) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x10036,msg=WM_CREATE,wp=00000000,lp=0033f1f8) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x10036,msg=WM_SIZE,wp=00000000,lp=00200020) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x10036,msg=WM_SIZE,wp=00000000,lp=00200020) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x10036,msg=WM_MOVE,wp=00000000,lp=0065001a) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x10036,msg=WM_MOVE,wp=00000000,lp=0065001a) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x10036,msg=WM_SHOWWINDOW,wp=00000001,lp=00000000) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x10036,msg=WM_SHOWWINDOW,wp=00000001,lp=00000000) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x10036,msg=WM_SETFONT,wp=00000418,lp=00000000) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x10036,msg=WM_SETFONT,wp=00000418,lp=00000000) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x10036,msg=WM_GETDLGCODE,wp=00000000,lp=00000000) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x10036,msg=WM_GETDLGCODE,wp=00000000,lp=00000000) retval=00000100 0009:Call window proc 0x7eaf1c70 (hwnd=0x10038,msg=WM_NCCREATE,wp=00000000,lp=0033f1f8) 0009:Call window proc 0x7eaf1c70 (hwnd=0x10038,msg=WM_WINDOWPOSCHANGING,wp=00000000,lp=0033ec40) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x10038,msg=WM_WINDOWPOSCHANGING,wp=00000000,lp=0033ec40) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x10038,msg=WM_NCCALCSIZE,wp=00000001,lp=0033eb5c) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x10038,msg=WM_NCCALCSIZE,wp=00000001,lp=0033eb5c) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x10038,msg=WM_WINDOWPOSCHANGED,wp=00000000,lp=0033ec40) 0009:Call window proc 0x7eaf1c70 (hwnd=0x10038,msg=WM_SIZE,wp=00000000,lp=00200020) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x10038,msg=WM_SIZE,wp=00000000,lp=00200020) retval=00000000 0009:Ret window proc 0x7eaf1c70 (hwnd=0x10038,msg=WM_WINDOWPOSCHANGED,wp=00000000,lp=0033ec40) retval=00000000 0009:Ret window proc 0x7eaf1c70 (hwnd=0x10038,msg=WM_NCCREATE,wp=00000000,lp=0033f1f8) retval=00000001 0009:Call window proc 0x7eaf1c70 (hwnd=0x10038,msg=WM_NCCALCSIZE,wp=00000000,lp=0033f1a4) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x10038,msg=WM_NCCALCSIZE,wp=00000000,lp=0033f1a4) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x10038,msg=WM_CREATE,wp=00000000,lp=0033f1f8) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x10038,msg=WM_CREATE,wp=00000000,lp=0033f1f8) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x10038,msg=WM_SIZE,wp=00000000,lp=00200020) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x10038,msg=WM_SIZE,wp=00000000,lp=00200020) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x10038,msg=WM_MOVE,wp=00000000,lp=00650027) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x10038,msg=WM_MOVE,wp=00000000,lp=00650027) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x10038,msg=WM_SHOWWINDOW,wp=00000001,lp=00000000) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x10038,msg=WM_SHOWWINDOW,wp=00000001,lp=00000000) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x10038,msg=WM_SETFONT,wp=00000418,lp=00000000) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x10038,msg=WM_SETFONT,wp=00000418,lp=00000000) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x10038,msg=WM_GETDLGCODE,wp=00000000,lp=00000000) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x10038,msg=WM_GETDLGCODE,wp=00000000,lp=00000000) retval=00000100 0009:Call window proc 0x7eaf1c70 (hwnd=0x1003a,msg=WM_NCCREATE,wp=00000000,lp=0033f1f8) 0009:Call window proc 0x7eaf1c70 (hwnd=0x1003a,msg=WM_WINDOWPOSCHANGING,wp=00000000,lp=0033ec40) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x1003a,msg=WM_WINDOWPOSCHANGING,wp=00000000,lp=0033ec40) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x1003a,msg=WM_NCCALCSIZE,wp=00000001,lp=0033eb5c) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x1003a,msg=WM_NCCALCSIZE,wp=00000001,lp=0033eb5c) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x1003a,msg=WM_WINDOWPOSCHANGED,wp=00000000,lp=0033ec40) 0009:Call window proc 0x7eaf1c70 (hwnd=0x1003a,msg=WM_SIZE,wp=00000000,lp=00200020) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x1003a,msg=WM_SIZE,wp=00000000,lp=00200020) retval=00000000 0009:Ret window proc 0x7eaf1c70 (hwnd=0x1003a,msg=WM_WINDOWPOSCHANGED,wp=00000000,lp=0033ec40) retval=00000000 0009:Ret window proc 0x7eaf1c70 (hwnd=0x1003a,msg=WM_NCCREATE,wp=00000000,lp=0033f1f8) retval=00000001 0009:Call window proc 0x7eaf1c70 (hwnd=0x1003a,msg=WM_NCCALCSIZE,wp=00000000,lp=0033f1a4) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x1003a,msg=WM_NCCALCSIZE,wp=00000000,lp=0033f1a4) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x1003a,msg=WM_CREATE,wp=00000000,lp=0033f1f8) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x1003a,msg=WM_CREATE,wp=00000000,lp=0033f1f8) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x1003a,msg=WM_SIZE,wp=00000000,lp=00200020) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x1003a,msg=WM_SIZE,wp=00000000,lp=00200020) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x1003a,msg=WM_MOVE,wp=00000000,lp=004b0035) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x1003a,msg=WM_MOVE,wp=00000000,lp=004b0035) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x1003a,msg=WM_SHOWWINDOW,wp=00000001,lp=00000000) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x1003a,msg=WM_SHOWWINDOW,wp=00000001,lp=00000000) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x1003a,msg=WM_SETFONT,wp=00000418,lp=00000000) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x1003a,msg=WM_SETFONT,wp=00000418,lp=00000000) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x1003a,msg=WM_GETDLGCODE,wp=00000000,lp=00000000) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x1003a,msg=WM_GETDLGCODE,wp=00000000,lp=00000000) retval=00000100 0009:Call window proc 0x7eaf1c70 (hwnd=0x1003c,msg=WM_NCCREATE,wp=00000000,lp=0033f1f8) 0009:Call window proc 0x7eaf1c70 (hwnd=0x1003c,msg=WM_WINDOWPOSCHANGING,wp=00000000,lp=0033ec40) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x1003c,msg=WM_WINDOWPOSCHANGING,wp=00000000,lp=0033ec40) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x1003c,msg=WM_NCCALCSIZE,wp=00000001,lp=0033eb5c) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x1003c,msg=WM_NCCALCSIZE,wp=00000001,lp=0033eb5c) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x1003c,msg=WM_WINDOWPOSCHANGED,wp=00000000,lp=0033ec40) 0009:Call window proc 0x7eaf1c70 (hwnd=0x1003c,msg=WM_SIZE,wp=00000000,lp=00200020) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x1003c,msg=WM_SIZE,wp=00000000,lp=00200020) retval=00000000 0009:Ret window proc 0x7eaf1c70 (hwnd=0x1003c,msg=WM_WINDOWPOSCHANGED,wp=00000000,lp=0033ec40) retval=00000000 0009:Ret window proc 0x7eaf1c70 (hwnd=0x1003c,msg=WM_NCCREATE,wp=00000000,lp=0033f1f8) retval=00000001 0009:Call window proc 0x7eaf1c70 (hwnd=0x1003c,msg=WM_NCCALCSIZE,wp=00000000,lp=0033f1a4) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x1003c,msg=WM_NCCALCSIZE,wp=00000000,lp=0033f1a4) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x1003c,msg=WM_CREATE,wp=00000000,lp=0033f1f8) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x1003c,msg=WM_CREATE,wp=00000000,lp=0033f1f8) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x1003c,msg=WM_SIZE,wp=00000000,lp=00200020) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x1003c,msg=WM_SIZE,wp=00000000,lp=00200020) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x1003c,msg=WM_MOVE,wp=00000000,lp=00650035) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x1003c,msg=WM_MOVE,wp=00000000,lp=00650035) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x1003c,msg=WM_SHOWWINDOW,wp=00000001,lp=00000000) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x1003c,msg=WM_SHOWWINDOW,wp=00000001,lp=00000000) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x1003c,msg=WM_SETFONT,wp=00000418,lp=00000000) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x1003c,msg=WM_SETFONT,wp=00000418,lp=00000000) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x1003c,msg=WM_GETDLGCODE,wp=00000000,lp=00000000) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x1003c,msg=WM_GETDLGCODE,wp=00000000,lp=00000000) retval=00000100 0009:Call window proc 0x7eaf1c70 (hwnd=0x1003e,msg=WM_NCCREATE,wp=00000000,lp=0033f1f8) 0009:Call window proc 0x7eaf1c70 (hwnd=0x1003e,msg=WM_WINDOWPOSCHANGING,wp=00000000,lp=0033ec40) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x1003e,msg=WM_WINDOWPOSCHANGING,wp=00000000,lp=0033ec40) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x1003e,msg=WM_NCCALCSIZE,wp=00000001,lp=0033eb5c) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x1003e,msg=WM_NCCALCSIZE,wp=00000001,lp=0033eb5c) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x1003e,msg=WM_WINDOWPOSCHANGED,wp=00000000,lp=0033ec40) 0009:Call window proc 0x7eaf1c70 (hwnd=0x1003e,msg=WM_SIZE,wp=00000000,lp=00200020) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x1003e,msg=WM_SIZE,wp=00000000,lp=00200020) retval=00000000 0009:Ret window proc 0x7eaf1c70 (hwnd=0x1003e,msg=WM_WINDOWPOSCHANGED,wp=00000000,lp=0033ec40) retval=00000000 0009:Ret window proc 0x7eaf1c70 (hwnd=0x1003e,msg=WM_NCCREATE,wp=00000000,lp=0033f1f8) retval=00000001 0009:Call window proc 0x7eaf1c70 (hwnd=0x1003e,msg=WM_NCCALCSIZE,wp=00000000,lp=0033f1a4) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x1003e,msg=WM_NCCALCSIZE,wp=00000000,lp=0033f1a4) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x1003e,msg=WM_CREATE,wp=00000000,lp=0033f1f8) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x1003e,msg=WM_CREATE,wp=00000000,lp=0033f1f8) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x1003e,msg=WM_SIZE,wp=00000000,lp=00200020) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x1003e,msg=WM_SIZE,wp=00000000,lp=00200020) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x1003e,msg=WM_MOVE,wp=00000000,lp=00310042) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x1003e,msg=WM_MOVE,wp=00000000,lp=00310042) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x1003e,msg=WM_SHOWWINDOW,wp=00000001,lp=00000000) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x1003e,msg=WM_SHOWWINDOW,wp=00000001,lp=00000000) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x1003e,msg=WM_SETFONT,wp=00000418,lp=00000000) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x1003e,msg=WM_SETFONT,wp=00000418,lp=00000000) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x1003e,msg=WM_GETDLGCODE,wp=00000000,lp=00000000) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x1003e,msg=WM_GETDLGCODE,wp=00000000,lp=00000000) retval=00000100 0009:Call window proc 0x7eaf1c70 (hwnd=0x10040,msg=WM_NCCREATE,wp=00000000,lp=0033f1f8) 0009:Call window proc 0x7eaf1c70 (hwnd=0x10040,msg=WM_WINDOWPOSCHANGING,wp=00000000,lp=0033ec40) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x10040,msg=WM_WINDOWPOSCHANGING,wp=00000000,lp=0033ec40) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x10040,msg=WM_NCCALCSIZE,wp=00000001,lp=0033eb5c) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x10040,msg=WM_NCCALCSIZE,wp=00000001,lp=0033eb5c) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x10040,msg=WM_WINDOWPOSCHANGED,wp=00000000,lp=0033ec40) 0009:Call window proc 0x7eaf1c70 (hwnd=0x10040,msg=WM_SIZE,wp=00000000,lp=00200020) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x10040,msg=WM_SIZE,wp=00000000,lp=00200020) retval=00000000 0009:Ret window proc 0x7eaf1c70 (hwnd=0x10040,msg=WM_WINDOWPOSCHANGED,wp=00000000,lp=0033ec40) retval=00000000 0009:Ret window proc 0x7eaf1c70 (hwnd=0x10040,msg=WM_NCCREATE,wp=00000000,lp=0033f1f8) retval=00000001 0009:Call window proc 0x7eaf1c70 (hwnd=0x10040,msg=WM_NCCALCSIZE,wp=00000000,lp=0033f1a4) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x10040,msg=WM_NCCALCSIZE,wp=00000000,lp=0033f1a4) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x10040,msg=WM_CREATE,wp=00000000,lp=0033f1f8) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x10040,msg=WM_CREATE,wp=00000000,lp=0033f1f8) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x10040,msg=WM_SIZE,wp=00000000,lp=00200020) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x10040,msg=WM_SIZE,wp=00000000,lp=00200020) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x10040,msg=WM_MOVE,wp=00000000,lp=004b0042) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x10040,msg=WM_MOVE,wp=00000000,lp=004b0042) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x10040,msg=WM_SHOWWINDOW,wp=00000001,lp=00000000) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x10040,msg=WM_SHOWWINDOW,wp=00000001,lp=00000000) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x10040,msg=WM_SETFONT,wp=00000418,lp=00000000) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x10040,msg=WM_SETFONT,wp=00000418,lp=00000000) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x10040,msg=WM_GETDLGCODE,wp=00000000,lp=00000000) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x10040,msg=WM_GETDLGCODE,wp=00000000,lp=00000000) retval=00000100 0009:Call window proc 0x7eaf1c70 (hwnd=0x10042,msg=WM_NCCREATE,wp=00000000,lp=0033f1f8) 0009:Call window proc 0x7eaf1c70 (hwnd=0x10042,msg=WM_WINDOWPOSCHANGING,wp=00000000,lp=0033ec40) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x10042,msg=WM_WINDOWPOSCHANGING,wp=00000000,lp=0033ec40) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x10042,msg=WM_NCCALCSIZE,wp=00000001,lp=0033eb5c) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x10042,msg=WM_NCCALCSIZE,wp=00000001,lp=0033eb5c) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x10042,msg=WM_WINDOWPOSCHANGED,wp=00000000,lp=0033ec40) 0009:Call window proc 0x7eaf1c70 (hwnd=0x10042,msg=WM_SIZE,wp=00000000,lp=00200020) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x10042,msg=WM_SIZE,wp=00000000,lp=00200020) retval=00000000 0009:Ret window proc 0x7eaf1c70 (hwnd=0x10042,msg=WM_WINDOWPOSCHANGED,wp=00000000,lp=0033ec40) retval=00000000 0009:Ret window proc 0x7eaf1c70 (hwnd=0x10042,msg=WM_NCCREATE,wp=00000000,lp=0033f1f8) retval=00000001 0009:Call window proc 0x7eaf1c70 (hwnd=0x10042,msg=WM_NCCALCSIZE,wp=00000000,lp=0033f1a4) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x10042,msg=WM_NCCALCSIZE,wp=00000000,lp=0033f1a4) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x10042,msg=WM_CREATE,wp=00000000,lp=0033f1f8) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x10042,msg=WM_CREATE,wp=00000000,lp=0033f1f8) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x10042,msg=WM_SIZE,wp=00000000,lp=00200020) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x10042,msg=WM_SIZE,wp=00000000,lp=00200020) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x10042,msg=WM_MOVE,wp=00000000,lp=00650042) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x10042,msg=WM_MOVE,wp=00000000,lp=00650042) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x10042,msg=WM_SHOWWINDOW,wp=00000001,lp=00000000) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x10042,msg=WM_SHOWWINDOW,wp=00000001,lp=00000000) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x10042,msg=WM_SETFONT,wp=00000418,lp=00000000) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x10042,msg=WM_SETFONT,wp=00000418,lp=00000000) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x10042,msg=WM_GETDLGCODE,wp=00000000,lp=00000000) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x10042,msg=WM_GETDLGCODE,wp=00000000,lp=00000000) retval=00000100 0009:Call window proc 0x7ea833d0 (hwnd=0x10044,msg=WM_NCCREATE,wp=00000000,lp=0033f1f8) 0009:Ret window proc 0x7ea833d0 (hwnd=0x10044,msg=WM_NCCREATE,wp=00000000,lp=0033f1f8) retval=00000001 0009:Call window proc 0x7ea833d0 (hwnd=0x10044,msg=WM_NCCALCSIZE,wp=00000000,lp=0033f1a4) 0009:Ret window proc 0x7ea833d0 (hwnd=0x10044,msg=WM_NCCALCSIZE,wp=00000000,lp=0033f1a4) retval=00000300 0009:Call window proc 0x7ea833d0 (hwnd=0x10044,msg=WM_CREATE,wp=00000000,lp=0033f1f8) 0009:Ret window proc 0x7ea833d0 (hwnd=0x10044,msg=WM_CREATE,wp=00000000,lp=0033f1f8) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x10044,msg=WM_SIZE,wp=00000000,lp=001000cf) 0009:Ret window proc 0x7ea833d0 (hwnd=0x10044,msg=WM_SIZE,wp=00000000,lp=001000cf) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x10044,msg=WM_MOVE,wp=00000000,lp=002f004e) 0009:Ret window proc 0x7ea833d0 (hwnd=0x10044,msg=WM_MOVE,wp=00000000,lp=002f004e) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x10044,msg=WM_SHOWWINDOW,wp=00000001,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x10044,msg=WM_SHOWWINDOW,wp=00000001,lp=00000000) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x10044,msg=WM_SETFONT,wp=00000418,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x10044,msg=WM_SETFONT,wp=00000418,lp=00000000) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x10044,msg=WM_GETDLGCODE,wp=00000000,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x10044,msg=WM_GETDLGCODE,wp=00000000,lp=00000000) retval=00002040 0009:Call window proc 0x7ea833d0 (hwnd=0x10046,msg=WM_NCCREATE,wp=00000000,lp=0033f1f8) 0009:Ret window proc 0x7ea833d0 (hwnd=0x10046,msg=WM_NCCREATE,wp=00000000,lp=0033f1f8) retval=00000001 0009:Call window proc 0x7ea833d0 (hwnd=0x10046,msg=WM_NCCALCSIZE,wp=00000000,lp=0033f1a4) 0009:Ret window proc 0x7ea833d0 (hwnd=0x10046,msg=WM_NCCALCSIZE,wp=00000000,lp=0033f1a4) retval=00000300 0009:Call window proc 0x7ea833d0 (hwnd=0x10046,msg=WM_CREATE,wp=00000000,lp=0033f1f8) 0009:Ret window proc 0x7ea833d0 (hwnd=0x10046,msg=WM_CREATE,wp=00000000,lp=0033f1f8) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x10046,msg=WM_SIZE,wp=00000000,lp=001000cf) 0009:Ret window proc 0x7ea833d0 (hwnd=0x10046,msg=WM_SIZE,wp=00000000,lp=001000cf) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x10046,msg=WM_MOVE,wp=00000000,lp=0049004e) 0009:Ret window proc 0x7ea833d0 (hwnd=0x10046,msg=WM_MOVE,wp=00000000,lp=0049004e) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x10046,msg=WM_SHOWWINDOW,wp=00000001,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x10046,msg=WM_SHOWWINDOW,wp=00000001,lp=00000000) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x10046,msg=WM_SETFONT,wp=00000418,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x10046,msg=WM_SETFONT,wp=00000418,lp=00000000) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x10046,msg=WM_GETDLGCODE,wp=00000000,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x10046,msg=WM_GETDLGCODE,wp=00000000,lp=00000000) retval=00002040 0009:Call window proc 0x7ea833d0 (hwnd=0x10048,msg=WM_NCCREATE,wp=00000000,lp=0033f1f8) 0009:Ret window proc 0x7ea833d0 (hwnd=0x10048,msg=WM_NCCREATE,wp=00000000,lp=0033f1f8) retval=00000001 0009:Call window proc 0x7ea833d0 (hwnd=0x10048,msg=WM_NCCALCSIZE,wp=00000000,lp=0033f1a4) 0009:Ret window proc 0x7ea833d0 (hwnd=0x10048,msg=WM_NCCALCSIZE,wp=00000000,lp=0033f1a4) retval=00000300 0009:Call window proc 0x7ea833d0 (hwnd=0x10048,msg=WM_CREATE,wp=00000000,lp=0033f1f8) 0009:Ret window proc 0x7ea833d0 (hwnd=0x10048,msg=WM_CREATE,wp=00000000,lp=0033f1f8) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x10048,msg=WM_SIZE,wp=00000000,lp=001000cf) 0009:Ret window proc 0x7ea833d0 (hwnd=0x10048,msg=WM_SIZE,wp=00000000,lp=001000cf) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x10048,msg=WM_MOVE,wp=00000000,lp=0063004e) 0009:Ret window proc 0x7ea833d0 (hwnd=0x10048,msg=WM_MOVE,wp=00000000,lp=0063004e) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x10048,msg=WM_SHOWWINDOW,wp=00000001,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x10048,msg=WM_SHOWWINDOW,wp=00000001,lp=00000000) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x10048,msg=WM_SETFONT,wp=00000418,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x10048,msg=WM_SETFONT,wp=00000418,lp=00000000) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x10048,msg=WM_GETDLGCODE,wp=00000000,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x10048,msg=WM_GETDLGCODE,wp=00000000,lp=00000000) retval=00002040 0009:Call window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_NCCREATE,wp=00000000,lp=0033f1f8) 0009:Ret window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_NCCREATE,wp=00000000,lp=0033f1f8) retval=00000001 0009:Call window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_NCCALCSIZE,wp=00000000,lp=0033f1a4) 0009:Ret window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_NCCALCSIZE,wp=00000000,lp=0033f1a4) retval=00000300 0009:Call window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_CREATE,wp=00000000,lp=0033f1f8) 0009:Ret window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_CREATE,wp=00000000,lp=0033f1f8) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_SIZE,wp=00000000,lp=0017004b) 0009:Ret window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_SIZE,wp=00000000,lp=0017004b) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_MOVE,wp=00000000,lp=008f003c) 0009:Ret window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_MOVE,wp=00000000,lp=008f003c) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_SHOWWINDOW,wp=00000001,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_SHOWWINDOW,wp=00000001,lp=00000000) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_SETFONT,wp=00000418,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_SETFONT,wp=00000418,lp=00000000) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_GETDLGCODE,wp=00000000,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_GETDLGCODE,wp=00000000,lp=00000000) retval=00002010 0009:Call window proc 0x7ea833d0 (hwnd=0x1004c,msg=WM_NCCREATE,wp=00000000,lp=0033f1f8) 0009:Ret window proc 0x7ea833d0 (hwnd=0x1004c,msg=WM_NCCREATE,wp=00000000,lp=0033f1f8) retval=00000001 0009:Call window proc 0x7ea833d0 (hwnd=0x1004c,msg=WM_NCCALCSIZE,wp=00000000,lp=0033f1a4) 0009:Ret window proc 0x7ea833d0 (hwnd=0x1004c,msg=WM_NCCALCSIZE,wp=00000000,lp=0033f1a4) retval=00000300 0009:Call window proc 0x7ea833d0 (hwnd=0x1004c,msg=WM_CREATE,wp=00000000,lp=0033f1f8) 0009:Ret window proc 0x7ea833d0 (hwnd=0x1004c,msg=WM_CREATE,wp=00000000,lp=0033f1f8) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x1004c,msg=WM_SIZE,wp=00000000,lp=0017004b) 0009:Ret window proc 0x7ea833d0 (hwnd=0x1004c,msg=WM_SIZE,wp=00000000,lp=0017004b) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x1004c,msg=WM_MOVE,wp=00000000,lp=008f009f) 0009:Ret window proc 0x7ea833d0 (hwnd=0x1004c,msg=WM_MOVE,wp=00000000,lp=008f009f) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x1004c,msg=WM_SHOWWINDOW,wp=00000001,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x1004c,msg=WM_SHOWWINDOW,wp=00000001,lp=00000000) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x1004c,msg=WM_SETFONT,wp=00000418,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x1004c,msg=WM_SETFONT,wp=00000418,lp=00000000) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x1004c,msg=WM_GETDLGCODE,wp=00000000,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x1004c,msg=WM_GETDLGCODE,wp=00000000,lp=00000000) retval=00002020 0009:Call window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_INITDIALOG,wp=00000000,lp=01012008) 0009:Call dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_INITDIALOG,wp=00000000,lp=01012008) 0009:Call user32.CheckRadioButton(00010032,000003f0,000003f2,000003f0) ret=01007bd6 0009:Call window proc 0x7ea833d0 (hwnd=0x10044,msg=BM_SETCHECK,wp=00000001,lp=00000000) 0009:Call window proc 0x7ea833d0 (hwnd=0x10044,msg=WM_STYLECHANGING,wp=fffffff0,lp=0033eb4c) 0009:Ret window proc 0x7ea833d0 (hwnd=0x10044,msg=WM_STYLECHANGING,wp=fffffff0,lp=0033eb4c) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x10044,msg=WM_STYLECHANGED,wp=fffffff0,lp=0033eb4c) 0009:Ret window proc 0x7ea833d0 (hwnd=0x10044,msg=WM_STYLECHANGED,wp=fffffff0,lp=0033eb4c) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x10046,msg=BM_SETCHECK,wp=00000000,lp=00000000) 0009:Call window proc 0x7ea833d0 (hwnd=0x10046,msg=WM_STYLECHANGING,wp=fffffff0,lp=0033e88c) 0009:Ret window proc 0x7ea833d0 (hwnd=0x10046,msg=WM_STYLECHANGING,wp=fffffff0,lp=0033e88c) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x10046,msg=WM_STYLECHANGED,wp=fffffff0,lp=0033e88c) 0009:Ret window proc 0x7ea833d0 (hwnd=0x10046,msg=WM_STYLECHANGED,wp=fffffff0,lp=0033e88c) retval=00000000 0009:Ret window proc 0x7ea833d0 (hwnd=0x10046,msg=BM_SETCHECK,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x10048,msg=BM_SETCHECK,wp=00000000,lp=00000000) 0009:Call window proc 0x7ea833d0 (hwnd=0x10048,msg=WM_STYLECHANGING,wp=fffffff0,lp=0033e88c) 0009:Ret window proc 0x7ea833d0 (hwnd=0x10048,msg=WM_STYLECHANGING,wp=fffffff0,lp=0033e88c) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x10048,msg=WM_STYLECHANGED,wp=fffffff0,lp=0033e88c) 0009:Ret window proc 0x7ea833d0 (hwnd=0x10048,msg=WM_STYLECHANGED,wp=fffffff0,lp=0033e88c) retval=00000000 0009:Ret window proc 0x7ea833d0 (hwnd=0x10048,msg=BM_SETCHECK,wp=00000000,lp=00000000) retval=00000000 0009:Ret window proc 0x7ea833d0 (hwnd=0x10044,msg=BM_SETCHECK,wp=00000001,lp=00000000) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x10046,msg=BM_SETCHECK,wp=00000000,lp=00000000) 0009:Call window proc 0x7ea833d0 (hwnd=0x10046,msg=WM_STYLECHANGING,wp=fffffff0,lp=0033eb4c) 0009:Ret window proc 0x7ea833d0 (hwnd=0x10046,msg=WM_STYLECHANGING,wp=fffffff0,lp=0033eb4c) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x10046,msg=WM_STYLECHANGED,wp=fffffff0,lp=0033eb4c) 0009:Ret window proc 0x7ea833d0 (hwnd=0x10046,msg=WM_STYLECHANGED,wp=fffffff0,lp=0033eb4c) retval=00000000 0009:Ret window proc 0x7ea833d0 (hwnd=0x10046,msg=BM_SETCHECK,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x10048,msg=BM_SETCHECK,wp=00000000,lp=00000000) 0009:Call window proc 0x7ea833d0 (hwnd=0x10048,msg=WM_STYLECHANGING,wp=fffffff0,lp=0033eb4c) 0009:Ret window proc 0x7ea833d0 (hwnd=0x10048,msg=WM_STYLECHANGING,wp=fffffff0,lp=0033eb4c) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x10048,msg=WM_STYLECHANGED,wp=fffffff0,lp=0033eb4c) 0009:Ret window proc 0x7ea833d0 (hwnd=0x10048,msg=WM_STYLECHANGED,wp=fffffff0,lp=0033eb4c) retval=00000000 0009:Ret window proc 0x7ea833d0 (hwnd=0x10048,msg=BM_SETCHECK,wp=00000000,lp=00000000) retval=00000000 0009:Ret user32.CheckRadioButton() retval=00000001 ret=01007bd6 0009:Ret dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_INITDIALOG,wp=00000000,lp=01012008) retval=00000001 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_INITDIALOG,wp=00000000,lp=01012008) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCACTIVATE,wp=00000000,lp=00010032) 0009:Call user32.DefWindowProcW(00010030,00000086,00000000,00010032) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCACTIVATE,wp=00000000,lp=00010032) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_ACTIVATE,wp=00000000,lp=00010032) 0009:Call user32.DefWindowProcW(00010030,00000006,00000000,00010032) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_ACTIVATE,wp=00000000,lp=00010032) retval=00000000 0009:Call window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_QUERYNEWPALETTE,wp=00000000,lp=00000000) 0009:Call dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_QUERYNEWPALETTE,wp=00000000,lp=00000000) 0009:Ret dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_QUERYNEWPALETTE,wp=00000000,lp=00000000) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_QUERYNEWPALETTE,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_NCACTIVATE,wp=00000001,lp=00010030) 0009:Call dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_NCACTIVATE,wp=00000001,lp=00010030) 0009:Ret dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_NCACTIVATE,wp=00000001,lp=00010030) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_NCACTIVATE,wp=00000001,lp=00010030) retval=00000001 0009:Call window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_ACTIVATE,wp=00000001,lp=00010030) 0009:Call dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_ACTIVATE,wp=00000001,lp=00010030) 0009:Ret dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_ACTIVATE,wp=00000001,lp=00010030) retval=00000000 result=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x10044,msg=WM_GETDLGCODE,wp=00000000,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x10044,msg=WM_GETDLGCODE,wp=00000000,lp=00000000) retval=00002040 0009:Call window proc 0x7ea833d0 (hwnd=0x10044,msg=WM_SETFOCUS,wp=00000000,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x10044,msg=WM_SETFOCUS,wp=00000000,lp=00000000) retval=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_ACTIVATE,wp=00000001,lp=00010030) retval=00000000 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_PAINT,wp=00000000,lp=00000000) 0009:Call user32.BeginPaint(00010030,0033f424) ret=01006ec0 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCPAINT,wp=000004c0,lp=00000000) 0009:Call user32.DefWindowProcW(00010030,00000085,000004c0,00000000) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCPAINT,wp=000004c0,lp=00000000) retval=00000000 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_ERASEBKGND,wp=00000314,lp=00000000) 0009:Call user32.DefWindowProcW(00010030,00000014,00000314,00000000) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_ERASEBKGND,wp=00000314,lp=00000000) retval=00000000 0009:Ret user32.BeginPaint() retval=00000314 ret=01006ec0 0009:Call user32.GetClientRect(00010030,0033f350) ret=01005cd6 0009:Ret user32.GetClientRect() retval=00000001 ret=01005cd6 0009:Call gdi32.CreateCompatibleDC(00000314) ret=0100272b 0009:Ret gdi32.CreateCompatibleDC() retval=0000050c ret=0100272b 0009:Call user32.LoadBitmapW(01000000,010012bc L"FELT") ret=0100273f 0009:Ret user32.LoadBitmapW() retval=00000524 ret=0100273f 0009:Call gdi32.SelectObject(0000050c,00000524) ret=0100274c 0009:Ret gdi32.SelectObject() retval=0000006c ret=0100274c 0009:Call gdi32.BitBlt(00000314,00000000,00000000,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000003f,00000000,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000007e,00000000,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000bd,00000000,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000fc,00000000,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000013b,00000000,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000017a,00000000,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001b9,00000000,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001f8,00000000,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000237,00000000,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000276,00000000,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002b5,00000000,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002f4,00000000,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000333,00000000,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000372,00000000,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003b1,00000000,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003f0,00000000,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000042f,00000000,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000046e,00000000,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ad,00000000,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ec,00000000,00000013,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000000,00000040,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000003f,00000040,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000007e,00000040,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000bd,00000040,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000fc,00000040,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000013b,00000040,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000017a,00000040,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001b9,00000040,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001f8,00000040,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000237,00000040,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000276,00000040,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002b5,00000040,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002f4,00000040,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000333,00000040,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000372,00000040,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003b1,00000040,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003f0,00000040,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000042f,00000040,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000046e,00000040,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ad,00000040,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ec,00000040,00000013,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000000,00000080,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000003f,00000080,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000007e,00000080,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000bd,00000080,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000fc,00000080,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000013b,00000080,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000017a,00000080,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001b9,00000080,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001f8,00000080,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000237,00000080,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000276,00000080,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002b5,00000080,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002f4,00000080,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000333,00000080,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000372,00000080,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003b1,00000080,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003f0,00000080,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000042f,00000080,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000046e,00000080,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ad,00000080,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ec,00000080,00000013,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000000,000000c0,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000003f,000000c0,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000007e,000000c0,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000bd,000000c0,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000fc,000000c0,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000013b,000000c0,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000017a,000000c0,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001b9,000000c0,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001f8,000000c0,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000237,000000c0,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000276,000000c0,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002b5,000000c0,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002f4,000000c0,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000333,000000c0,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000372,000000c0,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003b1,000000c0,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003f0,000000c0,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000042f,000000c0,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000046e,000000c0,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ad,000000c0,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ec,000000c0,00000013,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000000,00000100,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000003f,00000100,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000007e,00000100,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000bd,00000100,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000fc,00000100,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000013b,00000100,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000017a,00000100,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001b9,00000100,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001f8,00000100,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000237,00000100,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000276,00000100,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002b5,00000100,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002f4,00000100,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000333,00000100,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000372,00000100,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003b1,00000100,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003f0,00000100,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000042f,00000100,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000046e,00000100,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ad,00000100,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ec,00000100,00000013,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000000,00000140,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000003f,00000140,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000007e,00000140,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000bd,00000140,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000fc,00000140,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000013b,00000140,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000017a,00000140,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001b9,00000140,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001f8,00000140,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000237,00000140,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000276,00000140,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002b5,00000140,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002f4,00000140,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000333,00000140,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000372,00000140,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003b1,00000140,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003f0,00000140,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000042f,00000140,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000046e,00000140,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ad,00000140,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ec,00000140,00000013,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000000,00000180,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000003f,00000180,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000007e,00000180,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000bd,00000180,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000fc,00000180,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000013b,00000180,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000017a,00000180,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001b9,00000180,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001f8,00000180,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000237,00000180,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000276,00000180,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002b5,00000180,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002f4,00000180,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000333,00000180,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000372,00000180,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003b1,00000180,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003f0,00000180,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000042f,00000180,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000046e,00000180,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ad,00000180,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ec,00000180,00000013,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000000,000001c0,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000003f,000001c0,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000007e,000001c0,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000bd,000001c0,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000fc,000001c0,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000013b,000001c0,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000017a,000001c0,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001b9,000001c0,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001f8,000001c0,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000237,000001c0,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000276,000001c0,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002b5,000001c0,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002f4,000001c0,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000333,000001c0,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000372,000001c0,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003b1,000001c0,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003f0,000001c0,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000042f,000001c0,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000046e,000001c0,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ad,000001c0,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ec,000001c0,00000013,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000000,00000200,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000003f,00000200,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000007e,00000200,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000bd,00000200,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000fc,00000200,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000013b,00000200,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000017a,00000200,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001b9,00000200,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001f8,00000200,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000237,00000200,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000276,00000200,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002b5,00000200,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002f4,00000200,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000333,00000200,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000372,00000200,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003b1,00000200,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003f0,00000200,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000042f,00000200,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000046e,00000200,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ad,00000200,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ec,00000200,00000013,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000000,00000240,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000003f,00000240,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000007e,00000240,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000bd,00000240,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000fc,00000240,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000013b,00000240,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000017a,00000240,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001b9,00000240,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001f8,00000240,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000237,00000240,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000276,00000240,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002b5,00000240,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002f4,00000240,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000333,00000240,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000372,00000240,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003b1,00000240,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003f0,00000240,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000042f,00000240,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000046e,00000240,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ad,00000240,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ec,00000240,00000013,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000000,00000280,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000003f,00000280,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000007e,00000280,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000bd,00000280,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000fc,00000280,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000013b,00000280,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000017a,00000280,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001b9,00000280,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001f8,00000280,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000237,00000280,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000276,00000280,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002b5,00000280,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002f4,00000280,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000333,00000280,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000372,00000280,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003b1,00000280,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003f0,00000280,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000042f,00000280,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000046e,00000280,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ad,00000280,0000003f,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ec,00000280,00000013,00000040,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000000,000002c0,0000003f,00000002,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000003f,000002c0,0000003f,00000002,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000007e,000002c0,0000003f,00000002,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000bd,000002c0,0000003f,00000002,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000fc,000002c0,0000003f,00000002,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000013b,000002c0,0000003f,00000002,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000017a,000002c0,0000003f,00000002,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001b9,000002c0,0000003f,00000002,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001f8,000002c0,0000003f,00000002,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000237,000002c0,0000003f,00000002,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000276,000002c0,0000003f,00000002,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002b5,000002c0,0000003f,00000002,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002f4,000002c0,0000003f,00000002,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000333,000002c0,0000003f,00000002,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000372,000002c0,0000003f,00000002,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003b1,000002c0,0000003f,00000002,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003f0,000002c0,0000003f,00000002,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000042f,000002c0,0000003f,00000002,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000046e,000002c0,0000003f,00000002,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ad,000002c0,0000003f,00000002,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ec,000002c0,00000013,00000002,0000050c,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.SelectObject(0000050c,0000006c) ret=0100287b 0009:Ret gdi32.SelectObject() retval=00000524 ret=0100287b 0009:Call gdi32.DeleteObject(00000524) ret=01002884 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01002884 0009:Call gdi32.DeleteDC(0000050c) ret=0100288d 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100288d 0009:Call gdi32.CreateCompatibleDC(00000314) ret=01005cf3 0009:Ret gdi32.CreateCompatibleDC() retval=00000538 ret=01005cf3 0009:Call gdi32.CreateCompatibleDC(00000314) ret=01005cf9 0009:Ret gdi32.CreateCompatibleDC() retval=00000544 ret=01005cf9 0009:Call user32.LoadBitmapW(01000000,010012c8 L"CARDBACK") ret=01005d0d 0009:Ret user32.LoadBitmapW() retval=0000055c ret=01005d0d 0009:Call gdi32.SelectObject(00000544,0000055c) ret=01005d1a 0009:Ret gdi32.SelectObject() retval=0000006c ret=01005d1a 0009:Call user32.LoadBitmapW(01000000,0000006c) ret=010028ff 0009:Ret user32.LoadBitmapW() retval=0000057c ret=010028ff 0009:Call gdi32.CreateCompatibleDC(00000314) ret=01002909 0009:Ret gdi32.CreateCompatibleDC() retval=00000590 ret=01002909 0009:Call gdi32.SelectObject(00000590,0000057c) ret=01002917 0009:Ret gdi32.SelectObject() retval=0000006c ret=01002917 0009:Call gdi32.BitBlt(00000314,00000033,0000000a,00000047,00000060,00000590,00000000,00000000,00cc0020) ret=01002938 0009:Ret gdi32.BitBlt() retval=00000001 ret=01002938 0009:Call gdi32.SelectObject(00000590,0000006c) ret=0100293e 0009:Ret gdi32.SelectObject() retval=0000057c ret=0100293e 0009:Call gdi32.DeleteObject(0000057c) ret=01002947 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01002947 0009:Call gdi32.DeleteDC(00000590) ret=0100294e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100294e 0009:Call gdi32.SetPixel(00000314,00000033,0000000a,00008000) ret=01002969 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002969 0009:Call gdi32.SetPixel(00000314,00000034,0000000a,00008000) ret=01002976 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002976 0009:Call gdi32.SetPixel(00000314,00000033,0000000b,00008000) ret=01002982 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002982 0009:Call gdi32.SetPixel(00000314,00000079,0000000a,00008000) ret=0100298f 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100298f 0009:Call gdi32.SetPixel(00000314,00000078,0000000a,00008000) ret=0100299c 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100299c 0009:Call gdi32.SetPixel(00000314,00000079,0000000b,00008000) ret=010029ab 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ab 0009:Call gdi32.SetPixel(00000314,00000033,00000069,00008000) ret=010029bf 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029bf 0009:Call gdi32.SetPixel(00000314,00000034,00000069,00008000) ret=010029d0 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029d0 0009:Call gdi32.SetPixel(00000314,00000033,00000068,00008000) ret=010029de 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029de 0009:Call gdi32.SetPixel(00000314,00000079,00000069,00008000) ret=010029ef 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ef 0009:Call gdi32.SetPixel(00000314,00000078,00000069,00008000) ret=01002a00 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a00 0009:Call gdi32.SetPixel(00000314,00000079,00000068,00008000) ret=01002a11 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a11 0009:Call user32.LoadBitmapW(01000000,0000006c) ret=010028ff 0009:Ret user32.LoadBitmapW() retval=000005a8 ret=010028ff 0009:Call gdi32.CreateCompatibleDC(00000314) ret=01002909 0009:Ret gdi32.CreateCompatibleDC() retval=000005bc ret=01002909 0009:Call gdi32.SelectObject(000005bc,000005a8) ret=01002917 0009:Ret gdi32.SelectObject() retval=0000006c ret=01002917 0009:Call gdi32.BitBlt(00000314,000000ad,0000000a,00000047,00000060,000005bc,00000000,00000000,00cc0020) ret=01002938 0009:Ret gdi32.BitBlt() retval=00000001 ret=01002938 0009:Call gdi32.SelectObject(000005bc,0000006c) ret=0100293e 0009:Ret gdi32.SelectObject() retval=000005a8 ret=0100293e 0009:Call gdi32.DeleteObject(000005a8) ret=01002947 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01002947 0009:Call gdi32.DeleteDC(000005bc) ret=0100294e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100294e 0009:Call gdi32.SetPixel(00000314,000000ad,0000000a,00008000) ret=01002969 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002969 0009:Call gdi32.SetPixel(00000314,000000ae,0000000a,00008000) ret=01002976 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002976 0009:Call gdi32.SetPixel(00000314,000000ad,0000000b,00008000) ret=01002982 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002982 0009:Call gdi32.SetPixel(00000314,000000f3,0000000a,00008000) ret=0100298f 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100298f 0009:Call gdi32.SetPixel(00000314,000000f2,0000000a,00008000) ret=0100299c 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100299c 0009:Call gdi32.SetPixel(00000314,000000f3,0000000b,00008000) ret=010029ab 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ab 0009:Call gdi32.SetPixel(00000314,000000ad,00000069,00008000) ret=010029bf 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029bf 0009:Call gdi32.SetPixel(00000314,000000ae,00000069,00008000) ret=010029d0 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029d0 0009:Call gdi32.SetPixel(00000314,000000ad,00000068,00008000) ret=010029de 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029de 0009:Call gdi32.SetPixel(00000314,000000f3,00000069,00008000) ret=010029ef 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ef 0009:Call gdi32.SetPixel(00000314,000000f2,00000069,00008000) ret=01002a00 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a00 0009:Call gdi32.SetPixel(00000314,000000f3,00000068,00008000) ret=01002a11 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a11 0009:Call user32.LoadBitmapW(01000000,0000006c) ret=010028ff 0009:Ret user32.LoadBitmapW() retval=000005d4 ret=010028ff 0009:Call gdi32.CreateCompatibleDC(00000314) ret=01002909 0009:Ret gdi32.CreateCompatibleDC() retval=000005e8 ret=01002909 0009:Call gdi32.SelectObject(000005e8,000005d4) ret=01002917 0009:Ret gdi32.SelectObject() retval=0000006c ret=01002917 0009:Call gdi32.BitBlt(00000314,00000127,0000000a,00000047,00000060,000005e8,00000000,00000000,00cc0020) ret=01002938 0009:Ret gdi32.BitBlt() retval=00000001 ret=01002938 0009:Call gdi32.SelectObject(000005e8,0000006c) ret=0100293e 0009:Ret gdi32.SelectObject() retval=000005d4 ret=0100293e 0009:Call gdi32.DeleteObject(000005d4) ret=01002947 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01002947 0009:Call gdi32.DeleteDC(000005e8) ret=0100294e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100294e 0009:Call gdi32.SetPixel(00000314,00000127,0000000a,00008000) ret=01002969 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002969 0009:Call gdi32.SetPixel(00000314,00000128,0000000a,00008000) ret=01002976 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002976 0009:Call gdi32.SetPixel(00000314,00000127,0000000b,00008000) ret=01002982 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002982 0009:Call gdi32.SetPixel(00000314,0000016d,0000000a,00008000) ret=0100298f 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100298f 0009:Call gdi32.SetPixel(00000314,0000016c,0000000a,00008000) ret=0100299c 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100299c 0009:Call gdi32.SetPixel(00000314,0000016d,0000000b,00008000) ret=010029ab 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ab 0009:Call gdi32.SetPixel(00000314,00000127,00000069,00008000) ret=010029bf 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029bf 0009:Call gdi32.SetPixel(00000314,00000128,00000069,00008000) ret=010029d0 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029d0 0009:Call gdi32.SetPixel(00000314,00000127,00000068,00008000) ret=010029de 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029de 0009:Call gdi32.SetPixel(00000314,0000016d,00000069,00008000) ret=010029ef 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ef 0009:Call gdi32.SetPixel(00000314,0000016c,00000069,00008000) ret=01002a00 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a00 0009:Call gdi32.SetPixel(00000314,0000016d,00000068,00008000) ret=01002a11 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a11 0009:Call user32.LoadBitmapW(01000000,0000006c) ret=010028ff 0009:Ret user32.LoadBitmapW() retval=00000600 ret=010028ff 0009:Call gdi32.CreateCompatibleDC(00000314) ret=01002909 0009:Ret gdi32.CreateCompatibleDC() retval=00000614 ret=01002909 0009:Call gdi32.SelectObject(00000614,00000600) ret=01002917 0009:Ret gdi32.SelectObject() retval=0000006c ret=01002917 0009:Call gdi32.BitBlt(00000314,000001a1,0000000a,00000047,00000060,00000614,00000000,00000000,00cc0020) ret=01002938 0009:Ret gdi32.BitBlt() retval=00000001 ret=01002938 0009:Call gdi32.SelectObject(00000614,0000006c) ret=0100293e 0009:Ret gdi32.SelectObject() retval=00000600 ret=0100293e 0009:Call gdi32.DeleteObject(00000600) ret=01002947 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01002947 0009:Call gdi32.DeleteDC(00000614) ret=0100294e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100294e 0009:Call gdi32.SetPixel(00000314,000001a1,0000000a,00008000) ret=01002969 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002969 0009:Call gdi32.SetPixel(00000314,000001a2,0000000a,00008000) ret=01002976 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002976 0009:Call gdi32.SetPixel(00000314,000001a1,0000000b,00008000) ret=01002982 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002982 0009:Call gdi32.SetPixel(00000314,000001e7,0000000a,00008000) ret=0100298f 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100298f 0009:Call gdi32.SetPixel(00000314,000001e6,0000000a,00008000) ret=0100299c 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100299c 0009:Call gdi32.SetPixel(00000314,000001e7,0000000b,00008000) ret=010029ab 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ab 0009:Call gdi32.SetPixel(00000314,000001a1,00000069,00008000) ret=010029bf 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029bf 0009:Call gdi32.SetPixel(00000314,000001a2,00000069,00008000) ret=010029d0 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029d0 0009:Call gdi32.SetPixel(00000314,000001a1,00000068,00008000) ret=010029de 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029de 0009:Call gdi32.SetPixel(00000314,000001e7,00000069,00008000) ret=010029ef 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ef 0009:Call gdi32.SetPixel(00000314,000001e6,00000069,00008000) ret=01002a00 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a00 0009:Call gdi32.SetPixel(00000314,000001e7,00000068,00008000) ret=01002a11 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a11 0009:Call user32.LoadBitmapW(01000000,0000006c) ret=010028ff 0009:Ret user32.LoadBitmapW() retval=0000062c ret=010028ff 0009:Call gdi32.CreateCompatibleDC(00000314) ret=01002909 0009:Ret gdi32.CreateCompatibleDC() retval=00000640 ret=01002909 0009:Call gdi32.SelectObject(00000640,0000062c) ret=01002917 0009:Ret gdi32.SelectObject() retval=0000006c ret=01002917 0009:Call gdi32.BitBlt(00000314,0000021b,0000000a,00000047,00000060,00000640,00000000,00000000,00cc0020) ret=01002938 0009:Ret gdi32.BitBlt() retval=00000001 ret=01002938 0009:Call gdi32.SelectObject(00000640,0000006c) ret=0100293e 0009:Ret gdi32.SelectObject() retval=0000062c ret=0100293e 0009:Call gdi32.DeleteObject(0000062c) ret=01002947 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01002947 0009:Call gdi32.DeleteDC(00000640) ret=0100294e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100294e 0009:Call gdi32.SetPixel(00000314,0000021b,0000000a,00008000) ret=01002969 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002969 0009:Call gdi32.SetPixel(00000314,0000021c,0000000a,00008000) ret=01002976 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002976 0009:Call gdi32.SetPixel(00000314,0000021b,0000000b,00008000) ret=01002982 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002982 0009:Call gdi32.SetPixel(00000314,00000261,0000000a,00008000) ret=0100298f 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100298f 0009:Call gdi32.SetPixel(00000314,00000260,0000000a,00008000) ret=0100299c 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100299c 0009:Call gdi32.SetPixel(00000314,00000261,0000000b,00008000) ret=010029ab 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ab 0009:Call gdi32.SetPixel(00000314,0000021b,00000069,00008000) ret=010029bf 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029bf 0009:Call gdi32.SetPixel(00000314,0000021c,00000069,00008000) ret=010029d0 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029d0 0009:Call gdi32.SetPixel(00000314,0000021b,00000068,00008000) ret=010029de 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029de 0009:Call gdi32.SetPixel(00000314,00000261,00000069,00008000) ret=010029ef 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ef 0009:Call gdi32.SetPixel(00000314,00000260,00000069,00008000) ret=01002a00 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a00 0009:Call gdi32.SetPixel(00000314,00000261,00000068,00008000) ret=01002a11 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a11 0009:Call user32.LoadBitmapW(01000000,0000006c) ret=010028ff 0009:Ret user32.LoadBitmapW() retval=00000658 ret=010028ff 0009:Call gdi32.CreateCompatibleDC(00000314) ret=01002909 0009:Ret gdi32.CreateCompatibleDC() retval=0000066c ret=01002909 0009:Call gdi32.SelectObject(0000066c,00000658) ret=01002917 0009:Ret gdi32.SelectObject() retval=0000006c ret=01002917 0009:Call gdi32.BitBlt(00000314,00000295,0000000a,00000047,00000060,0000066c,00000000,00000000,00cc0020) ret=01002938 0009:Ret gdi32.BitBlt() retval=00000001 ret=01002938 0009:Call gdi32.SelectObject(0000066c,0000006c) ret=0100293e 0009:Ret gdi32.SelectObject() retval=00000658 ret=0100293e 0009:Call gdi32.DeleteObject(00000658) ret=01002947 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01002947 0009:Call gdi32.DeleteDC(0000066c) ret=0100294e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100294e 0009:Call gdi32.SetPixel(00000314,00000295,0000000a,00008000) ret=01002969 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002969 0009:Call gdi32.SetPixel(00000314,00000296,0000000a,00008000) ret=01002976 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002976 0009:Call gdi32.SetPixel(00000314,00000295,0000000b,00008000) ret=01002982 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002982 0009:Call gdi32.SetPixel(00000314,000002db,0000000a,00008000) ret=0100298f 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100298f 0009:Call gdi32.SetPixel(00000314,000002da,0000000a,00008000) ret=0100299c 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100299c 0009:Call gdi32.SetPixel(00000314,000002db,0000000b,00008000) ret=010029ab 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ab 0009:Call gdi32.SetPixel(00000314,00000295,00000069,00008000) ret=010029bf 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029bf 0009:Call gdi32.SetPixel(00000314,00000296,00000069,00008000) ret=010029d0 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029d0 0009:Call gdi32.SetPixel(00000314,00000295,00000068,00008000) ret=010029de 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029de 0009:Call gdi32.SetPixel(00000314,000002db,00000069,00008000) ret=010029ef 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ef 0009:Call gdi32.SetPixel(00000314,000002da,00000069,00008000) ret=01002a00 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a00 0009:Call gdi32.SetPixel(00000314,000002db,00000068,00008000) ret=01002a11 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a11 0009:Call user32.LoadBitmapW(01000000,0000006c) ret=010028ff 0009:Ret user32.LoadBitmapW() retval=00000684 ret=010028ff 0009:Call gdi32.CreateCompatibleDC(00000314) ret=01002909 0009:Ret gdi32.CreateCompatibleDC() retval=00000698 ret=01002909 0009:Call gdi32.SelectObject(00000698,00000684) ret=01002917 0009:Ret gdi32.SelectObject() retval=0000006c ret=01002917 0009:Call gdi32.BitBlt(00000314,0000030f,0000000a,00000047,00000060,00000698,00000000,00000000,00cc0020) ret=01002938 0009:Ret gdi32.BitBlt() retval=00000001 ret=01002938 0009:Call gdi32.SelectObject(00000698,0000006c) ret=0100293e 0009:Ret gdi32.SelectObject() retval=00000684 ret=0100293e 0009:Call gdi32.DeleteObject(00000684) ret=01002947 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01002947 0009:Call gdi32.DeleteDC(00000698) ret=0100294e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100294e 0009:Call gdi32.SetPixel(00000314,0000030f,0000000a,00008000) ret=01002969 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002969 0009:Call gdi32.SetPixel(00000314,00000310,0000000a,00008000) ret=01002976 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002976 0009:Call gdi32.SetPixel(00000314,0000030f,0000000b,00008000) ret=01002982 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002982 0009:Call gdi32.SetPixel(00000314,00000355,0000000a,00008000) ret=0100298f 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100298f 0009:Call gdi32.SetPixel(00000314,00000354,0000000a,00008000) ret=0100299c 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100299c 0009:Call gdi32.SetPixel(00000314,00000355,0000000b,00008000) ret=010029ab 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ab 0009:Call gdi32.SetPixel(00000314,0000030f,00000069,00008000) ret=010029bf 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029bf 0009:Call gdi32.SetPixel(00000314,00000310,00000069,00008000) ret=010029d0 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029d0 0009:Call gdi32.SetPixel(00000314,0000030f,00000068,00008000) ret=010029de 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029de 0009:Call gdi32.SetPixel(00000314,00000355,00000069,00008000) ret=010029ef 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ef 0009:Call gdi32.SetPixel(00000314,00000354,00000069,00008000) ret=01002a00 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a00 0009:Call gdi32.SetPixel(00000314,00000355,00000068,00008000) ret=01002a11 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a11 0009:Call user32.LoadBitmapW(01000000,0000006c) ret=010028ff 0009:Ret user32.LoadBitmapW() retval=000006b0 ret=010028ff 0009:Call gdi32.CreateCompatibleDC(00000314) ret=01002909 0009:Ret gdi32.CreateCompatibleDC() retval=000006c4 ret=01002909 0009:Call gdi32.SelectObject(000006c4,000006b0) ret=01002917 0009:Ret gdi32.SelectObject() retval=0000006c ret=01002917 0009:Call gdi32.BitBlt(00000314,00000389,0000000a,00000047,00000060,000006c4,00000000,00000000,00cc0020) ret=01002938 0009:Ret gdi32.BitBlt() retval=00000001 ret=01002938 0009:Call gdi32.SelectObject(000006c4,0000006c) ret=0100293e 0009:Ret gdi32.SelectObject() retval=000006b0 ret=0100293e 0009:Call gdi32.DeleteObject(000006b0) ret=01002947 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01002947 0009:Call gdi32.DeleteDC(000006c4) ret=0100294e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100294e 0009:Call gdi32.SetPixel(00000314,00000389,0000000a,00008000) ret=01002969 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002969 0009:Call gdi32.SetPixel(00000314,0000038a,0000000a,00008000) ret=01002976 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002976 0009:Call gdi32.SetPixel(00000314,00000389,0000000b,00008000) ret=01002982 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002982 0009:Call gdi32.SetPixel(00000314,000003cf,0000000a,00008000) ret=0100298f 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100298f 0009:Call gdi32.SetPixel(00000314,000003ce,0000000a,00008000) ret=0100299c 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100299c 0009:Call gdi32.SetPixel(00000314,000003cf,0000000b,00008000) ret=010029ab 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ab 0009:Call gdi32.SetPixel(00000314,00000389,00000069,00008000) ret=010029bf 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029bf 0009:Call gdi32.SetPixel(00000314,0000038a,00000069,00008000) ret=010029d0 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029d0 0009:Call gdi32.SetPixel(00000314,00000389,00000068,00008000) ret=010029de 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029de 0009:Call gdi32.SetPixel(00000314,000003cf,00000069,00008000) ret=010029ef 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ef 0009:Call gdi32.SetPixel(00000314,000003ce,00000069,00008000) ret=01002a00 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a00 0009:Call gdi32.SetPixel(00000314,000003cf,00000068,00008000) ret=01002a11 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a11 0009:Call user32.LoadBitmapW(01000000,0000006c) ret=010028ff 0009:Ret user32.LoadBitmapW() retval=000006dc ret=010028ff 0009:Call gdi32.CreateCompatibleDC(00000314) ret=01002909 0009:Ret gdi32.CreateCompatibleDC() retval=000006f0 ret=01002909 0009:Call gdi32.SelectObject(000006f0,000006dc) ret=01002917 0009:Ret gdi32.SelectObject() retval=0000006c ret=01002917 0009:Call gdi32.BitBlt(00000314,00000403,0000000a,00000047,00000060,000006f0,00000000,00000000,00cc0020) ret=01002938 0009:Ret gdi32.BitBlt() retval=00000001 ret=01002938 0009:Call gdi32.SelectObject(000006f0,0000006c) ret=0100293e 0009:Ret gdi32.SelectObject() retval=000006dc ret=0100293e 0009:Call gdi32.DeleteObject(000006dc) ret=01002947 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01002947 0009:Call gdi32.DeleteDC(000006f0) ret=0100294e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100294e 0009:Call gdi32.SetPixel(00000314,00000403,0000000a,00008000) ret=01002969 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002969 0009:Call gdi32.SetPixel(00000314,00000404,0000000a,00008000) ret=01002976 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002976 0009:Call gdi32.SetPixel(00000314,00000403,0000000b,00008000) ret=01002982 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002982 0009:Call gdi32.SetPixel(00000314,00000449,0000000a,00008000) ret=0100298f 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100298f 0009:Call gdi32.SetPixel(00000314,00000448,0000000a,00008000) ret=0100299c 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100299c 0009:Call gdi32.SetPixel(00000314,00000449,0000000b,00008000) ret=010029ab 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ab 0009:Call gdi32.SetPixel(00000314,00000403,00000069,00008000) ret=010029bf 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029bf 0009:Call gdi32.SetPixel(00000314,00000404,00000069,00008000) ret=010029d0 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029d0 0009:Call gdi32.SetPixel(00000314,00000403,00000068,00008000) ret=010029de 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029de 0009:Call gdi32.SetPixel(00000314,00000449,00000069,00008000) ret=010029ef 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ef 0009:Call gdi32.SetPixel(00000314,00000448,00000069,00008000) ret=01002a00 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a00 0009:Call gdi32.SetPixel(00000314,00000449,00000068,00008000) ret=01002a11 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a11 0009:Call user32.LoadBitmapW(01000000,0000006c) ret=010028ff 0009:Ret user32.LoadBitmapW() retval=00000708 ret=010028ff 0009:Call gdi32.CreateCompatibleDC(00000314) ret=01002909 0009:Ret gdi32.CreateCompatibleDC() retval=0000071c ret=01002909 0009:Call gdi32.SelectObject(0000071c,00000708) ret=01002917 0009:Ret gdi32.SelectObject() retval=0000006c ret=01002917 0009:Call gdi32.BitBlt(00000314,0000047d,0000000a,00000047,00000060,0000071c,00000000,00000000,00cc0020) ret=01002938 0009:Ret gdi32.BitBlt() retval=00000001 ret=01002938 0009:Call gdi32.SelectObject(0000071c,0000006c) ret=0100293e 0009:Ret gdi32.SelectObject() retval=00000708 ret=0100293e 0009:Call gdi32.DeleteObject(00000708) ret=01002947 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01002947 0009:Call gdi32.DeleteDC(0000071c) ret=0100294e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100294e 0009:Call gdi32.SetPixel(00000314,0000047d,0000000a,00008000) ret=01002969 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002969 0009:Call gdi32.SetPixel(00000314,0000047e,0000000a,00008000) ret=01002976 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002976 0009:Call gdi32.SetPixel(00000314,0000047d,0000000b,00008000) ret=01002982 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002982 0009:Call gdi32.SetPixel(00000314,000004c3,0000000a,00008000) ret=0100298f 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100298f 0009:Call gdi32.SetPixel(00000314,000004c2,0000000a,00008000) ret=0100299c 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100299c 0009:Call gdi32.SetPixel(00000314,000004c3,0000000b,00008000) ret=010029ab 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ab 0009:Call gdi32.SetPixel(00000314,0000047d,00000069,00008000) ret=010029bf 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029bf 0009:Call gdi32.SetPixel(00000314,0000047e,00000069,00008000) ret=010029d0 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029d0 0009:Call gdi32.SetPixel(00000314,0000047d,00000068,00008000) ret=010029de 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029de 0009:Call gdi32.SetPixel(00000314,000004c3,00000069,00008000) ret=010029ef 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ef 0009:Call gdi32.SetPixel(00000314,000004c2,00000069,00008000) ret=01002a00 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a00 0009:Call gdi32.SetPixel(00000314,000004c3,00000068,00008000) ret=01002a11 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a11 0009:Call gdi32.SelectObject(00000544,0000006c) ret=010061a0 0009:Ret gdi32.SelectObject() retval=0000055c ret=010061a0 0009:Call gdi32.DeleteObject(0000055c) ret=010061a9 0009:Ret gdi32.DeleteObject() retval=00000001 ret=010061a9 0009:Call gdi32.DeleteDC(00000544) ret=010061b4 0009:Ret gdi32.DeleteDC() retval=00000001 ret=010061b4 0009:Call gdi32.DeleteDC(00000538) ret=010061b9 0009:Ret gdi32.DeleteDC() retval=00000001 ret=010061b9 0009:Call user32.GetClientRect(00010030,0033f250) ret=01003826 0009:Ret user32.GetClientRect() retval=00000001 ret=01003826 0009:Call user32.GetClientRect(00010030,0033f200) ret=01002b2e 0009:Ret user32.GetClientRect() retval=00000001 ret=01002b2e 0009:Call user32.OffsetRect(0033f250,00000000,00000000) ret=01004a4e 0009:Ret user32.OffsetRect() retval=00000001 ret=01004a4e 0009:Call gdi32.CreateSolidBrush(00007f00) ret=01004a59 0009:Ret gdi32.CreateSolidBrush() retval=00000728 ret=01004a59 0009:Call gdi32.GetStockObject(00000004) ret=01004a63 0009:Ret gdi32.GetStockObject() retval=00000054 ret=01004a63 0009:Call user32.FillRect(00000314,0033f250,00000728) ret=01004a78 0009:Ret user32.FillRect() retval=00000001 ret=01004a78 0009:Call gdi32.DeleteObject(00000728) ret=01004a7f 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01004a7f 0009:Call user32.FrameRect(00000314,0033f250,00000054) ret=01004a92 0009:Ret user32.FrameRect() retval=00000001 ret=01004a92 0009:Call gdi32.GetBkMode(00000314) ret=01004a99 0009:Ret gdi32.GetBkMode() retval=00000002 ret=01004a99 0009:Call gdi32.GetTextColor(00000314) ret=01004aa6 0009:Ret gdi32.GetTextColor() retval=00000000 ret=01004aa6 0009:Call gdi32.SetBkMode(00000314,00000001) ret=01004ab5 0009:Ret gdi32.SetBkMode() retval=00000002 ret=01004ab5 0009:Call gdi32.SetTextColor(00000314,00ffffff) ret=01004ac1 0009:Ret gdi32.SetTextColor() retval=00000000 ret=01004ac1 0009:Call user32.SetRect(0033f23c,00000225,00000276,0000027f,0000028a) ret=01004aec 0009:Ret user32.SetRect() retval=00000001 ret=01004aec 0009:Call user32.LoadStringW(01000000,00000035,01011800,00000400) ret=0100361b 0009:Ret user32.LoadStringW() retval=00000006 ret=0100361b 0009:Call user32.DrawTextW(00000314,01011800 L"Score:",ffffffff,0033f23c,00000022) ret=01004b08 0009:Ret user32.DrawTextW() retval=00000010 ret=01004b08 0009:Call user32.SetRect(0033f23c,00000225,0000028a,0000027f,000002a8) ret=01004b2d 0009:Ret user32.SetRect() retval=00000001 ret=01004b2d 0009:Call user32.LoadStringW(01000000,00000036,01011800,00000400) ret=0100361b 0009:Ret user32.LoadStringW() retval=00000006 ret=0100361b 0009:Call user32.DrawTextW(00000314,01011800 L"Moves:",ffffffff,0033f23c,00000022) ret=01004b43 0009:Ret user32.DrawTextW() retval=00000010 ret=01004b43 0009:Call user32.SetRect(0033f23c,00000289,00000276,000002e3,0000028a) ret=01004b8c 0009:Ret user32.SetRect() retval=00000001 ret=01004b8c 0009:Call user32.DrawTextW(00000314,0033f264 L"0",ffffffff,0033f23c,00000020) ret=01004ba1 0009:Ret user32.DrawTextW() retval=00000010 ret=01004ba1 0009:Call user32.SetRect(0033f23c,00000289,0000028a,000002e3,000002a8) ret=01004bea 0009:Ret user32.SetRect() retval=00000001 ret=01004bea 0009:Call user32.DrawTextW(00000314,0033f264 L"0",ffffffff,0033f23c,00000020) ret=01004bff 0009:Ret user32.DrawTextW() retval=00000010 ret=01004bff 0009:Call gdi32.SetBkMode(00000314,00000002) ret=01004c0c 0009:Ret gdi32.SetBkMode() retval=00000001 ret=01004c0c 0009:Call gdi32.SetTextColor(00000314,00000000) ret=01004c19 0009:Ret gdi32.SetTextColor() retval=00ffffff ret=01004c19 0009:Call user32.GetClientRect(00010030,0033f308) ret=01002b2e 0009:Ret user32.GetClientRect() retval=00000001 ret=01002b2e 0009:Call user32.GetClientRect(00010030,0033f310) ret=01002b2e 0009:Ret user32.GetClientRect() retval=00000001 ret=01002b2e 0009:Call user32.EndPaint(00010030,0033f424) ret=01006ee5 0009:Ret user32.EndPaint() retval=00000001 ret=01006ee5 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_PAINT,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_SHOWWINDOW,wp=00000001,lp=00000000) 0009:Call dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_SHOWWINDOW,wp=00000001,lp=00000000) 0009:Ret dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_SHOWWINDOW,wp=00000001,lp=00000000) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_SHOWWINDOW,wp=00000001,lp=00000000) retval=00000000 0009:Call window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_WINDOWPOSCHANGING,wp=00000000,lp=0033f4a0) 0009:Call dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_WINDOWPOSCHANGING,wp=00000000,lp=0033f4a0) 0009:Ret dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_WINDOWPOSCHANGING,wp=00000000,lp=0033f4a0) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_WINDOWPOSCHANGING,wp=00000000,lp=0033f4a0) retval=00000000 0009:Call window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_GETICON,wp=00000001,lp=00000000) 0009:Call dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_GETICON,wp=00000001,lp=00000000) 0009:Ret dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_GETICON,wp=00000001,lp=00000000) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_GETICON,wp=00000001,lp=00000000) retval=00000000 0009:Call window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_WINDOWPOSCHANGED,wp=00000000,lp=0033f4a0) 0009:Call dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_WINDOWPOSCHANGED,wp=00000000,lp=0033f4a0) 0009:Ret dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_WINDOWPOSCHANGED,wp=00000000,lp=0033f4a0) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_WINDOWPOSCHANGED,wp=00000000,lp=0033f4a0) retval=00000000 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_ENTERIDLE,wp=00000000,lp=00010032) 0009:Call user32.DefWindowProcW(00010030,00000121,00000000,00010032) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_ENTERIDLE,wp=00000000,lp=00010032) retval=00000000 0009:Call window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_PAINT,wp=00000000,lp=00000000) 0009:Call dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_PAINT,wp=00000000,lp=00000000) 0009:Ret dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_PAINT,wp=00000000,lp=00000000) retval=00000000 result=00000000 0009:Call window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_NCPAINT,wp=00000001,lp=00000000) 0009:Call dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_NCPAINT,wp=00000001,lp=00000000) 0009:Ret dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_NCPAINT,wp=00000001,lp=00000000) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_NCPAINT,wp=00000001,lp=00000000) retval=00000000 0009:Call window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_ERASEBKGND,wp=00000314,lp=00000000) 0009:Call dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_ERASEBKGND,wp=00000314,lp=00000000) 0009:Ret dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_ERASEBKGND,wp=00000314,lp=00000000) retval=00000000 result=00000000 0009:Call window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_CTLCOLORDLG,wp=00000314,lp=00010032) 0009:Call dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_CTLCOLORDLG,wp=00000314,lp=00010032) 0009:Ret dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_CTLCOLORDLG,wp=00000314,lp=00010032) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_CTLCOLORDLG,wp=00000314,lp=00010032) retval=0000010c 0009:Ret window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_ERASEBKGND,wp=00000314,lp=00000000) retval=00000001 0009:Ret window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_PAINT,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x10034,msg=WM_PAINT,wp=00000000,lp=00000000) 0009:Call window proc 0x7eaf1c70 (hwnd=0x10034,msg=WM_NCPAINT,wp=00000001,lp=00000000) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x10034,msg=WM_NCPAINT,wp=00000001,lp=00000000) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x10034,msg=WM_ERASEBKGND,wp=00000314,lp=00000000) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x10034,msg=WM_ERASEBKGND,wp=00000314,lp=00000000) retval=00000001 0009:Call window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_CTLCOLORSTATIC,wp=00000314,lp=00010034) 0009:Call dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_CTLCOLORSTATIC,wp=00000314,lp=00010034) 0009:Ret dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_CTLCOLORSTATIC,wp=00000314,lp=00010034) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_CTLCOLORSTATIC,wp=00000314,lp=00010034) retval=0000010c 0009:Ret window proc 0x7eaf1c70 (hwnd=0x10034,msg=WM_PAINT,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x10036,msg=WM_PAINT,wp=00000000,lp=00000000) 0009:Call window proc 0x7eaf1c70 (hwnd=0x10036,msg=WM_NCPAINT,wp=00000001,lp=00000000) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x10036,msg=WM_NCPAINT,wp=00000001,lp=00000000) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x10036,msg=WM_ERASEBKGND,wp=00000314,lp=00000000) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x10036,msg=WM_ERASEBKGND,wp=00000314,lp=00000000) retval=00000001 0009:Call window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_CTLCOLORSTATIC,wp=00000314,lp=00010036) 0009:Call dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_CTLCOLORSTATIC,wp=00000314,lp=00010036) 0009:Ret dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_CTLCOLORSTATIC,wp=00000314,lp=00010036) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_CTLCOLORSTATIC,wp=00000314,lp=00010036) retval=0000010c 0009:Ret window proc 0x7eaf1c70 (hwnd=0x10036,msg=WM_PAINT,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_MOUSEACTIVATE,wp=00010032,lp=02010002) 0009:Call dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_MOUSEACTIVATE,wp=00010032,lp=02010002) 0009:Ret dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_MOUSEACTIVATE,wp=00010032,lp=02010002) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_MOUSEACTIVATE,wp=00010032,lp=02010002) retval=00000001 0009:Call window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_PAINT,wp=00000000,lp=00000000) 0009:Call dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_PAINT,wp=00000000,lp=00000000) 0009:Ret dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_PAINT,wp=00000000,lp=00000000) retval=00000000 result=00000000 0009:Call window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_ERASEBKGND,wp=00000314,lp=00000000) 0009:Call dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_ERASEBKGND,wp=00000314,lp=00000000) 0009:Ret dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_ERASEBKGND,wp=00000314,lp=00000000) retval=00000000 result=00000000 0009:Call window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_CTLCOLORDLG,wp=00000314,lp=00010032) 0009:Call dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_CTLCOLORDLG,wp=00000314,lp=00010032) 0009:Ret dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_CTLCOLORDLG,wp=00000314,lp=00010032) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_CTLCOLORDLG,wp=00000314,lp=00010032) retval=0000010c 0009:Ret window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_ERASEBKGND,wp=00000314,lp=00000000) retval=00000001 0009:Ret window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_PAINT,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x10034,msg=WM_PAINT,wp=00000000,lp=00000000) 0009:Call window proc 0x7eaf1c70 (hwnd=0x10034,msg=WM_NCPAINT,wp=00000001,lp=00000000) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x10034,msg=WM_NCPAINT,wp=00000001,lp=00000000) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x10034,msg=WM_ERASEBKGND,wp=00000314,lp=00000000) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x10034,msg=WM_ERASEBKGND,wp=00000314,lp=00000000) retval=00000001 0009:Call window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_CTLCOLORSTATIC,wp=00000314,lp=00010034) 0009:Call dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_CTLCOLORSTATIC,wp=00000314,lp=00010034) 0009:Ret dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_CTLCOLORSTATIC,wp=00000314,lp=00010034) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_CTLCOLORSTATIC,wp=00000314,lp=00010034) retval=0000010c 0009:Ret window proc 0x7eaf1c70 (hwnd=0x10034,msg=WM_PAINT,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x10036,msg=WM_PAINT,wp=00000000,lp=00000000) 0009:Call window proc 0x7eaf1c70 (hwnd=0x10036,msg=WM_NCPAINT,wp=00000001,lp=00000000) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x10036,msg=WM_NCPAINT,wp=00000001,lp=00000000) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x10036,msg=WM_ERASEBKGND,wp=00000314,lp=00000000) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x10036,msg=WM_ERASEBKGND,wp=00000314,lp=00000000) retval=00000001 0009:Call window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_CTLCOLORSTATIC,wp=00000314,lp=00010036) 0009:Call dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_CTLCOLORSTATIC,wp=00000314,lp=00010036) 0009:Ret dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_CTLCOLORSTATIC,wp=00000314,lp=00010036) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_CTLCOLORSTATIC,wp=00000314,lp=00010036) retval=0000010c 0009:Ret window proc 0x7eaf1c70 (hwnd=0x10036,msg=WM_PAINT,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x10038,msg=WM_PAINT,wp=00000000,lp=00000000) 0009:Call window proc 0x7eaf1c70 (hwnd=0x10038,msg=WM_NCPAINT,wp=00000001,lp=00000000) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x10038,msg=WM_NCPAINT,wp=00000001,lp=00000000) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x10038,msg=WM_ERASEBKGND,wp=00000314,lp=00000000) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x10038,msg=WM_ERASEBKGND,wp=00000314,lp=00000000) retval=00000001 0009:Call window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_CTLCOLORSTATIC,wp=00000314,lp=00010038) 0009:Call dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_CTLCOLORSTATIC,wp=00000314,lp=00010038) 0009:Ret dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_CTLCOLORSTATIC,wp=00000314,lp=00010038) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_CTLCOLORSTATIC,wp=00000314,lp=00010038) retval=0000010c 0009:Ret window proc 0x7eaf1c70 (hwnd=0x10038,msg=WM_PAINT,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x1003a,msg=WM_PAINT,wp=00000000,lp=00000000) 0009:Call window proc 0x7eaf1c70 (hwnd=0x1003a,msg=WM_NCPAINT,wp=00000001,lp=00000000) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x1003a,msg=WM_NCPAINT,wp=00000001,lp=00000000) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x1003a,msg=WM_ERASEBKGND,wp=00000314,lp=00000000) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x1003a,msg=WM_ERASEBKGND,wp=00000314,lp=00000000) retval=00000001 0009:Call window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_CTLCOLORSTATIC,wp=00000314,lp=0001003a) 0009:Call dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_CTLCOLORSTATIC,wp=00000314,lp=0001003a) 0009:Ret dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_CTLCOLORSTATIC,wp=00000314,lp=0001003a) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_CTLCOLORSTATIC,wp=00000314,lp=0001003a) retval=0000010c 0009:Ret window proc 0x7eaf1c70 (hwnd=0x1003a,msg=WM_PAINT,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x1003c,msg=WM_PAINT,wp=00000000,lp=00000000) 0009:Call window proc 0x7eaf1c70 (hwnd=0x1003c,msg=WM_NCPAINT,wp=00000001,lp=00000000) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x1003c,msg=WM_NCPAINT,wp=00000001,lp=00000000) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x1003c,msg=WM_ERASEBKGND,wp=00000314,lp=00000000) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x1003c,msg=WM_ERASEBKGND,wp=00000314,lp=00000000) retval=00000001 0009:Call window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_CTLCOLORSTATIC,wp=00000314,lp=0001003c) 0009:Call dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_CTLCOLORSTATIC,wp=00000314,lp=0001003c) 0009:Ret dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_CTLCOLORSTATIC,wp=00000314,lp=0001003c) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_CTLCOLORSTATIC,wp=00000314,lp=0001003c) retval=0000010c 0009:Ret window proc 0x7eaf1c70 (hwnd=0x1003c,msg=WM_PAINT,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x1003e,msg=WM_PAINT,wp=00000000,lp=00000000) 0009:Call window proc 0x7eaf1c70 (hwnd=0x1003e,msg=WM_NCPAINT,wp=00000001,lp=00000000) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x1003e,msg=WM_NCPAINT,wp=00000001,lp=00000000) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x1003e,msg=WM_ERASEBKGND,wp=00000314,lp=00000000) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x1003e,msg=WM_ERASEBKGND,wp=00000314,lp=00000000) retval=00000001 0009:Call window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_CTLCOLORSTATIC,wp=00000314,lp=0001003e) 0009:Call dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_CTLCOLORSTATIC,wp=00000314,lp=0001003e) 0009:Ret dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_CTLCOLORSTATIC,wp=00000314,lp=0001003e) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_CTLCOLORSTATIC,wp=00000314,lp=0001003e) retval=0000010c 0009:Ret window proc 0x7eaf1c70 (hwnd=0x1003e,msg=WM_PAINT,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x10040,msg=WM_PAINT,wp=00000000,lp=00000000) 0009:Call window proc 0x7eaf1c70 (hwnd=0x10040,msg=WM_NCPAINT,wp=00000001,lp=00000000) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x10040,msg=WM_NCPAINT,wp=00000001,lp=00000000) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x10040,msg=WM_ERASEBKGND,wp=00000314,lp=00000000) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x10040,msg=WM_ERASEBKGND,wp=00000314,lp=00000000) retval=00000001 0009:Call window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_CTLCOLORSTATIC,wp=00000314,lp=00010040) 0009:Call dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_CTLCOLORSTATIC,wp=00000314,lp=00010040) 0009:Ret dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_CTLCOLORSTATIC,wp=00000314,lp=00010040) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_CTLCOLORSTATIC,wp=00000314,lp=00010040) retval=0000010c 0009:Ret window proc 0x7eaf1c70 (hwnd=0x10040,msg=WM_PAINT,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x10042,msg=WM_PAINT,wp=00000000,lp=00000000) 0009:Call window proc 0x7eaf1c70 (hwnd=0x10042,msg=WM_NCPAINT,wp=00000001,lp=00000000) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x10042,msg=WM_NCPAINT,wp=00000001,lp=00000000) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x10042,msg=WM_ERASEBKGND,wp=00000314,lp=00000000) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x10042,msg=WM_ERASEBKGND,wp=00000314,lp=00000000) retval=00000001 0009:Call window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_CTLCOLORSTATIC,wp=00000314,lp=00010042) 0009:Call dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_CTLCOLORSTATIC,wp=00000314,lp=00010042) 0009:Ret dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_CTLCOLORSTATIC,wp=00000314,lp=00010042) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_CTLCOLORSTATIC,wp=00000314,lp=00010042) retval=0000010c 0009:Ret window proc 0x7eaf1c70 (hwnd=0x10042,msg=WM_PAINT,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x10044,msg=WM_PAINT,wp=00000000,lp=00000000) 0009:Call window proc 0x7ea833d0 (hwnd=0x10044,msg=WM_NCPAINT,wp=00000001,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x10044,msg=WM_NCPAINT,wp=00000001,lp=00000000) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x10044,msg=WM_ERASEBKGND,wp=00000314,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x10044,msg=WM_ERASEBKGND,wp=00000314,lp=00000000) retval=00000001 0009:Call window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_CTLCOLORSTATIC,wp=00000314,lp=00010044) 0009:Call dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_CTLCOLORSTATIC,wp=00000314,lp=00010044) 0009:Ret dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_CTLCOLORSTATIC,wp=00000314,lp=00010044) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_CTLCOLORSTATIC,wp=00000314,lp=00010044) retval=0000010c 0009:Ret window proc 0x7ea833d0 (hwnd=0x10044,msg=WM_PAINT,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x10046,msg=WM_PAINT,wp=00000000,lp=00000000) 0009:Call window proc 0x7ea833d0 (hwnd=0x10046,msg=WM_NCPAINT,wp=00000001,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x10046,msg=WM_NCPAINT,wp=00000001,lp=00000000) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x10046,msg=WM_ERASEBKGND,wp=00000314,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x10046,msg=WM_ERASEBKGND,wp=00000314,lp=00000000) retval=00000001 0009:Call window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_CTLCOLORSTATIC,wp=00000314,lp=00010046) 0009:Call dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_CTLCOLORSTATIC,wp=00000314,lp=00010046) 0009:Ret dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_CTLCOLORSTATIC,wp=00000314,lp=00010046) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_CTLCOLORSTATIC,wp=00000314,lp=00010046) retval=0000010c 0009:Ret window proc 0x7ea833d0 (hwnd=0x10046,msg=WM_PAINT,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x10048,msg=WM_PAINT,wp=00000000,lp=00000000) 0009:Call window proc 0x7ea833d0 (hwnd=0x10048,msg=WM_NCPAINT,wp=00000001,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x10048,msg=WM_NCPAINT,wp=00000001,lp=00000000) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x10048,msg=WM_ERASEBKGND,wp=00000314,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x10048,msg=WM_ERASEBKGND,wp=00000314,lp=00000000) retval=00000001 0009:Call window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_CTLCOLORSTATIC,wp=00000314,lp=00010048) 0009:Call dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_CTLCOLORSTATIC,wp=00000314,lp=00010048) 0009:Ret dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_CTLCOLORSTATIC,wp=00000314,lp=00010048) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_CTLCOLORSTATIC,wp=00000314,lp=00010048) retval=0000010c 0009:Ret window proc 0x7ea833d0 (hwnd=0x10048,msg=WM_PAINT,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_PAINT,wp=00000000,lp=00000000) 0009:Call window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_NCPAINT,wp=00000001,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_NCPAINT,wp=00000001,lp=00000000) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_ERASEBKGND,wp=00000314,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_ERASEBKGND,wp=00000314,lp=00000000) retval=00000001 0009:Call window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_CTLCOLORBTN,wp=00000314,lp=0001004a) 0009:Call dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_CTLCOLORBTN,wp=00000314,lp=0001004a) 0009:Ret dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_CTLCOLORBTN,wp=00000314,lp=0001004a) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_CTLCOLORBTN,wp=00000314,lp=0001004a) retval=0000010c 0009:Ret window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_PAINT,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x1004c,msg=WM_PAINT,wp=00000000,lp=00000000) 0009:Call window proc 0x7ea833d0 (hwnd=0x1004c,msg=WM_NCPAINT,wp=00000001,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x1004c,msg=WM_NCPAINT,wp=00000001,lp=00000000) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x1004c,msg=WM_ERASEBKGND,wp=00000314,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x1004c,msg=WM_ERASEBKGND,wp=00000314,lp=00000000) retval=00000001 0009:Call window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_CTLCOLORBTN,wp=00000314,lp=0001004c) 0009:Call dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_CTLCOLORBTN,wp=00000314,lp=0001004c) 0009:Ret dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_CTLCOLORBTN,wp=00000314,lp=0001004c) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_CTLCOLORBTN,wp=00000314,lp=0001004c) retval=0000010c 0009:Ret window proc 0x7ea833d0 (hwnd=0x1004c,msg=WM_PAINT,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_ENTERIDLE,wp=00000000,lp=00010032) 0009:Call user32.DefWindowProcW(00010030,00000121,00000000,00010032) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_ENTERIDLE,wp=00000000,lp=00010032) retval=00000000 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=0200fffe) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,0200fffe) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=0200fffe) retval=00000000 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=0200fffe) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,0200fffe) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=0200fffe) retval=00000000 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=0200fffe) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,0200fffe) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=0200fffe) retval=00000000 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=0200fffe) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,0200fffe) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=0200fffe) retval=00000000 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=0200fffe) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,0200fffe) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=0200fffe) retval=00000000 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=0200fffe) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,0200fffe) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=0200fffe) retval=00000000 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=0200fffe) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,0200fffe) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=0200fffe) retval=00000000 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=0200fffe) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,0200fffe) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=0200fffe) retval=00000000 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=0200fffe) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,0200fffe) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=0200fffe) retval=00000000 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=0200fffe) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,0200fffe) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=0200fffe) retval=00000000 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=0200fffe) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,0200fffe) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=0200fffe) retval=00000000 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=0200fffe) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,0200fffe) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=0200fffe) retval=00000000 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=0200fffe) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,0200fffe) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=0200fffe) retval=00000000 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=0200fffe) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,0200fffe) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=0200fffe) retval=00000000 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=0200fffe) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,0200fffe) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=0200fffe) retval=00000000 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=0200fffe) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,0200fffe) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=0200fffe) retval=00000000 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=0200fffe) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,0200fffe) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=0200fffe) retval=00000000 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=0200fffe) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,0200fffe) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=0200fffe) retval=00000000 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=0200fffe) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,0200fffe) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=0200fffe) retval=00000000 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=0200fffe) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,0200fffe) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=0200fffe) retval=00000000 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=0200fffe) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,0200fffe) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=0200fffe) retval=00000000 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=0200fffe) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,0200fffe) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=0200fffe) retval=00000000 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=0200fffe) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,0200fffe) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=0200fffe) retval=00000000 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=0200fffe) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,0200fffe) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=0200fffe) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x10046,msg=WM_NCHITTEST,wp=00000000,lp=019702f6) 0009:Ret window proc 0x7ea833d0 (hwnd=0x10046,msg=WM_NCHITTEST,wp=00000000,lp=019702f6) retval=00000001 0009:Call window proc 0x7ea833d0 (hwnd=0x10046,msg=WM_SETCURSOR,wp=00010046,lp=02000001) 0009:Call window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_SETCURSOR,wp=00010046,lp=02000001) 0009:Call dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_SETCURSOR,wp=00010046,lp=02000001) 0009:Ret dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_SETCURSOR,wp=00010046,lp=02000001) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_SETCURSOR,wp=00010046,lp=02000001) retval=00000000 0009:Ret window proc 0x7ea833d0 (hwnd=0x10046,msg=WM_SETCURSOR,wp=00010046,lp=02000001) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x10046,msg=WM_MOUSEMOVE,wp=00000000,lp=000d00bc) 0009:Ret window proc 0x7ea833d0 (hwnd=0x10046,msg=WM_MOUSEMOVE,wp=00000000,lp=000d00bc) retval=00000000 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_ENTERIDLE,wp=00000000,lp=00010032) 0009:Call user32.DefWindowProcW(00010030,00000121,00000000,00010032) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_ENTERIDLE,wp=00000000,lp=00010032) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x10048,msg=WM_NCHITTEST,wp=00000000,lp=01ad02d8) 0009:Ret window proc 0x7ea833d0 (hwnd=0x10048,msg=WM_NCHITTEST,wp=00000000,lp=01ad02d8) retval=00000001 0009:Call window proc 0x7ea833d0 (hwnd=0x10048,msg=WM_SETCURSOR,wp=00010048,lp=02000001) 0009:Call window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_SETCURSOR,wp=00010048,lp=02000001) 0009:Call dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_SETCURSOR,wp=00010048,lp=02000001) 0009:Ret dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_SETCURSOR,wp=00010048,lp=02000001) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_SETCURSOR,wp=00010048,lp=02000001) retval=00000000 0009:Ret window proc 0x7ea833d0 (hwnd=0x10048,msg=WM_SETCURSOR,wp=00010048,lp=02000001) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x10048,msg=WM_MOUSEMOVE,wp=00000000,lp=0009009e) 0009:Ret window proc 0x7ea833d0 (hwnd=0x10048,msg=WM_MOUSEMOVE,wp=00000000,lp=0009009e) retval=00000000 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_ENTERIDLE,wp=00000000,lp=00010032) 0009:Call user32.DefWindowProcW(00010030,00000121,00000000,00010032) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_ENTERIDLE,wp=00000000,lp=00010032) retval=00000000 0009:Call window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_NCHITTEST,wp=00000000,lp=01bd02be) 0009:Call dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_NCHITTEST,wp=00000000,lp=01bd02be) 0009:Ret dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_NCHITTEST,wp=00000000,lp=01bd02be) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_NCHITTEST,wp=00000000,lp=01bd02be) retval=00000001 0009:Call window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_SETCURSOR,wp=00010032,lp=02000001) 0009:Call dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_SETCURSOR,wp=00010032,lp=02000001) 0009:Ret dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_SETCURSOR,wp=00010032,lp=02000001) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_SETCURSOR,wp=00010032,lp=02000001) retval=00000000 0009:Call window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_MOUSEMOVE,wp=00000000,lp=007c00d2) 0009:Call dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_MOUSEMOVE,wp=00000000,lp=007c00d2) 0009:Ret dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_MOUSEMOVE,wp=00000000,lp=007c00d2) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_MOUSEMOVE,wp=00000000,lp=007c00d2) retval=00000000 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_ENTERIDLE,wp=00000000,lp=00010032) 0009:Call user32.DefWindowProcW(00010030,00000121,00000000,00010032) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_ENTERIDLE,wp=00000000,lp=00010032) retval=00000000 0009:Call window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_NCHITTEST,wp=00000000,lp=01c902a6) 0009:Call dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_NCHITTEST,wp=00000000,lp=01c902a6) 0009:Ret dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_NCHITTEST,wp=00000000,lp=01c902a6) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_NCHITTEST,wp=00000000,lp=01c902a6) retval=00000001 0009:Call window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_SETCURSOR,wp=00010032,lp=02000001) 0009:Call dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_SETCURSOR,wp=00010032,lp=02000001) 0009:Ret dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_SETCURSOR,wp=00010032,lp=02000001) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_SETCURSOR,wp=00010032,lp=02000001) retval=00000000 0009:Call window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_MOUSEMOVE,wp=00000000,lp=008800ba) 0009:Call dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_MOUSEMOVE,wp=00000000,lp=008800ba) 0009:Ret dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_MOUSEMOVE,wp=00000000,lp=008800ba) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_MOUSEMOVE,wp=00000000,lp=008800ba) retval=00000000 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_ENTERIDLE,wp=00000000,lp=00010032) 0009:Call user32.DefWindowProcW(00010030,00000121,00000000,00010032) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_ENTERIDLE,wp=00000000,lp=00010032) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x1004c,msg=WM_NCHITTEST,wp=00000000,lp=01d10294) 0009:Ret window proc 0x7ea833d0 (hwnd=0x1004c,msg=WM_NCHITTEST,wp=00000000,lp=01d10294) retval=00000001 0009:Call window proc 0x7ea833d0 (hwnd=0x1004c,msg=WM_SETCURSOR,wp=0001004c,lp=02000001) 0009:Call window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_SETCURSOR,wp=0001004c,lp=02000001) 0009:Call dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_SETCURSOR,wp=0001004c,lp=02000001) 0009:Ret dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_SETCURSOR,wp=0001004c,lp=02000001) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_SETCURSOR,wp=0001004c,lp=02000001) retval=00000000 0009:Ret window proc 0x7ea833d0 (hwnd=0x1004c,msg=WM_SETCURSOR,wp=0001004c,lp=02000001) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x1004c,msg=WM_MOUSEMOVE,wp=00000000,lp=00010009) 0009:Ret window proc 0x7ea833d0 (hwnd=0x1004c,msg=WM_MOUSEMOVE,wp=00000000,lp=00010009) retval=00000000 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_ENTERIDLE,wp=00000000,lp=00010032) 0009:Call user32.DefWindowProcW(00010030,00000121,00000000,00010032) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_ENTERIDLE,wp=00000000,lp=00010032) retval=00000000 0009:Call window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_NCHITTEST,wp=00000000,lp=01d70284) 0009:Call dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_NCHITTEST,wp=00000000,lp=01d70284) 0009:Ret dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_NCHITTEST,wp=00000000,lp=01d70284) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_NCHITTEST,wp=00000000,lp=01d70284) retval=00000001 0009:Call window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_SETCURSOR,wp=00010032,lp=02000001) 0009:Call dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_SETCURSOR,wp=00010032,lp=02000001) 0009:Ret dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_SETCURSOR,wp=00010032,lp=02000001) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_SETCURSOR,wp=00010032,lp=02000001) retval=00000000 0009:Call window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_MOUSEMOVE,wp=00000000,lp=00960098) 0009:Call dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_MOUSEMOVE,wp=00000000,lp=00960098) 0009:Ret dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_MOUSEMOVE,wp=00000000,lp=00960098) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_MOUSEMOVE,wp=00000000,lp=00960098) retval=00000000 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_ENTERIDLE,wp=00000000,lp=00010032) 0009:Call user32.DefWindowProcW(00010030,00000121,00000000,00010032) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_ENTERIDLE,wp=00000000,lp=00010032) retval=00000000 0009:Call window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_NCHITTEST,wp=00000000,lp=01db0278) 0009:Call dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_NCHITTEST,wp=00000000,lp=01db0278) 0009:Ret dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_NCHITTEST,wp=00000000,lp=01db0278) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_NCHITTEST,wp=00000000,lp=01db0278) retval=00000001 0009:Call window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_SETCURSOR,wp=00010032,lp=02000001) 0009:Call dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_SETCURSOR,wp=00010032,lp=02000001) 0009:Ret dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_SETCURSOR,wp=00010032,lp=02000001) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_SETCURSOR,wp=00010032,lp=02000001) retval=00000000 0009:Call window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_MOUSEMOVE,wp=00000000,lp=009a008c) 0009:Call dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_MOUSEMOVE,wp=00000000,lp=009a008c) 0009:Ret dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_MOUSEMOVE,wp=00000000,lp=009a008c) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_MOUSEMOVE,wp=00000000,lp=009a008c) retval=00000000 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_ENTERIDLE,wp=00000000,lp=00010032) 0009:Call user32.DefWindowProcW(00010030,00000121,00000000,00010032) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_ENTERIDLE,wp=00000000,lp=00010032) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_NCHITTEST,wp=00000000,lp=01dd026e) 0009:Ret window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_NCHITTEST,wp=00000000,lp=01dd026e) retval=00000001 0009:Call window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_SETCURSOR,wp=0001004a,lp=02000001) 0009:Call window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_SETCURSOR,wp=0001004a,lp=02000001) 0009:Call dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_SETCURSOR,wp=0001004a,lp=02000001) 0009:Ret dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_SETCURSOR,wp=0001004a,lp=02000001) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_SETCURSOR,wp=0001004a,lp=02000001) retval=00000000 0009:Ret window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_SETCURSOR,wp=0001004a,lp=02000001) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_MOUSEMOVE,wp=00000000,lp=000d0046) 0009:Ret window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_MOUSEMOVE,wp=00000000,lp=000d0046) retval=00000000 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_ENTERIDLE,wp=00000000,lp=00010032) 0009:Call user32.DefWindowProcW(00010030,00000121,00000000,00010032) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_ENTERIDLE,wp=00000000,lp=00010032) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_NCHITTEST,wp=00000000,lp=01df0266) 0009:Ret window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_NCHITTEST,wp=00000000,lp=01df0266) retval=00000001 0009:Call window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_SETCURSOR,wp=0001004a,lp=02000001) 0009:Call window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_SETCURSOR,wp=0001004a,lp=02000001) 0009:Call dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_SETCURSOR,wp=0001004a,lp=02000001) 0009:Ret dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_SETCURSOR,wp=0001004a,lp=02000001) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_SETCURSOR,wp=0001004a,lp=02000001) retval=00000000 0009:Ret window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_SETCURSOR,wp=0001004a,lp=02000001) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_MOUSEMOVE,wp=00000000,lp=000f003e) 0009:Ret window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_MOUSEMOVE,wp=00000000,lp=000f003e) retval=00000000 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_ENTERIDLE,wp=00000000,lp=00010032) 0009:Call user32.DefWindowProcW(00010030,00000121,00000000,00010032) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_ENTERIDLE,wp=00000000,lp=00010032) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_NCHITTEST,wp=00000000,lp=01e00264) 0009:Ret window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_NCHITTEST,wp=00000000,lp=01e00264) retval=00000001 0009:Call window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_SETCURSOR,wp=0001004a,lp=02000001) 0009:Call window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_SETCURSOR,wp=0001004a,lp=02000001) 0009:Call dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_SETCURSOR,wp=0001004a,lp=02000001) 0009:Ret dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_SETCURSOR,wp=0001004a,lp=02000001) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_SETCURSOR,wp=0001004a,lp=02000001) retval=00000000 0009:Ret window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_SETCURSOR,wp=0001004a,lp=02000001) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_MOUSEMOVE,wp=00000000,lp=0010003c) 0009:Ret window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_MOUSEMOVE,wp=00000000,lp=0010003c) retval=00000000 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_ENTERIDLE,wp=00000000,lp=00010032) 0009:Call user32.DefWindowProcW(00010030,00000121,00000000,00010032) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_ENTERIDLE,wp=00000000,lp=00010032) retval=00000000 0019:Ret user32.GetMessageW() retval=00000001 ret=7ec5ec4b 0019:Call user32.DispatchMessageW(0033f93c) ret=7ec5ec28 0019:Call window proc 0x7ec60b80 (hwnd=0x10026,msg=WM_TIMER,wp=00000001,lp=00000000) 0019:Ret window proc 0x7ec60b80 (hwnd=0x10026,msg=WM_TIMER,wp=00000001,lp=00000000) retval=00000000 0019:Ret user32.DispatchMessageW() retval=00000000 ret=7ec5ec28 0019:Call user32.GetMessageW(0033f93c,00000000,00000000,00000000) ret=7ec5ec4b 0009:Call window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_NCHITTEST,wp=00000000,lp=01de0263) 0009:Ret window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_NCHITTEST,wp=00000000,lp=01de0263) retval=00000001 0009:Call window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_SETCURSOR,wp=0001004a,lp=02000001) 0009:Call window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_SETCURSOR,wp=0001004a,lp=02000001) 0009:Call dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_SETCURSOR,wp=0001004a,lp=02000001) 0009:Ret dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_SETCURSOR,wp=0001004a,lp=02000001) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_SETCURSOR,wp=0001004a,lp=02000001) retval=00000000 0009:Ret window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_SETCURSOR,wp=0001004a,lp=02000001) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_MOUSEMOVE,wp=00000000,lp=000e003b) 0009:Ret window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_MOUSEMOVE,wp=00000000,lp=000e003b) retval=00000000 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_ENTERIDLE,wp=00000000,lp=00010032) 0009:Call user32.DefWindowProcW(00010030,00000121,00000000,00010032) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_ENTERIDLE,wp=00000000,lp=00010032) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_NCHITTEST,wp=00000000,lp=01dd0261) 0009:Ret window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_NCHITTEST,wp=00000000,lp=01dd0261) retval=00000001 0009:Call window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_SETCURSOR,wp=0001004a,lp=02000001) 0009:Call window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_SETCURSOR,wp=0001004a,lp=02000001) 0009:Call dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_SETCURSOR,wp=0001004a,lp=02000001) 0009:Ret dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_SETCURSOR,wp=0001004a,lp=02000001) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_SETCURSOR,wp=0001004a,lp=02000001) retval=00000000 0009:Ret window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_SETCURSOR,wp=0001004a,lp=02000001) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_MOUSEMOVE,wp=00000000,lp=000d0039) 0009:Ret window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_MOUSEMOVE,wp=00000000,lp=000d0039) retval=00000000 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_ENTERIDLE,wp=00000000,lp=00010032) 0009:Call user32.DefWindowProcW(00010030,00000121,00000000,00010032) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_ENTERIDLE,wp=00000000,lp=00010032) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_NCHITTEST,wp=00000000,lp=01dc0260) 0009:Ret window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_NCHITTEST,wp=00000000,lp=01dc0260) retval=00000001 0009:Call window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_SETCURSOR,wp=0001004a,lp=02000001) 0009:Call window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_SETCURSOR,wp=0001004a,lp=02000001) 0009:Call dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_SETCURSOR,wp=0001004a,lp=02000001) 0009:Ret dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_SETCURSOR,wp=0001004a,lp=02000001) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_SETCURSOR,wp=0001004a,lp=02000001) retval=00000000 0009:Ret window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_SETCURSOR,wp=0001004a,lp=02000001) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_MOUSEMOVE,wp=00000000,lp=000c0038) 0009:Ret window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_MOUSEMOVE,wp=00000000,lp=000c0038) retval=00000000 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_ENTERIDLE,wp=00000000,lp=00010032) 0009:Call user32.DefWindowProcW(00010030,00000121,00000000,00010032) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_ENTERIDLE,wp=00000000,lp=00010032) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_NCHITTEST,wp=00000000,lp=01db025f) 0009:Ret window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_NCHITTEST,wp=00000000,lp=01db025f) retval=00000001 0009:Call window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_SETCURSOR,wp=0001004a,lp=02000001) 0009:Call window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_SETCURSOR,wp=0001004a,lp=02000001) 0009:Call dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_SETCURSOR,wp=0001004a,lp=02000001) 0009:Ret dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_SETCURSOR,wp=0001004a,lp=02000001) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_SETCURSOR,wp=0001004a,lp=02000001) retval=00000000 0009:Ret window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_SETCURSOR,wp=0001004a,lp=02000001) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_MOUSEMOVE,wp=00000000,lp=000b0037) 0009:Ret window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_MOUSEMOVE,wp=00000000,lp=000b0037) retval=00000000 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_ENTERIDLE,wp=00000000,lp=00010032) 0009:Call user32.DefWindowProcW(00010030,00000121,00000000,00010032) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_ENTERIDLE,wp=00000000,lp=00010032) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_NCHITTEST,wp=00000000,lp=01db025e) 0009:Ret window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_NCHITTEST,wp=00000000,lp=01db025e) retval=00000001 0009:Call window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_SETCURSOR,wp=0001004a,lp=02000001) 0009:Call window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_SETCURSOR,wp=0001004a,lp=02000001) 0009:Call dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_SETCURSOR,wp=0001004a,lp=02000001) 0009:Ret dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_SETCURSOR,wp=0001004a,lp=02000001) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_SETCURSOR,wp=0001004a,lp=02000001) retval=00000000 0009:Ret window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_SETCURSOR,wp=0001004a,lp=02000001) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_MOUSEMOVE,wp=00000000,lp=000b0036) 0009:Ret window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_MOUSEMOVE,wp=00000000,lp=000b0036) retval=00000000 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_ENTERIDLE,wp=00000000,lp=00010032) 0009:Call user32.DefWindowProcW(00010030,00000121,00000000,00010032) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_ENTERIDLE,wp=00000000,lp=00010032) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_NCHITTEST,wp=00000000,lp=01da025c) 0009:Ret window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_NCHITTEST,wp=00000000,lp=01da025c) retval=00000001 0009:Call window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_SETCURSOR,wp=0001004a,lp=02000001) 0009:Call window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_SETCURSOR,wp=0001004a,lp=02000001) 0009:Call dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_SETCURSOR,wp=0001004a,lp=02000001) 0009:Ret dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_SETCURSOR,wp=0001004a,lp=02000001) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_SETCURSOR,wp=0001004a,lp=02000001) retval=00000000 0009:Ret window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_SETCURSOR,wp=0001004a,lp=02000001) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_MOUSEMOVE,wp=00000000,lp=000a0034) 0009:Ret window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_MOUSEMOVE,wp=00000000,lp=000a0034) retval=00000000 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_ENTERIDLE,wp=00000000,lp=00010032) 0009:Call user32.DefWindowProcW(00010030,00000121,00000000,00010032) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_ENTERIDLE,wp=00000000,lp=00010032) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_NCHITTEST,wp=00000000,lp=01d9025b) 0009:Ret window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_NCHITTEST,wp=00000000,lp=01d9025b) retval=00000001 0009:Call window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_SETCURSOR,wp=0001004a,lp=02000001) 0009:Call window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_SETCURSOR,wp=0001004a,lp=02000001) 0009:Call dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_SETCURSOR,wp=0001004a,lp=02000001) 0009:Ret dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_SETCURSOR,wp=0001004a,lp=02000001) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_SETCURSOR,wp=0001004a,lp=02000001) retval=00000000 0009:Ret window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_SETCURSOR,wp=0001004a,lp=02000001) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_MOUSEMOVE,wp=00000000,lp=00090033) 0009:Ret window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_MOUSEMOVE,wp=00000000,lp=00090033) retval=00000000 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_ENTERIDLE,wp=00000000,lp=00010032) 0009:Call user32.DefWindowProcW(00010030,00000121,00000000,00010032) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_ENTERIDLE,wp=00000000,lp=00010032) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_NCHITTEST,wp=00000000,lp=01d9025a) 0009:Ret window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_NCHITTEST,wp=00000000,lp=01d9025a) retval=00000001 0009:Call window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_SETCURSOR,wp=0001004a,lp=02000001) 0009:Call window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_SETCURSOR,wp=0001004a,lp=02000001) 0009:Call dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_SETCURSOR,wp=0001004a,lp=02000001) 0009:Ret dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_SETCURSOR,wp=0001004a,lp=02000001) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_SETCURSOR,wp=0001004a,lp=02000001) retval=00000000 0009:Ret window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_SETCURSOR,wp=0001004a,lp=02000001) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_MOUSEMOVE,wp=00000000,lp=00090032) 0009:Ret window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_MOUSEMOVE,wp=00000000,lp=00090032) retval=00000000 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_ENTERIDLE,wp=00000000,lp=00010032) 0009:Call user32.DefWindowProcW(00010030,00000121,00000000,00010032) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_ENTERIDLE,wp=00000000,lp=00010032) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_NCHITTEST,wp=00000000,lp=01d90259) 0009:Ret window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_NCHITTEST,wp=00000000,lp=01d90259) retval=00000001 0009:Call window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_SETCURSOR,wp=0001004a,lp=02000001) 0009:Call window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_SETCURSOR,wp=0001004a,lp=02000001) 0009:Call dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_SETCURSOR,wp=0001004a,lp=02000001) 0009:Ret dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_SETCURSOR,wp=0001004a,lp=02000001) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_SETCURSOR,wp=0001004a,lp=02000001) retval=00000000 0009:Ret window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_SETCURSOR,wp=0001004a,lp=02000001) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_MOUSEMOVE,wp=00000000,lp=00090031) 0009:Ret window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_MOUSEMOVE,wp=00000000,lp=00090031) retval=00000000 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_ENTERIDLE,wp=00000000,lp=00010032) 0009:Call user32.DefWindowProcW(00010030,00000121,00000000,00010032) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_ENTERIDLE,wp=00000000,lp=00010032) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_NCHITTEST,wp=00000000,lp=01d90258) 0009:Ret window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_NCHITTEST,wp=00000000,lp=01d90258) retval=00000001 0009:Call window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_SETCURSOR,wp=0001004a,lp=02000001) 0009:Call window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_SETCURSOR,wp=0001004a,lp=02000001) 0009:Call dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_SETCURSOR,wp=0001004a,lp=02000001) 0009:Ret dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_SETCURSOR,wp=0001004a,lp=02000001) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_SETCURSOR,wp=0001004a,lp=02000001) retval=00000000 0009:Ret window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_SETCURSOR,wp=0001004a,lp=02000001) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_MOUSEMOVE,wp=00000000,lp=00090030) 0009:Ret window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_MOUSEMOVE,wp=00000000,lp=00090030) retval=00000000 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_ENTERIDLE,wp=00000000,lp=00010032) 0009:Call user32.DefWindowProcW(00010030,00000121,00000000,00010032) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_ENTERIDLE,wp=00000000,lp=00010032) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_NCHITTEST,wp=00000000,lp=01d90257) 0009:Ret window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_NCHITTEST,wp=00000000,lp=01d90257) retval=00000001 0009:Call window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_SETCURSOR,wp=0001004a,lp=02000001) 0009:Call window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_SETCURSOR,wp=0001004a,lp=02000001) 0009:Call dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_SETCURSOR,wp=0001004a,lp=02000001) 0009:Ret dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_SETCURSOR,wp=0001004a,lp=02000001) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_SETCURSOR,wp=0001004a,lp=02000001) retval=00000000 0009:Ret window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_SETCURSOR,wp=0001004a,lp=02000001) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_MOUSEMOVE,wp=00000000,lp=0009002f) 0009:Ret window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_MOUSEMOVE,wp=00000000,lp=0009002f) retval=00000000 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_ENTERIDLE,wp=00000000,lp=00010032) 0009:Call user32.DefWindowProcW(00010030,00000121,00000000,00010032) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_ENTERIDLE,wp=00000000,lp=00010032) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_NCHITTEST,wp=00000000,lp=01d90256) 0009:Ret window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_NCHITTEST,wp=00000000,lp=01d90256) retval=00000001 0009:Call window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_SETCURSOR,wp=0001004a,lp=02000001) 0009:Call window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_SETCURSOR,wp=0001004a,lp=02000001) 0009:Call dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_SETCURSOR,wp=0001004a,lp=02000001) 0009:Ret dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_SETCURSOR,wp=0001004a,lp=02000001) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_SETCURSOR,wp=0001004a,lp=02000001) retval=00000000 0009:Ret window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_SETCURSOR,wp=0001004a,lp=02000001) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_MOUSEMOVE,wp=00000000,lp=0009002e) 0009:Ret window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_MOUSEMOVE,wp=00000000,lp=0009002e) retval=00000000 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_ENTERIDLE,wp=00000000,lp=00010032) 0009:Call user32.DefWindowProcW(00010030,00000121,00000000,00010032) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_ENTERIDLE,wp=00000000,lp=00010032) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_NCHITTEST,wp=00000000,lp=01d90256) 0009:Ret window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_NCHITTEST,wp=00000000,lp=01d90256) retval=00000001 0009:Call window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_MOUSEACTIVATE,wp=00010032,lp=02010001) 0009:Call window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_MOUSEACTIVATE,wp=00010032,lp=02010001) 0009:Call dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_MOUSEACTIVATE,wp=00010032,lp=02010001) 0009:Ret dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_MOUSEACTIVATE,wp=00010032,lp=02010001) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_MOUSEACTIVATE,wp=00010032,lp=02010001) retval=00000001 0009:Ret window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_MOUSEACTIVATE,wp=00010032,lp=02010001) retval=00000001 0009:Call window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_SETCURSOR,wp=0001004a,lp=02010001) 0009:Call window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_SETCURSOR,wp=0001004a,lp=02010001) 0009:Call dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_SETCURSOR,wp=0001004a,lp=02010001) 0009:Ret dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_SETCURSOR,wp=0001004a,lp=02010001) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_SETCURSOR,wp=0001004a,lp=02010001) retval=00000000 0009:Ret window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_SETCURSOR,wp=0001004a,lp=02010001) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_LBUTTONDOWN,wp=00000001,lp=0009002e) 0009:Call window proc 0x7ea833d0 (hwnd=0x10044,msg=WM_KILLFOCUS,wp=0001004a,lp=00000000) 0009:Call window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_CTLCOLORSTATIC,wp=00000314,lp=00010044) 0009:Call dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_CTLCOLORSTATIC,wp=00000314,lp=00010044) 0009:Ret dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_CTLCOLORSTATIC,wp=00000314,lp=00010044) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_CTLCOLORSTATIC,wp=00000314,lp=00010044) retval=0000010c 0009:Ret window proc 0x7ea833d0 (hwnd=0x10044,msg=WM_KILLFOCUS,wp=0001004a,lp=00000000) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_SETFOCUS,wp=00010044,lp=00000000) 0009:Call window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_CTLCOLORBTN,wp=00000314,lp=0001004a) 0009:Call dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_CTLCOLORBTN,wp=00000314,lp=0001004a) 0009:Ret dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_CTLCOLORBTN,wp=00000314,lp=0001004a) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_CTLCOLORBTN,wp=00000314,lp=0001004a) retval=0000010c 0009:Ret window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_SETFOCUS,wp=00010044,lp=00000000) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x1004a,msg=BM_SETSTATE,wp=00000001,lp=00000000) 0009:Call window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_CTLCOLORBTN,wp=00000314,lp=0001004a) 0009:Call dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_CTLCOLORBTN,wp=00000314,lp=0001004a) 0009:Ret dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_CTLCOLORBTN,wp=00000314,lp=0001004a) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_CTLCOLORBTN,wp=00000314,lp=0001004a) retval=0000010c 0009:Ret window proc 0x7ea833d0 (hwnd=0x1004a,msg=BM_SETSTATE,wp=00000001,lp=00000000) retval=00000000 0009:Ret window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_LBUTTONDOWN,wp=00000001,lp=0009002e) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x10044,msg=WM_PAINT,wp=00000000,lp=00000000) 0009:Call window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_CTLCOLORSTATIC,wp=00000314,lp=00010044) 0009:Call dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_CTLCOLORSTATIC,wp=00000314,lp=00010044) 0009:Ret dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_CTLCOLORSTATIC,wp=00000314,lp=00010044) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_CTLCOLORSTATIC,wp=00000314,lp=00010044) retval=0000010c 0009:Ret window proc 0x7ea833d0 (hwnd=0x10044,msg=WM_PAINT,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_ENTERIDLE,wp=00000000,lp=00010032) 0009:Call user32.DefWindowProcW(00010030,00000121,00000000,00010032) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_ENTERIDLE,wp=00000000,lp=00010032) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_LBUTTONUP,wp=00000000,lp=0009002e) 0009:Call window proc 0x7ea833d0 (hwnd=0x1004a,msg=BM_SETSTATE,wp=00000000,lp=00000000) 0009:Call window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_CTLCOLORBTN,wp=00000314,lp=0001004a) 0009:Call dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_CTLCOLORBTN,wp=00000314,lp=0001004a) 0009:Ret dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_CTLCOLORBTN,wp=00000314,lp=0001004a) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_CTLCOLORBTN,wp=00000314,lp=0001004a) retval=0000010c 0009:Ret window proc 0x7ea833d0 (hwnd=0x1004a,msg=BM_SETSTATE,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_CAPTURECHANGED,wp=00000000,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_CAPTURECHANGED,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_COMMAND,wp=00000001,lp=0001004a) 0009:Call dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_COMMAND,wp=00000001,lp=0001004a) 0009:Call user32.IsDlgButtonChecked(00010032,000003f0) ret=01007b4a 0009:Call window proc 0x7ea833d0 (hwnd=0x10044,msg=BM_GETCHECK,wp=00000000,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x10044,msg=BM_GETCHECK,wp=00000000,lp=00000000) retval=00000001 0009:Ret user32.IsDlgButtonChecked() retval=00000001 ret=01007b4a 0009:Call user32.EndDialog(00010032,00000001) ret=01007b8d 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_ENABLE,wp=00000001,lp=00000000) 0009:Call user32.DefWindowProcW(00010030,0000000a,00000001,00000000) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_ENABLE,wp=00000001,lp=00000000) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_KILLFOCUS,wp=00010032,lp=00000000) 0009:Call window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_CTLCOLORBTN,wp=00000314,lp=0001004a) 0009:Call dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_CTLCOLORBTN,wp=00000314,lp=0001004a) 0009:Ret dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_CTLCOLORBTN,wp=00000314,lp=0001004a) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_CTLCOLORBTN,wp=00000314,lp=0001004a) retval=0000010c 0009:Ret window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_KILLFOCUS,wp=00010032,lp=00000000) retval=00000000 0009:Call window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_SETFOCUS,wp=0001004a,lp=00000000) 0009:Call dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_SETFOCUS,wp=0001004a,lp=00000000) 0009:Ret dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_SETFOCUS,wp=0001004a,lp=00000000) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_SETFOCUS,wp=0001004a,lp=00000000) retval=00000000 0009:Call window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_WINDOWPOSCHANGING,wp=00000000,lp=0033eea0) 0009:Call dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_WINDOWPOSCHANGING,wp=00000000,lp=0033eea0) 0009:Ret dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_WINDOWPOSCHANGING,wp=00000000,lp=0033eea0) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_WINDOWPOSCHANGING,wp=00000000,lp=0033eea0) retval=00000000 0019:Ret user32.GetMessageW() retval=00000001 ret=7ec5ec4b 0019:Call user32.DispatchMessageW(0033f93c) ret=7ec5ec28 0019:Call window proc 0x7ec5f470 (hwnd=0x10020,msg=WM_PAINT,wp=00000000,lp=00000000) 0019:Call user32.BeginPaint(00010020,0033f5b8) ret=7ec5f68f 0019:Ret user32.BeginPaint() retval=000001e4 ret=7ec5f68f 0019:Call user32.EndPaint(00010020,0033f5b8) ret=7ec5f6af 0019:Ret user32.EndPaint() retval=00000001 ret=7ec5f6af 0019:Ret window proc 0x7ec5f470 (hwnd=0x10020,msg=WM_PAINT,wp=00000000,lp=00000000) retval=00000000 0019:Ret user32.DispatchMessageW() retval=00000000 ret=7ec5ec28 0019:Call user32.GetMessageW(0033f93c,00000000,00000000,00000000) ret=7ec5ec4b 0009:Call window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_WINDOWPOSCHANGED,wp=00000000,lp=0033eea0) 0009:Call dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_WINDOWPOSCHANGED,wp=00000000,lp=0033eea0) 0009:Ret dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_WINDOWPOSCHANGED,wp=00000000,lp=0033eea0) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_WINDOWPOSCHANGED,wp=00000000,lp=0033eea0) retval=00000000 0009:Call window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_NCACTIVATE,wp=00000000,lp=00010030) 0009:Call dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_NCACTIVATE,wp=00000000,lp=00010030) 0009:Ret dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_NCACTIVATE,wp=00000000,lp=00010030) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_NCACTIVATE,wp=00000000,lp=00010030) retval=00000001 0009:Call window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_ACTIVATE,wp=00000000,lp=00010030) 0009:Call dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_ACTIVATE,wp=00000000,lp=00010030) 0009:Ret dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_ACTIVATE,wp=00000000,lp=00010030) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_ACTIVATE,wp=00000000,lp=00010030) retval=00000000 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_QUERYNEWPALETTE,wp=00000000,lp=00000000) 0009:Call user32.DefWindowProcW(00010030,0000030f,00000000,00000000) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_QUERYNEWPALETTE,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCACTIVATE,wp=00000001,lp=00010032) 0009:Call user32.DefWindowProcW(00010030,00000086,00000001,00010032) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCACTIVATE,wp=00000001,lp=00010032) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_ACTIVATE,wp=00000001,lp=00010032) 0009:Call user32.DefWindowProcW(00010030,00000006,00000001,00010032) ret=01006e3b 0009:Call window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_KILLFOCUS,wp=00010030,lp=00000000) 0009:Call dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_KILLFOCUS,wp=00010030,lp=00000000) 0009:Ret dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_KILLFOCUS,wp=00010030,lp=00000000) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_KILLFOCUS,wp=00010030,lp=00000000) retval=00000000 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETFOCUS,wp=00010032,lp=00000000) 0009:Call user32.DefWindowProcW(00010030,00000007,00010032,00000000) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETFOCUS,wp=00010032,lp=00000000) retval=00000000 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_ACTIVATE,wp=00000001,lp=00010032) retval=00000000 0009:Ret user32.EndDialog() retval=00000001 ret=01007b8d 0009:Ret dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_COMMAND,wp=00000001,lp=0001004a) retval=00000001 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_COMMAND,wp=00000001,lp=0001004a) retval=00000000 0009:Ret window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_LBUTTONUP,wp=00000000,lp=0009002e) retval=00000000 0009:Call window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_DESTROY,wp=00000000,lp=00000000) 0009:Call dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_DESTROY,wp=00000000,lp=00000000) 0009:Ret dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_DESTROY,wp=00000000,lp=00000000) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_DESTROY,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x10034,msg=WM_DESTROY,wp=00000000,lp=00000000) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x10034,msg=WM_DESTROY,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x10036,msg=WM_DESTROY,wp=00000000,lp=00000000) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x10036,msg=WM_DESTROY,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x10038,msg=WM_DESTROY,wp=00000000,lp=00000000) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x10038,msg=WM_DESTROY,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x1003a,msg=WM_DESTROY,wp=00000000,lp=00000000) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x1003a,msg=WM_DESTROY,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x1003c,msg=WM_DESTROY,wp=00000000,lp=00000000) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x1003c,msg=WM_DESTROY,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x1003e,msg=WM_DESTROY,wp=00000000,lp=00000000) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x1003e,msg=WM_DESTROY,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x10040,msg=WM_DESTROY,wp=00000000,lp=00000000) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x10040,msg=WM_DESTROY,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x10042,msg=WM_DESTROY,wp=00000000,lp=00000000) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x10042,msg=WM_DESTROY,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x10044,msg=WM_DESTROY,wp=00000000,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x10044,msg=WM_DESTROY,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x10046,msg=WM_DESTROY,wp=00000000,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x10046,msg=WM_DESTROY,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x10048,msg=WM_DESTROY,wp=00000000,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x10048,msg=WM_DESTROY,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_DESTROY,wp=00000000,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_DESTROY,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x1004c,msg=WM_DESTROY,wp=00000000,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x1004c,msg=WM_DESTROY,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x10034,msg=WM_NCDESTROY,wp=00000000,lp=00000000) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x10034,msg=WM_NCDESTROY,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x10036,msg=WM_NCDESTROY,wp=00000000,lp=00000000) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x10036,msg=WM_NCDESTROY,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x10038,msg=WM_NCDESTROY,wp=00000000,lp=00000000) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x10038,msg=WM_NCDESTROY,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x1003a,msg=WM_NCDESTROY,wp=00000000,lp=00000000) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x1003a,msg=WM_NCDESTROY,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x1003c,msg=WM_NCDESTROY,wp=00000000,lp=00000000) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x1003c,msg=WM_NCDESTROY,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x1003e,msg=WM_NCDESTROY,wp=00000000,lp=00000000) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x1003e,msg=WM_NCDESTROY,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x10040,msg=WM_NCDESTROY,wp=00000000,lp=00000000) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x10040,msg=WM_NCDESTROY,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x10042,msg=WM_NCDESTROY,wp=00000000,lp=00000000) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x10042,msg=WM_NCDESTROY,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x10044,msg=WM_NCDESTROY,wp=00000000,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x10044,msg=WM_NCDESTROY,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x10046,msg=WM_NCDESTROY,wp=00000000,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x10046,msg=WM_NCDESTROY,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x10048,msg=WM_NCDESTROY,wp=00000000,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x10048,msg=WM_NCDESTROY,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_NCDESTROY,wp=00000000,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x1004a,msg=WM_NCDESTROY,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x1004c,msg=WM_NCDESTROY,wp=00000000,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x1004c,msg=WM_NCDESTROY,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_NCDESTROY,wp=00000000,lp=00000000) 0009:Call dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_NCDESTROY,wp=00000000,lp=00000000) 0009:Ret dialog proc 0x1007b06 (hwnd=0x10032,msg=WM_NCDESTROY,wp=00000000,lp=00000000) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x10032,msg=WM_NCDESTROY,wp=00000000,lp=00000000) retval=00000000 0009:Ret user32.DialogBoxParamW() retval=00000001 ret=0100671e 0009:Call KERNEL32.GetSystemTimeAsFileTime(0033f670) ret=01009255 0009:Ret KERNEL32.GetSystemTimeAsFileTime() retval=01ca112b ret=01009255 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,000001a0) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c0938 ret=0100a7d2 0009:Call ntdll.RtlFreeHeap(005c0000,00000000,005c0938) ret=0100a34c 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=0100a34c 0009:Call user32.GetMenu(00010030) ret=01003268 0009:Ret user32.GetMenu() retval=000000f0 ret=01003268 0009:Call user32.EnableMenuItem(000000f0,00009c4a,00000001) ret=01003276 0009:Ret user32.EnableMenuItem() retval=00000001 ret=01003276 0009:Call user32.InvalidateRect(00010030,00000000,00000001) ret=01005b76 0009:Ret user32.InvalidateRect() retval=00000001 ret=01005b76 0009:Call user32.UpdateWindow(00010030) ret=01005b7e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_PAINT,wp=00000000,lp=00000000) 0009:Call user32.BeginPaint(00010030,0033f364) ret=01006ec0 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCPAINT,wp=00000bd8,lp=00000000) 0009:Call user32.DefWindowProcW(00010030,00000085,00000bd8,00000000) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCPAINT,wp=00000bd8,lp=00000000) retval=00000000 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_ERASEBKGND,wp=00000314,lp=00000000) 0009:Call user32.DefWindowProcW(00010030,00000014,00000314,00000000) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_ERASEBKGND,wp=00000314,lp=00000000) retval=00000000 0009:Ret user32.BeginPaint() retval=00000314 ret=01006ec0 0009:Call user32.GetClientRect(00010030,0033f290) ret=01005cd6 0009:Ret user32.GetClientRect() retval=00000001 ret=01005cd6 0009:Call gdi32.CreateCompatibleDC(00000314) ret=0100272b 0009:Ret gdi32.CreateCompatibleDC() retval=00000c24 ret=0100272b 0009:Call user32.LoadBitmapW(01000000,010012bc L"FELT") ret=0100273f 0009:Ret user32.LoadBitmapW() retval=00000c3c ret=0100273f 0009:Call gdi32.SelectObject(00000c24,00000c3c) ret=0100274c 0009:Ret gdi32.SelectObject() retval=0000006c ret=0100274c 0009:Call gdi32.BitBlt(00000314,00000000,00000000,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000003f,00000000,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000007e,00000000,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000bd,00000000,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000fc,00000000,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000013b,00000000,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000017a,00000000,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001b9,00000000,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001f8,00000000,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000237,00000000,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000276,00000000,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002b5,00000000,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002f4,00000000,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000333,00000000,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000372,00000000,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003b1,00000000,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003f0,00000000,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000042f,00000000,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000046e,00000000,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ad,00000000,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ec,00000000,00000013,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000000,00000040,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000003f,00000040,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000007e,00000040,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000bd,00000040,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000fc,00000040,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000013b,00000040,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000017a,00000040,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001b9,00000040,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001f8,00000040,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000237,00000040,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000276,00000040,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002b5,00000040,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002f4,00000040,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000333,00000040,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000372,00000040,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003b1,00000040,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003f0,00000040,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000042f,00000040,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000046e,00000040,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ad,00000040,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ec,00000040,00000013,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000000,00000080,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000003f,00000080,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000007e,00000080,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000bd,00000080,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000fc,00000080,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000013b,00000080,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000017a,00000080,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001b9,00000080,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001f8,00000080,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000237,00000080,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000276,00000080,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002b5,00000080,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002f4,00000080,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000333,00000080,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000372,00000080,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003b1,00000080,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003f0,00000080,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000042f,00000080,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000046e,00000080,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ad,00000080,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ec,00000080,00000013,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000000,000000c0,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000003f,000000c0,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000007e,000000c0,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000bd,000000c0,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000fc,000000c0,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000013b,000000c0,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000017a,000000c0,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001b9,000000c0,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001f8,000000c0,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000237,000000c0,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000276,000000c0,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002b5,000000c0,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002f4,000000c0,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000333,000000c0,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000372,000000c0,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003b1,000000c0,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003f0,000000c0,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000042f,000000c0,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000046e,000000c0,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ad,000000c0,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ec,000000c0,00000013,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000000,00000100,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000003f,00000100,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000007e,00000100,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000bd,00000100,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000fc,00000100,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000013b,00000100,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000017a,00000100,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001b9,00000100,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001f8,00000100,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000237,00000100,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000276,00000100,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002b5,00000100,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002f4,00000100,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000333,00000100,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000372,00000100,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003b1,00000100,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003f0,00000100,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000042f,00000100,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000046e,00000100,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ad,00000100,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ec,00000100,00000013,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000000,00000140,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000003f,00000140,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000007e,00000140,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000bd,00000140,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000fc,00000140,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000013b,00000140,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000017a,00000140,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001b9,00000140,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001f8,00000140,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000237,00000140,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000276,00000140,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002b5,00000140,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002f4,00000140,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000333,00000140,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000372,00000140,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003b1,00000140,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003f0,00000140,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000042f,00000140,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000046e,00000140,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ad,00000140,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ec,00000140,00000013,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000000,00000180,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000003f,00000180,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000007e,00000180,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000bd,00000180,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000fc,00000180,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000013b,00000180,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000017a,00000180,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001b9,00000180,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001f8,00000180,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000237,00000180,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000276,00000180,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002b5,00000180,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002f4,00000180,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000333,00000180,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000372,00000180,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003b1,00000180,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003f0,00000180,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000042f,00000180,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000046e,00000180,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ad,00000180,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ec,00000180,00000013,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000000,000001c0,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000003f,000001c0,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000007e,000001c0,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000bd,000001c0,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000fc,000001c0,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000013b,000001c0,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000017a,000001c0,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001b9,000001c0,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001f8,000001c0,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000237,000001c0,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000276,000001c0,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002b5,000001c0,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002f4,000001c0,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000333,000001c0,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000372,000001c0,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003b1,000001c0,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003f0,000001c0,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000042f,000001c0,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000046e,000001c0,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ad,000001c0,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ec,000001c0,00000013,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000000,00000200,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000003f,00000200,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000007e,00000200,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000bd,00000200,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000fc,00000200,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000013b,00000200,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000017a,00000200,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001b9,00000200,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001f8,00000200,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000237,00000200,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000276,00000200,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002b5,00000200,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002f4,00000200,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000333,00000200,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000372,00000200,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003b1,00000200,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003f0,00000200,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000042f,00000200,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000046e,00000200,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ad,00000200,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ec,00000200,00000013,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000000,00000240,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000003f,00000240,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000007e,00000240,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000bd,00000240,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000fc,00000240,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000013b,00000240,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000017a,00000240,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001b9,00000240,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001f8,00000240,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000237,00000240,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000276,00000240,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002b5,00000240,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002f4,00000240,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000333,00000240,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000372,00000240,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003b1,00000240,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003f0,00000240,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000042f,00000240,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000046e,00000240,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ad,00000240,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ec,00000240,00000013,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000000,00000280,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000003f,00000280,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000007e,00000280,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000bd,00000280,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000fc,00000280,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000013b,00000280,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000017a,00000280,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001b9,00000280,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001f8,00000280,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000237,00000280,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000276,00000280,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002b5,00000280,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002f4,00000280,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000333,00000280,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000372,00000280,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003b1,00000280,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003f0,00000280,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000042f,00000280,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000046e,00000280,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ad,00000280,0000003f,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ec,00000280,00000013,00000040,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000000,000002c0,0000003f,00000002,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000003f,000002c0,0000003f,00000002,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000007e,000002c0,0000003f,00000002,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000bd,000002c0,0000003f,00000002,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000fc,000002c0,0000003f,00000002,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000013b,000002c0,0000003f,00000002,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000017a,000002c0,0000003f,00000002,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001b9,000002c0,0000003f,00000002,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001f8,000002c0,0000003f,00000002,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000237,000002c0,0000003f,00000002,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000276,000002c0,0000003f,00000002,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002b5,000002c0,0000003f,00000002,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002f4,000002c0,0000003f,00000002,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000333,000002c0,0000003f,00000002,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000372,000002c0,0000003f,00000002,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003b1,000002c0,0000003f,00000002,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003f0,000002c0,0000003f,00000002,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000042f,000002c0,0000003f,00000002,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000046e,000002c0,0000003f,00000002,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ad,000002c0,0000003f,00000002,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ec,000002c0,00000013,00000002,00000c24,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.SelectObject(00000c24,0000006c) ret=0100287b 0009:Ret gdi32.SelectObject() retval=00000c3c ret=0100287b 0009:Call gdi32.DeleteObject(00000c3c) ret=01002884 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01002884 0009:Call gdi32.DeleteDC(00000c24) ret=0100288d 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100288d 0009:Call gdi32.CreateCompatibleDC(00000314) ret=01005cf3 0009:Ret gdi32.CreateCompatibleDC() retval=00000c50 ret=01005cf3 0009:Call gdi32.CreateCompatibleDC(00000314) ret=01005cf9 0009:Ret gdi32.CreateCompatibleDC() retval=00000c5c ret=01005cf9 0009:Call user32.LoadBitmapW(01000000,010012c8 L"CARDBACK") ret=01005d0d 0009:Ret user32.LoadBitmapW() retval=00000c74 ret=01005d0d 0009:Call gdi32.SelectObject(00000c5c,00000c74) ret=01005d1a 0009:Ret gdi32.SelectObject() retval=0000006c ret=01005d1a 0009:Call user32.LoadBitmapW(01000000,0000006c) ret=010028ff 0009:Ret user32.LoadBitmapW() retval=00000c94 ret=010028ff 0009:Call gdi32.CreateCompatibleDC(00000314) ret=01002909 0009:Ret gdi32.CreateCompatibleDC() retval=00000ca8 ret=01002909 0009:Call gdi32.SelectObject(00000ca8,00000c94) ret=01002917 0009:Ret gdi32.SelectObject() retval=0000006c ret=01002917 0009:Call gdi32.BitBlt(00000314,00000033,0000000a,00000047,00000060,00000ca8,00000000,00000000,00cc0020) ret=01002938 0009:Ret gdi32.BitBlt() retval=00000001 ret=01002938 0009:Call gdi32.SelectObject(00000ca8,0000006c) ret=0100293e 0009:Ret gdi32.SelectObject() retval=00000c94 ret=0100293e 0009:Call gdi32.DeleteObject(00000c94) ret=01002947 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01002947 0009:Call gdi32.DeleteDC(00000ca8) ret=0100294e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100294e 0009:Call gdi32.SetPixel(00000314,00000033,0000000a,00008000) ret=01002969 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002969 0009:Call gdi32.SetPixel(00000314,00000034,0000000a,00008000) ret=01002976 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002976 0009:Call gdi32.SetPixel(00000314,00000033,0000000b,00008000) ret=01002982 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002982 0009:Call gdi32.SetPixel(00000314,00000079,0000000a,00008000) ret=0100298f 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100298f 0009:Call gdi32.SetPixel(00000314,00000078,0000000a,00008000) ret=0100299c 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100299c 0009:Call gdi32.SetPixel(00000314,00000079,0000000b,00008000) ret=010029ab 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ab 0009:Call gdi32.SetPixel(00000314,00000033,00000069,00008000) ret=010029bf 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029bf 0009:Call gdi32.SetPixel(00000314,00000034,00000069,00008000) ret=010029d0 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029d0 0009:Call gdi32.SetPixel(00000314,00000033,00000068,00008000) ret=010029de 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029de 0009:Call gdi32.SetPixel(00000314,00000079,00000069,00008000) ret=010029ef 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ef 0009:Call gdi32.SetPixel(00000314,00000078,00000069,00008000) ret=01002a00 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a00 0009:Call gdi32.SetPixel(00000314,00000079,00000068,00008000) ret=01002a11 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a11 0009:Call user32.LoadBitmapW(01000000,0000006c) ret=010028ff 0009:Ret user32.LoadBitmapW() retval=00000cc0 ret=010028ff 0009:Call gdi32.CreateCompatibleDC(00000314) ret=01002909 0009:Ret gdi32.CreateCompatibleDC() retval=00000cd4 ret=01002909 0009:Call gdi32.SelectObject(00000cd4,00000cc0) ret=01002917 0009:Ret gdi32.SelectObject() retval=0000006c ret=01002917 0009:Call gdi32.BitBlt(00000314,000000ad,0000000a,00000047,00000060,00000cd4,00000000,00000000,00cc0020) ret=01002938 0009:Ret gdi32.BitBlt() retval=00000001 ret=01002938 0009:Call gdi32.SelectObject(00000cd4,0000006c) ret=0100293e 0009:Ret gdi32.SelectObject() retval=00000cc0 ret=0100293e 0009:Call gdi32.DeleteObject(00000cc0) ret=01002947 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01002947 0009:Call gdi32.DeleteDC(00000cd4) ret=0100294e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100294e 0009:Call gdi32.SetPixel(00000314,000000ad,0000000a,00008000) ret=01002969 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002969 0009:Call gdi32.SetPixel(00000314,000000ae,0000000a,00008000) ret=01002976 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002976 0009:Call gdi32.SetPixel(00000314,000000ad,0000000b,00008000) ret=01002982 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002982 0009:Call gdi32.SetPixel(00000314,000000f3,0000000a,00008000) ret=0100298f 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100298f 0009:Call gdi32.SetPixel(00000314,000000f2,0000000a,00008000) ret=0100299c 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100299c 0009:Call gdi32.SetPixel(00000314,000000f3,0000000b,00008000) ret=010029ab 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ab 0009:Call gdi32.SetPixel(00000314,000000ad,00000069,00008000) ret=010029bf 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029bf 0009:Call gdi32.SetPixel(00000314,000000ae,00000069,00008000) ret=010029d0 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029d0 0009:Call gdi32.SetPixel(00000314,000000ad,00000068,00008000) ret=010029de 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029de 0009:Call gdi32.SetPixel(00000314,000000f3,00000069,00008000) ret=010029ef 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ef 0009:Call gdi32.SetPixel(00000314,000000f2,00000069,00008000) ret=01002a00 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a00 0009:Call gdi32.SetPixel(00000314,000000f3,00000068,00008000) ret=01002a11 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a11 0009:Call user32.LoadBitmapW(01000000,0000006c) ret=010028ff 0009:Ret user32.LoadBitmapW() retval=00000cec ret=010028ff 0009:Call gdi32.CreateCompatibleDC(00000314) ret=01002909 0009:Ret gdi32.CreateCompatibleDC() retval=00000d00 ret=01002909 0009:Call gdi32.SelectObject(00000d00,00000cec) ret=01002917 0009:Ret gdi32.SelectObject() retval=0000006c ret=01002917 0009:Call gdi32.BitBlt(00000314,00000127,0000000a,00000047,00000060,00000d00,00000000,00000000,00cc0020) ret=01002938 0009:Ret gdi32.BitBlt() retval=00000001 ret=01002938 0009:Call gdi32.SelectObject(00000d00,0000006c) ret=0100293e 0009:Ret gdi32.SelectObject() retval=00000cec ret=0100293e 0009:Call gdi32.DeleteObject(00000cec) ret=01002947 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01002947 0009:Call gdi32.DeleteDC(00000d00) ret=0100294e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100294e 0009:Call gdi32.SetPixel(00000314,00000127,0000000a,00008000) ret=01002969 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002969 0009:Call gdi32.SetPixel(00000314,00000128,0000000a,00008000) ret=01002976 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002976 0009:Call gdi32.SetPixel(00000314,00000127,0000000b,00008000) ret=01002982 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002982 0009:Call gdi32.SetPixel(00000314,0000016d,0000000a,00008000) ret=0100298f 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100298f 0009:Call gdi32.SetPixel(00000314,0000016c,0000000a,00008000) ret=0100299c 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100299c 0009:Call gdi32.SetPixel(00000314,0000016d,0000000b,00008000) ret=010029ab 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ab 0009:Call gdi32.SetPixel(00000314,00000127,00000069,00008000) ret=010029bf 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029bf 0009:Call gdi32.SetPixel(00000314,00000128,00000069,00008000) ret=010029d0 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029d0 0009:Call gdi32.SetPixel(00000314,00000127,00000068,00008000) ret=010029de 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029de 0009:Call gdi32.SetPixel(00000314,0000016d,00000069,00008000) ret=010029ef 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ef 0009:Call gdi32.SetPixel(00000314,0000016c,00000069,00008000) ret=01002a00 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a00 0009:Call gdi32.SetPixel(00000314,0000016d,00000068,00008000) ret=01002a11 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a11 0009:Call user32.LoadBitmapW(01000000,0000006c) ret=010028ff 0009:Ret user32.LoadBitmapW() retval=00000d18 ret=010028ff 0009:Call gdi32.CreateCompatibleDC(00000314) ret=01002909 0009:Ret gdi32.CreateCompatibleDC() retval=00000d2c ret=01002909 0009:Call gdi32.SelectObject(00000d2c,00000d18) ret=01002917 0009:Ret gdi32.SelectObject() retval=0000006c ret=01002917 0009:Call gdi32.BitBlt(00000314,000001a1,0000000a,00000047,00000060,00000d2c,00000000,00000000,00cc0020) ret=01002938 0009:Ret gdi32.BitBlt() retval=00000001 ret=01002938 0009:Call gdi32.SelectObject(00000d2c,0000006c) ret=0100293e 0009:Ret gdi32.SelectObject() retval=00000d18 ret=0100293e 0009:Call gdi32.DeleteObject(00000d18) ret=01002947 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01002947 0009:Call gdi32.DeleteDC(00000d2c) ret=0100294e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100294e 0009:Call gdi32.SetPixel(00000314,000001a1,0000000a,00008000) ret=01002969 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002969 0009:Call gdi32.SetPixel(00000314,000001a2,0000000a,00008000) ret=01002976 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002976 0009:Call gdi32.SetPixel(00000314,000001a1,0000000b,00008000) ret=01002982 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002982 0009:Call gdi32.SetPixel(00000314,000001e7,0000000a,00008000) ret=0100298f 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100298f 0009:Call gdi32.SetPixel(00000314,000001e6,0000000a,00008000) ret=0100299c 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100299c 0009:Call gdi32.SetPixel(00000314,000001e7,0000000b,00008000) ret=010029ab 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ab 0009:Call gdi32.SetPixel(00000314,000001a1,00000069,00008000) ret=010029bf 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029bf 0009:Call gdi32.SetPixel(00000314,000001a2,00000069,00008000) ret=010029d0 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029d0 0009:Call gdi32.SetPixel(00000314,000001a1,00000068,00008000) ret=010029de 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029de 0009:Call gdi32.SetPixel(00000314,000001e7,00000069,00008000) ret=010029ef 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ef 0009:Call gdi32.SetPixel(00000314,000001e6,00000069,00008000) ret=01002a00 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a00 0009:Call gdi32.SetPixel(00000314,000001e7,00000068,00008000) ret=01002a11 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a11 0009:Call user32.LoadBitmapW(01000000,0000006c) ret=010028ff 0009:Ret user32.LoadBitmapW() retval=00000d44 ret=010028ff 0009:Call gdi32.CreateCompatibleDC(00000314) ret=01002909 0009:Ret gdi32.CreateCompatibleDC() retval=00000d58 ret=01002909 0009:Call gdi32.SelectObject(00000d58,00000d44) ret=01002917 0009:Ret gdi32.SelectObject() retval=0000006c ret=01002917 0009:Call gdi32.BitBlt(00000314,0000021b,0000000a,00000047,00000060,00000d58,00000000,00000000,00cc0020) ret=01002938 0009:Ret gdi32.BitBlt() retval=00000001 ret=01002938 0009:Call gdi32.SelectObject(00000d58,0000006c) ret=0100293e 0009:Ret gdi32.SelectObject() retval=00000d44 ret=0100293e 0009:Call gdi32.DeleteObject(00000d44) ret=01002947 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01002947 0009:Call gdi32.DeleteDC(00000d58) ret=0100294e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100294e 0009:Call gdi32.SetPixel(00000314,0000021b,0000000a,00008000) ret=01002969 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002969 0009:Call gdi32.SetPixel(00000314,0000021c,0000000a,00008000) ret=01002976 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002976 0009:Call gdi32.SetPixel(00000314,0000021b,0000000b,00008000) ret=01002982 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002982 0009:Call gdi32.SetPixel(00000314,00000261,0000000a,00008000) ret=0100298f 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100298f 0009:Call gdi32.SetPixel(00000314,00000260,0000000a,00008000) ret=0100299c 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100299c 0009:Call gdi32.SetPixel(00000314,00000261,0000000b,00008000) ret=010029ab 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ab 0009:Call gdi32.SetPixel(00000314,0000021b,00000069,00008000) ret=010029bf 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029bf 0009:Call gdi32.SetPixel(00000314,0000021c,00000069,00008000) ret=010029d0 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029d0 0009:Call gdi32.SetPixel(00000314,0000021b,00000068,00008000) ret=010029de 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029de 0009:Call gdi32.SetPixel(00000314,00000261,00000069,00008000) ret=010029ef 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ef 0009:Call gdi32.SetPixel(00000314,00000260,00000069,00008000) ret=01002a00 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a00 0009:Call gdi32.SetPixel(00000314,00000261,00000068,00008000) ret=01002a11 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a11 0009:Call user32.LoadBitmapW(01000000,0000006c) ret=010028ff 0009:Ret user32.LoadBitmapW() retval=00000d70 ret=010028ff 0009:Call gdi32.CreateCompatibleDC(00000314) ret=01002909 0009:Ret gdi32.CreateCompatibleDC() retval=00000d84 ret=01002909 0009:Call gdi32.SelectObject(00000d84,00000d70) ret=01002917 0009:Ret gdi32.SelectObject() retval=0000006c ret=01002917 0009:Call gdi32.BitBlt(00000314,00000295,0000000a,00000047,00000060,00000d84,00000000,00000000,00cc0020) ret=01002938 0009:Ret gdi32.BitBlt() retval=00000001 ret=01002938 0009:Call gdi32.SelectObject(00000d84,0000006c) ret=0100293e 0009:Ret gdi32.SelectObject() retval=00000d70 ret=0100293e 0009:Call gdi32.DeleteObject(00000d70) ret=01002947 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01002947 0009:Call gdi32.DeleteDC(00000d84) ret=0100294e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100294e 0009:Call gdi32.SetPixel(00000314,00000295,0000000a,00008000) ret=01002969 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002969 0009:Call gdi32.SetPixel(00000314,00000296,0000000a,00008000) ret=01002976 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002976 0009:Call gdi32.SetPixel(00000314,00000295,0000000b,00008000) ret=01002982 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002982 0009:Call gdi32.SetPixel(00000314,000002db,0000000a,00008000) ret=0100298f 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100298f 0009:Call gdi32.SetPixel(00000314,000002da,0000000a,00008000) ret=0100299c 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100299c 0009:Call gdi32.SetPixel(00000314,000002db,0000000b,00008000) ret=010029ab 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ab 0009:Call gdi32.SetPixel(00000314,00000295,00000069,00008000) ret=010029bf 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029bf 0009:Call gdi32.SetPixel(00000314,00000296,00000069,00008000) ret=010029d0 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029d0 0009:Call gdi32.SetPixel(00000314,00000295,00000068,00008000) ret=010029de 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029de 0009:Call gdi32.SetPixel(00000314,000002db,00000069,00008000) ret=010029ef 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ef 0009:Call gdi32.SetPixel(00000314,000002da,00000069,00008000) ret=01002a00 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a00 0009:Call gdi32.SetPixel(00000314,000002db,00000068,00008000) ret=01002a11 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a11 0009:Call user32.LoadBitmapW(01000000,0000006c) ret=010028ff 0009:Ret user32.LoadBitmapW() retval=00000d9c ret=010028ff 0009:Call gdi32.CreateCompatibleDC(00000314) ret=01002909 0009:Ret gdi32.CreateCompatibleDC() retval=00000db0 ret=01002909 0009:Call gdi32.SelectObject(00000db0,00000d9c) ret=01002917 0009:Ret gdi32.SelectObject() retval=0000006c ret=01002917 0009:Call gdi32.BitBlt(00000314,0000030f,0000000a,00000047,00000060,00000db0,00000000,00000000,00cc0020) ret=01002938 0009:Ret gdi32.BitBlt() retval=00000001 ret=01002938 0009:Call gdi32.SelectObject(00000db0,0000006c) ret=0100293e 0009:Ret gdi32.SelectObject() retval=00000d9c ret=0100293e 0009:Call gdi32.DeleteObject(00000d9c) ret=01002947 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01002947 0009:Call gdi32.DeleteDC(00000db0) ret=0100294e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100294e 0009:Call gdi32.SetPixel(00000314,0000030f,0000000a,00008000) ret=01002969 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002969 0009:Call gdi32.SetPixel(00000314,00000310,0000000a,00008000) ret=01002976 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002976 0009:Call gdi32.SetPixel(00000314,0000030f,0000000b,00008000) ret=01002982 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002982 0009:Call gdi32.SetPixel(00000314,00000355,0000000a,00008000) ret=0100298f 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100298f 0009:Call gdi32.SetPixel(00000314,00000354,0000000a,00008000) ret=0100299c 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100299c 0009:Call gdi32.SetPixel(00000314,00000355,0000000b,00008000) ret=010029ab 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ab 0009:Call gdi32.SetPixel(00000314,0000030f,00000069,00008000) ret=010029bf 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029bf 0009:Call gdi32.SetPixel(00000314,00000310,00000069,00008000) ret=010029d0 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029d0 0009:Call gdi32.SetPixel(00000314,0000030f,00000068,00008000) ret=010029de 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029de 0009:Call gdi32.SetPixel(00000314,00000355,00000069,00008000) ret=010029ef 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ef 0009:Call gdi32.SetPixel(00000314,00000354,00000069,00008000) ret=01002a00 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a00 0009:Call gdi32.SetPixel(00000314,00000355,00000068,00008000) ret=01002a11 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a11 0009:Call user32.LoadBitmapW(01000000,0000006c) ret=010028ff 0009:Ret user32.LoadBitmapW() retval=00000dc8 ret=010028ff 0009:Call gdi32.CreateCompatibleDC(00000314) ret=01002909 0009:Ret gdi32.CreateCompatibleDC() retval=00000ddc ret=01002909 0009:Call gdi32.SelectObject(00000ddc,00000dc8) ret=01002917 0009:Ret gdi32.SelectObject() retval=0000006c ret=01002917 0009:Call gdi32.BitBlt(00000314,00000389,0000000a,00000047,00000060,00000ddc,00000000,00000000,00cc0020) ret=01002938 0009:Ret gdi32.BitBlt() retval=00000001 ret=01002938 0009:Call gdi32.SelectObject(00000ddc,0000006c) ret=0100293e 0009:Ret gdi32.SelectObject() retval=00000dc8 ret=0100293e 0009:Call gdi32.DeleteObject(00000dc8) ret=01002947 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01002947 0009:Call gdi32.DeleteDC(00000ddc) ret=0100294e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100294e 0009:Call gdi32.SetPixel(00000314,00000389,0000000a,00008000) ret=01002969 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002969 0009:Call gdi32.SetPixel(00000314,0000038a,0000000a,00008000) ret=01002976 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002976 0009:Call gdi32.SetPixel(00000314,00000389,0000000b,00008000) ret=01002982 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002982 0009:Call gdi32.SetPixel(00000314,000003cf,0000000a,00008000) ret=0100298f 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100298f 0009:Call gdi32.SetPixel(00000314,000003ce,0000000a,00008000) ret=0100299c 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100299c 0009:Call gdi32.SetPixel(00000314,000003cf,0000000b,00008000) ret=010029ab 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ab 0009:Call gdi32.SetPixel(00000314,00000389,00000069,00008000) ret=010029bf 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029bf 0009:Call gdi32.SetPixel(00000314,0000038a,00000069,00008000) ret=010029d0 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029d0 0009:Call gdi32.SetPixel(00000314,00000389,00000068,00008000) ret=010029de 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029de 0009:Call gdi32.SetPixel(00000314,000003cf,00000069,00008000) ret=010029ef 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ef 0009:Call gdi32.SetPixel(00000314,000003ce,00000069,00008000) ret=01002a00 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a00 0009:Call gdi32.SetPixel(00000314,000003cf,00000068,00008000) ret=01002a11 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a11 0009:Call user32.LoadBitmapW(01000000,0000006c) ret=010028ff 0009:Ret user32.LoadBitmapW() retval=00000df4 ret=010028ff 0009:Call gdi32.CreateCompatibleDC(00000314) ret=01002909 0009:Ret gdi32.CreateCompatibleDC() retval=00000e08 ret=01002909 0009:Call gdi32.SelectObject(00000e08,00000df4) ret=01002917 0009:Ret gdi32.SelectObject() retval=0000006c ret=01002917 0009:Call gdi32.BitBlt(00000314,00000403,0000000a,00000047,00000060,00000e08,00000000,00000000,00cc0020) ret=01002938 0009:Ret gdi32.BitBlt() retval=00000001 ret=01002938 0009:Call gdi32.SelectObject(00000e08,0000006c) ret=0100293e 0009:Ret gdi32.SelectObject() retval=00000df4 ret=0100293e 0009:Call gdi32.DeleteObject(00000df4) ret=01002947 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01002947 0009:Call gdi32.DeleteDC(00000e08) ret=0100294e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100294e 0009:Call gdi32.SetPixel(00000314,00000403,0000000a,00008000) ret=01002969 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002969 0009:Call gdi32.SetPixel(00000314,00000404,0000000a,00008000) ret=01002976 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002976 0009:Call gdi32.SetPixel(00000314,00000403,0000000b,00008000) ret=01002982 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002982 0009:Call gdi32.SetPixel(00000314,00000449,0000000a,00008000) ret=0100298f 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100298f 0009:Call gdi32.SetPixel(00000314,00000448,0000000a,00008000) ret=0100299c 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100299c 0009:Call gdi32.SetPixel(00000314,00000449,0000000b,00008000) ret=010029ab 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ab 0009:Call gdi32.SetPixel(00000314,00000403,00000069,00008000) ret=010029bf 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029bf 0009:Call gdi32.SetPixel(00000314,00000404,00000069,00008000) ret=010029d0 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029d0 0009:Call gdi32.SetPixel(00000314,00000403,00000068,00008000) ret=010029de 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029de 0009:Call gdi32.SetPixel(00000314,00000449,00000069,00008000) ret=010029ef 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ef 0009:Call gdi32.SetPixel(00000314,00000448,00000069,00008000) ret=01002a00 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a00 0009:Call gdi32.SetPixel(00000314,00000449,00000068,00008000) ret=01002a11 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a11 0009:Call user32.LoadBitmapW(01000000,0000006c) ret=010028ff 0009:Ret user32.LoadBitmapW() retval=00000e20 ret=010028ff 0009:Call gdi32.CreateCompatibleDC(00000314) ret=01002909 0009:Ret gdi32.CreateCompatibleDC() retval=00000e34 ret=01002909 0009:Call gdi32.SelectObject(00000e34,00000e20) ret=01002917 0009:Ret gdi32.SelectObject() retval=0000006c ret=01002917 0009:Call gdi32.BitBlt(00000314,0000047d,0000000a,00000047,00000060,00000e34,00000000,00000000,00cc0020) ret=01002938 0009:Ret gdi32.BitBlt() retval=00000001 ret=01002938 0009:Call gdi32.SelectObject(00000e34,0000006c) ret=0100293e 0009:Ret gdi32.SelectObject() retval=00000e20 ret=0100293e 0009:Call gdi32.DeleteObject(00000e20) ret=01002947 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01002947 0009:Call gdi32.DeleteDC(00000e34) ret=0100294e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100294e 0009:Call gdi32.SetPixel(00000314,0000047d,0000000a,00008000) ret=01002969 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002969 0009:Call gdi32.SetPixel(00000314,0000047e,0000000a,00008000) ret=01002976 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002976 0009:Call gdi32.SetPixel(00000314,0000047d,0000000b,00008000) ret=01002982 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002982 0009:Call gdi32.SetPixel(00000314,000004c3,0000000a,00008000) ret=0100298f 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100298f 0009:Call gdi32.SetPixel(00000314,000004c2,0000000a,00008000) ret=0100299c 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100299c 0009:Call gdi32.SetPixel(00000314,000004c3,0000000b,00008000) ret=010029ab 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ab 0009:Call gdi32.SetPixel(00000314,0000047d,00000069,00008000) ret=010029bf 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029bf 0009:Call gdi32.SetPixel(00000314,0000047e,00000069,00008000) ret=010029d0 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029d0 0009:Call gdi32.SetPixel(00000314,0000047d,00000068,00008000) ret=010029de 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029de 0009:Call gdi32.SetPixel(00000314,000004c3,00000069,00008000) ret=010029ef 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ef 0009:Call gdi32.SetPixel(00000314,000004c2,00000069,00008000) ret=01002a00 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a00 0009:Call gdi32.SetPixel(00000314,000004c3,00000068,00008000) ret=01002a11 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a11 0009:Call gdi32.SelectObject(00000c5c,0000006c) ret=010061a0 0009:Ret gdi32.SelectObject() retval=00000c74 ret=010061a0 0009:Call gdi32.DeleteObject(00000c74) ret=010061a9 0009:Ret gdi32.DeleteObject() retval=00000001 ret=010061a9 0009:Call gdi32.DeleteDC(00000c5c) ret=010061b4 0009:Ret gdi32.DeleteDC() retval=00000001 ret=010061b4 0009:Call gdi32.DeleteDC(00000c50) ret=010061b9 0009:Ret gdi32.DeleteDC() retval=00000001 ret=010061b9 0009:Call user32.GetClientRect(00010030,0033f190) ret=01003826 0009:Ret user32.GetClientRect() retval=00000001 ret=01003826 0009:Call user32.GetClientRect(00010030,0033f140) ret=01002b2e 0009:Ret user32.GetClientRect() retval=00000001 ret=01002b2e 0009:Call user32.OffsetRect(0033f190,00000000,00000000) ret=01004a4e 0009:Ret user32.OffsetRect() retval=00000001 ret=01004a4e 0009:Call gdi32.CreateSolidBrush(00007f00) ret=01004a59 0009:Ret gdi32.CreateSolidBrush() retval=00000e40 ret=01004a59 0009:Call gdi32.GetStockObject(00000004) ret=01004a63 0009:Ret gdi32.GetStockObject() retval=00000054 ret=01004a63 0009:Call user32.FillRect(00000314,0033f190,00000e40) ret=01004a78 0009:Ret user32.FillRect() retval=00000001 ret=01004a78 0009:Call gdi32.DeleteObject(00000e40) ret=01004a7f 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01004a7f 0009:Call user32.FrameRect(00000314,0033f190,00000054) ret=01004a92 0009:Ret user32.FrameRect() retval=00000001 ret=01004a92 0009:Call gdi32.GetBkMode(00000314) ret=01004a99 0009:Ret gdi32.GetBkMode() retval=00000002 ret=01004a99 0009:Call gdi32.GetTextColor(00000314) ret=01004aa6 0009:Ret gdi32.GetTextColor() retval=00000000 ret=01004aa6 0009:Call gdi32.SetBkMode(00000314,00000001) ret=01004ab5 0009:Ret gdi32.SetBkMode() retval=00000002 ret=01004ab5 0009:Call gdi32.SetTextColor(00000314,00ffffff) ret=01004ac1 0009:Ret gdi32.SetTextColor() retval=00000000 ret=01004ac1 0009:Call user32.SetRect(0033f17c,00000225,00000276,0000027f,0000028a) ret=01004aec 0009:Ret user32.SetRect() retval=00000001 ret=01004aec 0009:Call user32.LoadStringW(01000000,00000035,01011800,00000400) ret=0100361b 0009:Ret user32.LoadStringW() retval=00000006 ret=0100361b 0009:Call user32.DrawTextW(00000314,01011800 L"Score:",ffffffff,0033f17c,00000022) ret=01004b08 0009:Ret user32.DrawTextW() retval=00000010 ret=01004b08 0009:Call user32.SetRect(0033f17c,00000225,0000028a,0000027f,000002a8) ret=01004b2d 0009:Ret user32.SetRect() retval=00000001 ret=01004b2d 0009:Call user32.LoadStringW(01000000,00000036,01011800,00000400) ret=0100361b 0009:Ret user32.LoadStringW() retval=00000006 ret=0100361b 0009:Call user32.DrawTextW(00000314,01011800 L"Moves:",ffffffff,0033f17c,00000022) ret=01004b43 0009:Ret user32.DrawTextW() retval=00000010 ret=01004b43 0009:Call user32.SetRect(0033f17c,00000289,00000276,000002e3,0000028a) ret=01004b8c 0009:Ret user32.SetRect() retval=00000001 ret=01004b8c 0009:Call user32.DrawTextW(00000314,0033f1a4 L"500",ffffffff,0033f17c,00000020) ret=01004ba1 0009:Ret user32.DrawTextW() retval=00000010 ret=01004ba1 0009:Call user32.SetRect(0033f17c,00000289,0000028a,000002e3,000002a8) ret=01004bea 0009:Ret user32.SetRect() retval=00000001 ret=01004bea 0009:Call user32.DrawTextW(00000314,0033f1a4 L"0",ffffffff,0033f17c,00000020) ret=01004bff 0009:Ret user32.DrawTextW() retval=00000010 ret=01004bff 0009:Call gdi32.SetBkMode(00000314,00000002) ret=01004c0c 0009:Ret gdi32.SetBkMode() retval=00000001 ret=01004c0c 0009:Call gdi32.SetTextColor(00000314,00000000) ret=01004c19 0009:Ret gdi32.SetTextColor() retval=00ffffff ret=01004c19 0009:Call user32.GetClientRect(00010030,0033f248) ret=01002b2e 0009:Ret user32.GetClientRect() retval=00000001 ret=01002b2e 0009:Call user32.GetClientRect(00010030,0033f250) ret=01002b2e 0009:Ret user32.GetClientRect() retval=00000001 ret=01002b2e 0009:Call user32.EndPaint(00010030,0033f364) ret=01006ee5 0009:Ret user32.EndPaint() retval=00000001 ret=01006ee5 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_PAINT,wp=00000000,lp=00000000) retval=00000000 0009:Ret user32.UpdateWindow() retval=00000001 ret=01005b7e 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,0000000c) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c0938 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,0000000c) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c0950 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,0000000c) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c0968 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,0000000c) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c0980 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,0000000c) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c0998 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,0000000c) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c09b0 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,0000000c) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c09c8 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,0000000c) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c09e0 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,0000000c) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c09f8 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,0000000c) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c0a10 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,0000000c) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c0a28 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,0000000c) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c0a40 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,0000000c) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c0a58 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,0000000c) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c0a70 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,0000000c) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c0a88 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,0000000c) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c0aa0 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,0000000c) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c0ab8 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,0000000c) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c0ad0 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,0000000c) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c0ae8 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,0000000c) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c0b00 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,0000000c) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c0b18 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,0000000c) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c0b30 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,0000000c) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c0b48 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,0000000c) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c0b60 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,0000000c) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c0b78 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,0000000c) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c0b90 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,0000000c) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c0ba8 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,0000000c) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c0bc0 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,0000000c) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c0bd8 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,0000000c) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c0bf0 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,0000000c) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c0c08 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,0000000c) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c0c20 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,0000000c) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c55b0 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,0000000c) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c55c8 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,0000000c) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c55e0 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,0000000c) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c55f8 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,0000000c) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c5610 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,0000000c) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c5628 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,0000000c) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c5640 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,0000000c) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c5658 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,0000000c) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c5670 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,0000000c) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c5688 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,0000000c) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c56a0 ret=0100a7d2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,0000000c) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c56b8 ret=0100a7d2 0009:Call user32.InvalidateRect(00010030,00000000,00000001) ret=01005bd2 0009:Ret user32.InvalidateRect() retval=00000001 ret=01005bd2 0009:Call user32.UpdateWindow(00010030) ret=01005be2 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_PAINT,wp=00000000,lp=00000000) 0009:Call user32.BeginPaint(00010030,0033f364) ret=01006ec0 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_ERASEBKGND,wp=00000314,lp=00000000) 0009:Call user32.DefWindowProcW(00010030,00000014,00000314,00000000) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_ERASEBKGND,wp=00000314,lp=00000000) retval=00000000 0009:Ret user32.BeginPaint() retval=00000314 ret=01006ec0 0009:Call user32.GetClientRect(00010030,0033f290) ret=01005cd6 0009:Ret user32.GetClientRect() retval=00000001 ret=01005cd6 0009:Call gdi32.CreateCompatibleDC(00000314) ret=0100272b 0009:Ret gdi32.CreateCompatibleDC() retval=00000e70 ret=0100272b 0009:Call user32.LoadBitmapW(01000000,010012bc L"FELT") ret=0100273f 0009:Ret user32.LoadBitmapW() retval=00000e88 ret=0100273f 0009:Call gdi32.SelectObject(00000e70,00000e88) ret=0100274c 0009:Ret gdi32.SelectObject() retval=0000006c ret=0100274c 0009:Call gdi32.BitBlt(00000314,00000000,00000000,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000003f,00000000,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000007e,00000000,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000bd,00000000,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000fc,00000000,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000013b,00000000,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000017a,00000000,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001b9,00000000,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001f8,00000000,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000237,00000000,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000276,00000000,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002b5,00000000,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002f4,00000000,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000333,00000000,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000372,00000000,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003b1,00000000,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003f0,00000000,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000042f,00000000,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000046e,00000000,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ad,00000000,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ec,00000000,00000013,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000000,00000040,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000003f,00000040,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000007e,00000040,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000bd,00000040,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000fc,00000040,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000013b,00000040,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000017a,00000040,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001b9,00000040,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001f8,00000040,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000237,00000040,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000276,00000040,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002b5,00000040,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002f4,00000040,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000333,00000040,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000372,00000040,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003b1,00000040,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003f0,00000040,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000042f,00000040,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000046e,00000040,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ad,00000040,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ec,00000040,00000013,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000000,00000080,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000003f,00000080,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000007e,00000080,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000bd,00000080,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000fc,00000080,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000013b,00000080,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000017a,00000080,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001b9,00000080,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001f8,00000080,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000237,00000080,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000276,00000080,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002b5,00000080,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002f4,00000080,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000333,00000080,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000372,00000080,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003b1,00000080,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003f0,00000080,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000042f,00000080,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000046e,00000080,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ad,00000080,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ec,00000080,00000013,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000000,000000c0,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000003f,000000c0,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000007e,000000c0,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000bd,000000c0,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000fc,000000c0,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000013b,000000c0,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000017a,000000c0,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001b9,000000c0,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001f8,000000c0,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000237,000000c0,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000276,000000c0,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002b5,000000c0,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002f4,000000c0,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000333,000000c0,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000372,000000c0,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003b1,000000c0,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003f0,000000c0,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000042f,000000c0,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000046e,000000c0,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ad,000000c0,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ec,000000c0,00000013,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000000,00000100,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000003f,00000100,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000007e,00000100,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000bd,00000100,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000fc,00000100,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000013b,00000100,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000017a,00000100,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001b9,00000100,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001f8,00000100,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000237,00000100,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000276,00000100,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002b5,00000100,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002f4,00000100,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000333,00000100,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000372,00000100,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003b1,00000100,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003f0,00000100,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000042f,00000100,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000046e,00000100,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ad,00000100,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ec,00000100,00000013,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000000,00000140,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000003f,00000140,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000007e,00000140,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000bd,00000140,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000fc,00000140,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000013b,00000140,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000017a,00000140,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001b9,00000140,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001f8,00000140,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000237,00000140,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000276,00000140,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002b5,00000140,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002f4,00000140,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000333,00000140,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000372,00000140,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003b1,00000140,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003f0,00000140,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000042f,00000140,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000046e,00000140,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ad,00000140,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ec,00000140,00000013,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000000,00000180,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000003f,00000180,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000007e,00000180,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000bd,00000180,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000fc,00000180,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000013b,00000180,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000017a,00000180,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001b9,00000180,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001f8,00000180,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000237,00000180,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000276,00000180,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002b5,00000180,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002f4,00000180,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000333,00000180,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000372,00000180,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003b1,00000180,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003f0,00000180,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000042f,00000180,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000046e,00000180,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ad,00000180,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ec,00000180,00000013,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000000,000001c0,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000003f,000001c0,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000007e,000001c0,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000bd,000001c0,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000fc,000001c0,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000013b,000001c0,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000017a,000001c0,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001b9,000001c0,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001f8,000001c0,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000237,000001c0,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000276,000001c0,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002b5,000001c0,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002f4,000001c0,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000333,000001c0,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000372,000001c0,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003b1,000001c0,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003f0,000001c0,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000042f,000001c0,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000046e,000001c0,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ad,000001c0,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ec,000001c0,00000013,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000000,00000200,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000003f,00000200,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000007e,00000200,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000bd,00000200,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000fc,00000200,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000013b,00000200,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000017a,00000200,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001b9,00000200,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001f8,00000200,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000237,00000200,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000276,00000200,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002b5,00000200,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002f4,00000200,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000333,00000200,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000372,00000200,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003b1,00000200,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003f0,00000200,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000042f,00000200,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000046e,00000200,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ad,00000200,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ec,00000200,00000013,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000000,00000240,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000003f,00000240,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000007e,00000240,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000bd,00000240,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000fc,00000240,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000013b,00000240,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000017a,00000240,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001b9,00000240,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001f8,00000240,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000237,00000240,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000276,00000240,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002b5,00000240,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002f4,00000240,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000333,00000240,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000372,00000240,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003b1,00000240,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003f0,00000240,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000042f,00000240,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000046e,00000240,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ad,00000240,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ec,00000240,00000013,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000000,00000280,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000003f,00000280,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000007e,00000280,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000bd,00000280,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000fc,00000280,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000013b,00000280,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000017a,00000280,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001b9,00000280,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001f8,00000280,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000237,00000280,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000276,00000280,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002b5,00000280,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002f4,00000280,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000333,00000280,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000372,00000280,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003b1,00000280,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003f0,00000280,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000042f,00000280,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000046e,00000280,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ad,00000280,0000003f,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ec,00000280,00000013,00000040,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000000,000002c0,0000003f,00000002,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000003f,000002c0,0000003f,00000002,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000007e,000002c0,0000003f,00000002,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000bd,000002c0,0000003f,00000002,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000fc,000002c0,0000003f,00000002,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000013b,000002c0,0000003f,00000002,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000017a,000002c0,0000003f,00000002,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001b9,000002c0,0000003f,00000002,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001f8,000002c0,0000003f,00000002,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000237,000002c0,0000003f,00000002,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000276,000002c0,0000003f,00000002,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002b5,000002c0,0000003f,00000002,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002f4,000002c0,0000003f,00000002,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000333,000002c0,0000003f,00000002,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000372,000002c0,0000003f,00000002,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003b1,000002c0,0000003f,00000002,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003f0,000002c0,0000003f,00000002,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000042f,000002c0,0000003f,00000002,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000046e,000002c0,0000003f,00000002,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ad,000002c0,0000003f,00000002,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ec,000002c0,00000013,00000002,00000e70,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.SelectObject(00000e70,0000006c) ret=0100287b 0009:Ret gdi32.SelectObject() retval=00000e88 ret=0100287b 0009:Call gdi32.DeleteObject(00000e88) ret=01002884 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01002884 0009:Call gdi32.DeleteDC(00000e70) ret=0100288d 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100288d 0009:Call gdi32.CreateCompatibleDC(00000314) ret=01005cf3 0009:Ret gdi32.CreateCompatibleDC() retval=00000e9c ret=01005cf3 0009:Call gdi32.CreateCompatibleDC(00000314) ret=01005cf9 0009:Ret gdi32.CreateCompatibleDC() retval=00000ea8 ret=01005cf9 0009:Call user32.LoadBitmapW(01000000,010012c8 L"CARDBACK") ret=01005d0d 0009:Ret user32.LoadBitmapW() retval=00000ec0 ret=01005d0d 0009:Call gdi32.SelectObject(00000ea8,00000ec0) ret=01005d1a 0009:Ret gdi32.SelectObject() retval=0000006c ret=01005d1a 0009:Call gdi32.GetPixel(00000314,00000033,0000000a) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=00339900 ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000034,0000000a) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=00336600 ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000033,0000000b) ret=01005e50 0009:Ret gdi32.GetPixel() retval=00666600 ret=01005e50 0009:Call gdi32.GetPixel(00000314,00000079,0000000a) ret=01005e63 0009:Ret gdi32.GetPixel() retval=00336600 ret=01005e63 0009:Call gdi32.GetPixel(00000314,00000078,0000000a) ret=01005e76 0009:Ret gdi32.GetPixel() retval=00339900 ret=01005e76 0009:Call gdi32.GetPixel(00000314,00000079,0000000b) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=00336600 ret=01005e8b 0009:Call gdi32.BitBlt(00000314,00000033,0000000a,00000047,00000009,00000ea8,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,00000033,0000000a,00339900) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00339900 ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000034,0000000a,00336600) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00336600 ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000033,0000000b,00666600) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00666600 ret=01005ff0 0009:Call gdi32.SetPixel(00000314,00000079,0000000a,00336600) ret=01006003 0009:Ret gdi32.SetPixel() retval=00336600 ret=01006003 0009:Call gdi32.SetPixel(00000314,00000078,0000000a,00339900) ret=01006016 0009:Ret gdi32.SetPixel() retval=00339900 ret=01006016 0009:Call gdi32.SetPixel(00000314,00000079,0000000b,00336600) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00336600 ret=0100602b 0009:Call gdi32.GetPixel(00000314,00000033,00000011) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=00000000 ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000034,00000011) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=003300cc ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000033,00000012) ret=01005e50 0009:Ret gdi32.GetPixel() retval=00000000 ret=01005e50 0009:Call gdi32.GetPixel(00000314,00000079,00000011) ret=01005e63 0009:Ret gdi32.GetPixel() retval=00003333 ret=01005e63 0009:Call gdi32.GetPixel(00000314,00000078,00000011) ret=01005e76 0009:Ret gdi32.GetPixel() retval=00000000 ret=01005e76 0009:Call gdi32.GetPixel(00000314,00000079,00000012) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=00003333 ret=01005e8b 0009:Call gdi32.BitBlt(00000314,00000033,00000011,00000047,00000009,00000ea8,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,00000033,00000011,00000000) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00000000 ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000034,00000011,003300cc) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=003300cc ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000033,00000012,00000000) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00000000 ret=01005ff0 0009:Call gdi32.SetPixel(00000314,00000079,00000011,00003333) ret=01006003 0009:Ret gdi32.SetPixel() retval=00003333 ret=01006003 0009:Call gdi32.SetPixel(00000314,00000078,00000011,00000000) ret=01006016 0009:Ret gdi32.SetPixel() retval=00000000 ret=01006016 0009:Call gdi32.SetPixel(00000314,00000079,00000012,00003333) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00003333 ret=0100602b 0009:Call gdi32.GetPixel(00000314,00000033,00000018) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=00000000 ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000034,00000018) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=003300cc ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000033,00000019) ret=01005e50 0009:Ret gdi32.GetPixel() retval=00000000 ret=01005e50 0009:Call gdi32.GetPixel(00000314,00000079,00000018) ret=01005e63 0009:Ret gdi32.GetPixel() retval=00003333 ret=01005e63 0009:Call gdi32.GetPixel(00000314,00000078,00000018) ret=01005e76 0009:Ret gdi32.GetPixel() retval=00000000 ret=01005e76 0009:Call gdi32.GetPixel(00000314,00000079,00000019) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=00003333 ret=01005e8b 0009:Call gdi32.BitBlt(00000314,00000033,00000018,00000047,00000009,00000ea8,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,00000033,00000018,00000000) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00000000 ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000034,00000018,003300cc) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=003300cc ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000033,00000019,00000000) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00000000 ret=01005ff0 0009:Call gdi32.SetPixel(00000314,00000079,00000018,00003333) ret=01006003 0009:Ret gdi32.SetPixel() retval=00003333 ret=01006003 0009:Call gdi32.SetPixel(00000314,00000078,00000018,00000000) ret=01006016 0009:Ret gdi32.SetPixel() retval=00000000 ret=01006016 0009:Call gdi32.SetPixel(00000314,00000079,00000019,00003333) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00003333 ret=0100602b 0009:Call gdi32.GetPixel(00000314,00000033,0000001f) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=00000000 ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000034,0000001f) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=003300cc ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000033,00000020) ret=01005e50 0009:Ret gdi32.GetPixel() retval=00000000 ret=01005e50 0009:Call gdi32.GetPixel(00000314,00000079,0000001f) ret=01005e63 0009:Ret gdi32.GetPixel() retval=00003333 ret=01005e63 0009:Call gdi32.GetPixel(00000314,00000078,0000001f) ret=01005e76 0009:Ret gdi32.GetPixel() retval=00000000 ret=01005e76 0009:Call gdi32.GetPixel(00000314,00000079,00000020) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=00003333 ret=01005e8b 0009:Call gdi32.BitBlt(00000314,00000033,0000001f,00000047,00000009,00000ea8,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,00000033,0000001f,00000000) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00000000 ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000034,0000001f,003300cc) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=003300cc ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000033,00000020,00000000) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00000000 ret=01005ff0 0009:Call gdi32.SetPixel(00000314,00000079,0000001f,00003333) ret=01006003 0009:Ret gdi32.SetPixel() retval=00003333 ret=01006003 0009:Call gdi32.SetPixel(00000314,00000078,0000001f,00000000) ret=01006016 0009:Ret gdi32.SetPixel() retval=00000000 ret=01006016 0009:Call gdi32.SetPixel(00000314,00000079,00000020,00003333) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00003333 ret=0100602b 0009:Call gdi32.GetPixel(00000314,00000033,00000026) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=00000000 ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000034,00000026) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=003300cc ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000033,00000027) ret=01005e50 0009:Ret gdi32.GetPixel() retval=00000000 ret=01005e50 0009:Call gdi32.GetPixel(00000314,00000079,00000026) ret=01005e63 0009:Ret gdi32.GetPixel() retval=00003333 ret=01005e63 0009:Call gdi32.GetPixel(00000314,00000078,00000026) ret=01005e76 0009:Ret gdi32.GetPixel() retval=00000000 ret=01005e76 0009:Call gdi32.GetPixel(00000314,00000079,00000027) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=00003333 ret=01005e8b 0009:Call gdi32.GetPixel(00000314,00000033,00000085) ret=01005ea5 0009:Ret gdi32.GetPixel() retval=00339900 ret=01005ea5 0009:Call gdi32.GetPixel(00000314,00000034,00000085) ret=01005eba 0009:Ret gdi32.GetPixel() retval=00336600 ret=01005eba 0009:Call gdi32.GetPixel(00000314,00000033,00000084) ret=01005ecd 0009:Ret gdi32.GetPixel() retval=00666600 ret=01005ecd 0009:Call gdi32.GetPixel(00000314,00000079,00000085) ret=01005ee1 0009:Ret gdi32.GetPixel() retval=00336600 ret=01005ee1 0009:Call gdi32.GetPixel(00000314,00000078,00000085) ret=01005ef5 0009:Ret gdi32.GetPixel() retval=00339900 ret=01005ef5 0009:Call gdi32.GetPixel(00000314,00000079,00000084) ret=01005f09 0009:Ret gdi32.GetPixel() retval=00339900 ret=01005f09 0009:Call gdi32.BitBlt(00000314,00000033,00000026,00000047,00000060,00000ea8,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,00000033,00000026,00000000) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00000000 ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000034,00000026,003300cc) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=003300cc ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000033,00000027,00000000) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00000000 ret=01005ff0 0009:Call gdi32.SetPixel(00000314,00000079,00000026,00003333) ret=01006003 0009:Ret gdi32.SetPixel() retval=00003333 ret=01006003 0009:Call gdi32.SetPixel(00000314,00000078,00000026,00000000) ret=01006016 0009:Ret gdi32.SetPixel() retval=00000000 ret=01006016 0009:Call gdi32.SetPixel(00000314,00000079,00000027,00003333) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00003333 ret=0100602b 0009:Call gdi32.SetPixel(00000314,00000033,00000085,00339900) ret=01006044 0009:Ret gdi32.SetPixel() retval=00339900 ret=01006044 0009:Call gdi32.SetPixel(00000314,00000034,00000085,00336600) ret=01006059 0009:Ret gdi32.SetPixel() retval=00336600 ret=01006059 0009:Call gdi32.SetPixel(00000314,00000033,00000084,00666600) ret=01006069 0009:Ret gdi32.SetPixel() retval=00666600 ret=01006069 0009:Call gdi32.SetPixel(00000314,00000079,00000085,00336600) ret=0100607d 0009:Ret gdi32.SetPixel() retval=00336600 ret=0100607d 0009:Call gdi32.SetPixel(00000314,00000078,00000085,00339900) ret=01006091 0009:Ret gdi32.SetPixel() retval=00339900 ret=01006091 0009:Call gdi32.SetPixel(00000314,00000079,00000084,00339900) ret=010060a5 0009:Ret gdi32.SetPixel() retval=00339900 ret=010060a5 0009:Call gdi32.GetPixel(00000314,000000ad,0000000a) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=00339900 ret=01005e2e 0009:Call gdi32.GetPixel(00000314,000000ae,0000000a) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=00669900 ret=01005e3f 0009:Call gdi32.GetPixel(00000314,000000ad,0000000b) ret=01005e50 0009:Ret gdi32.GetPixel() retval=00339900 ret=01005e50 0009:Call gdi32.GetPixel(00000314,000000f3,0000000a) ret=01005e63 0009:Ret gdi32.GetPixel() retval=00339900 ret=01005e63 0009:Call gdi32.GetPixel(00000314,000000f2,0000000a) ret=01005e76 0009:Ret gdi32.GetPixel() retval=00339900 ret=01005e76 0009:Call gdi32.GetPixel(00000314,000000f3,0000000b) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=00339900 ret=01005e8b 0009:Call gdi32.BitBlt(00000314,000000ad,0000000a,00000047,00000009,00000ea8,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,000000ad,0000000a,00339900) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00339900 ret=01005fce 0009:Call gdi32.SetPixel(00000314,000000ae,0000000a,00669900) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00669900 ret=01005fdf 0009:Call gdi32.SetPixel(00000314,000000ad,0000000b,00339900) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00339900 ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000000f3,0000000a,00339900) ret=01006003 0009:Ret gdi32.SetPixel() retval=00339900 ret=01006003 0009:Call gdi32.SetPixel(00000314,000000f2,0000000a,00339900) ret=01006016 0009:Ret gdi32.SetPixel() retval=00339900 ret=01006016 0009:Call gdi32.SetPixel(00000314,000000f3,0000000b,00339900) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00339900 ret=0100602b 0009:Call gdi32.GetPixel(00000314,000000ad,00000011) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=00000000 ret=01005e2e 0009:Call gdi32.GetPixel(00000314,000000ae,00000011) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=003300cc ret=01005e3f 0009:Call gdi32.GetPixel(00000314,000000ad,00000012) ret=01005e50 0009:Ret gdi32.GetPixel() retval=00000000 ret=01005e50 0009:Call gdi32.GetPixel(00000314,000000f3,00000011) ret=01005e63 0009:Ret gdi32.GetPixel() retval=00003333 ret=01005e63 0009:Call gdi32.GetPixel(00000314,000000f2,00000011) ret=01005e76 0009:Ret gdi32.GetPixel() retval=00000000 ret=01005e76 0009:Call gdi32.GetPixel(00000314,000000f3,00000012) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=00003333 ret=01005e8b 0009:Call gdi32.BitBlt(00000314,000000ad,00000011,00000047,00000009,00000ea8,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,000000ad,00000011,00000000) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00000000 ret=01005fce 0009:Call gdi32.SetPixel(00000314,000000ae,00000011,003300cc) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=003300cc ret=01005fdf 0009:Call gdi32.SetPixel(00000314,000000ad,00000012,00000000) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00000000 ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000000f3,00000011,00003333) ret=01006003 0009:Ret gdi32.SetPixel() retval=00003333 ret=01006003 0009:Call gdi32.SetPixel(00000314,000000f2,00000011,00000000) ret=01006016 0009:Ret gdi32.SetPixel() retval=00000000 ret=01006016 0009:Call gdi32.SetPixel(00000314,000000f3,00000012,00003333) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00003333 ret=0100602b 0009:Call gdi32.GetPixel(00000314,000000ad,00000018) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=00000000 ret=01005e2e 0009:Call gdi32.GetPixel(00000314,000000ae,00000018) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=003300cc ret=01005e3f 0009:Call gdi32.GetPixel(00000314,000000ad,00000019) ret=01005e50 0009:Ret gdi32.GetPixel() retval=00000000 ret=01005e50 0009:Call gdi32.GetPixel(00000314,000000f3,00000018) ret=01005e63 0009:Ret gdi32.GetPixel() retval=00003333 ret=01005e63 0009:Call gdi32.GetPixel(00000314,000000f2,00000018) ret=01005e76 0009:Ret gdi32.GetPixel() retval=00000000 ret=01005e76 0009:Call gdi32.GetPixel(00000314,000000f3,00000019) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=00003333 ret=01005e8b 0009:Call gdi32.BitBlt(00000314,000000ad,00000018,00000047,00000009,00000ea8,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,000000ad,00000018,00000000) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00000000 ret=01005fce 0009:Call gdi32.SetPixel(00000314,000000ae,00000018,003300cc) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=003300cc ret=01005fdf 0009:Call gdi32.SetPixel(00000314,000000ad,00000019,00000000) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00000000 ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000000f3,00000018,00003333) ret=01006003 0009:Ret gdi32.SetPixel() retval=00003333 ret=01006003 0009:Call gdi32.SetPixel(00000314,000000f2,00000018,00000000) ret=01006016 0009:Ret gdi32.SetPixel() retval=00000000 ret=01006016 0009:Call gdi32.SetPixel(00000314,000000f3,00000019,00003333) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00003333 ret=0100602b 0009:Call gdi32.GetPixel(00000314,000000ad,0000001f) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=00000000 ret=01005e2e 0009:Call gdi32.GetPixel(00000314,000000ae,0000001f) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=003300cc ret=01005e3f 0009:Call gdi32.GetPixel(00000314,000000ad,00000020) ret=01005e50 0009:Ret gdi32.GetPixel() retval=00000000 ret=01005e50 0009:Call gdi32.GetPixel(00000314,000000f3,0000001f) ret=01005e63 0009:Ret gdi32.GetPixel() retval=00003333 ret=01005e63 0009:Call gdi32.GetPixel(00000314,000000f2,0000001f) ret=01005e76 0009:Ret gdi32.GetPixel() retval=00000000 ret=01005e76 0009:Call gdi32.GetPixel(00000314,000000f3,00000020) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=00003333 ret=01005e8b 0009:Call gdi32.BitBlt(00000314,000000ad,0000001f,00000047,00000009,00000ea8,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,000000ad,0000001f,00000000) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00000000 ret=01005fce 0009:Call gdi32.SetPixel(00000314,000000ae,0000001f,003300cc) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=003300cc ret=01005fdf 0009:Call gdi32.SetPixel(00000314,000000ad,00000020,00000000) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00000000 ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000000f3,0000001f,00003333) ret=01006003 0009:Ret gdi32.SetPixel() retval=00003333 ret=01006003 0009:Call gdi32.SetPixel(00000314,000000f2,0000001f,00000000) ret=01006016 0009:Ret gdi32.SetPixel() retval=00000000 ret=01006016 0009:Call gdi32.SetPixel(00000314,000000f3,00000020,00003333) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00003333 ret=0100602b 0009:Call gdi32.GetPixel(00000314,000000ad,00000026) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=00000000 ret=01005e2e 0009:Call gdi32.GetPixel(00000314,000000ae,00000026) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=003300cc ret=01005e3f 0009:Call gdi32.GetPixel(00000314,000000ad,00000027) ret=01005e50 0009:Ret gdi32.GetPixel() retval=00000000 ret=01005e50 0009:Call gdi32.GetPixel(00000314,000000f3,00000026) ret=01005e63 0009:Ret gdi32.GetPixel() retval=00003333 ret=01005e63 0009:Call gdi32.GetPixel(00000314,000000f2,00000026) ret=01005e76 0009:Ret gdi32.GetPixel() retval=00000000 ret=01005e76 0009:Call gdi32.GetPixel(00000314,000000f3,00000027) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=00003333 ret=01005e8b 0009:Call gdi32.GetPixel(00000314,000000ad,00000085) ret=01005ea5 0009:Ret gdi32.GetPixel() retval=00339900 ret=01005ea5 0009:Call gdi32.GetPixel(00000314,000000ae,00000085) ret=01005eba 0009:Ret gdi32.GetPixel() retval=00339900 ret=01005eba 0009:Call gdi32.GetPixel(00000314,000000ad,00000084) ret=01005ecd 0009:Ret gdi32.GetPixel() retval=00339900 ret=01005ecd 0009:Call gdi32.GetPixel(00000314,000000f3,00000085) ret=01005ee1 0009:Ret gdi32.GetPixel() retval=00339900 ret=01005ee1 0009:Call gdi32.GetPixel(00000314,000000f2,00000085) ret=01005ef5 0009:Ret gdi32.GetPixel() retval=00339900 ret=01005ef5 0009:Call gdi32.GetPixel(00000314,000000f3,00000084) ret=01005f09 0009:Ret gdi32.GetPixel() retval=00339900 ret=01005f09 0009:Call gdi32.BitBlt(00000314,000000ad,00000026,00000047,00000060,00000ea8,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,000000ad,00000026,00000000) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00000000 ret=01005fce 0009:Call gdi32.SetPixel(00000314,000000ae,00000026,003300cc) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=003300cc ret=01005fdf 0009:Call gdi32.SetPixel(00000314,000000ad,00000027,00000000) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00000000 ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000000f3,00000026,00003333) ret=01006003 0009:Ret gdi32.SetPixel() retval=00003333 ret=01006003 0009:Call gdi32.SetPixel(00000314,000000f2,00000026,00000000) ret=01006016 0009:Ret gdi32.SetPixel() retval=00000000 ret=01006016 0009:Call gdi32.SetPixel(00000314,000000f3,00000027,00003333) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00003333 ret=0100602b 0009:Call gdi32.SetPixel(00000314,000000ad,00000085,00339900) ret=01006044 0009:Ret gdi32.SetPixel() retval=00339900 ret=01006044 0009:Call gdi32.SetPixel(00000314,000000ae,00000085,00339900) ret=01006059 0009:Ret gdi32.SetPixel() retval=00339900 ret=01006059 0009:Call gdi32.SetPixel(00000314,000000ad,00000084,00339900) ret=01006069 0009:Ret gdi32.SetPixel() retval=00339900 ret=01006069 0009:Call gdi32.SetPixel(00000314,000000f3,00000085,00339900) ret=0100607d 0009:Ret gdi32.SetPixel() retval=00339900 ret=0100607d 0009:Call gdi32.SetPixel(00000314,000000f2,00000085,00339900) ret=01006091 0009:Ret gdi32.SetPixel() retval=00339900 ret=01006091 0009:Call gdi32.SetPixel(00000314,000000f3,00000084,00339900) ret=010060a5 0009:Ret gdi32.SetPixel() retval=00339900 ret=010060a5 0009:Call gdi32.GetPixel(00000314,00000127,0000000a) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=00339900 ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000128,0000000a) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=00336600 ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000127,0000000b) ret=01005e50 0009:Ret gdi32.GetPixel() retval=00666600 ret=01005e50 0009:Call gdi32.GetPixel(00000314,0000016d,0000000a) ret=01005e63 0009:Ret gdi32.GetPixel() retval=00339900 ret=01005e63 0009:Call gdi32.GetPixel(00000314,0000016c,0000000a) ret=01005e76 0009:Ret gdi32.GetPixel() retval=00336600 ret=01005e76 0009:Call gdi32.GetPixel(00000314,0000016d,0000000b) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=00339900 ret=01005e8b 0009:Call gdi32.BitBlt(00000314,00000127,0000000a,00000047,00000009,00000ea8,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,00000127,0000000a,00339900) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00339900 ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000128,0000000a,00336600) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00336600 ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000127,0000000b,00666600) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00666600 ret=01005ff0 0009:Call gdi32.SetPixel(00000314,0000016d,0000000a,00339900) ret=01006003 0009:Ret gdi32.SetPixel() retval=00339900 ret=01006003 0009:Call gdi32.SetPixel(00000314,0000016c,0000000a,00336600) ret=01006016 0009:Ret gdi32.SetPixel() retval=00336600 ret=01006016 0009:Call gdi32.SetPixel(00000314,0000016d,0000000b,00339900) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00339900 ret=0100602b 0009:Call gdi32.GetPixel(00000314,00000127,00000011) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=00000000 ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000128,00000011) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=003300cc ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000127,00000012) ret=01005e50 0009:Ret gdi32.GetPixel() retval=00000000 ret=01005e50 0009:Call gdi32.GetPixel(00000314,0000016d,00000011) ret=01005e63 0009:Ret gdi32.GetPixel() retval=00003333 ret=01005e63 0009:Call gdi32.GetPixel(00000314,0000016c,00000011) ret=01005e76 0009:Ret gdi32.GetPixel() retval=00000000 ret=01005e76 0009:Call gdi32.GetPixel(00000314,0000016d,00000012) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=00003333 ret=01005e8b 0009:Call gdi32.BitBlt(00000314,00000127,00000011,00000047,00000009,00000ea8,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,00000127,00000011,00000000) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00000000 ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000128,00000011,003300cc) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=003300cc ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000127,00000012,00000000) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00000000 ret=01005ff0 0009:Call gdi32.SetPixel(00000314,0000016d,00000011,00003333) ret=01006003 0009:Ret gdi32.SetPixel() retval=00003333 ret=01006003 0009:Call gdi32.SetPixel(00000314,0000016c,00000011,00000000) ret=01006016 0009:Ret gdi32.SetPixel() retval=00000000 ret=01006016 0009:Call gdi32.SetPixel(00000314,0000016d,00000012,00003333) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00003333 ret=0100602b 0009:Call gdi32.GetPixel(00000314,00000127,00000018) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=00000000 ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000128,00000018) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=003300cc ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000127,00000019) ret=01005e50 0009:Ret gdi32.GetPixel() retval=00000000 ret=01005e50 0009:Call gdi32.GetPixel(00000314,0000016d,00000018) ret=01005e63 0009:Ret gdi32.GetPixel() retval=00003333 ret=01005e63 0009:Call gdi32.GetPixel(00000314,0000016c,00000018) ret=01005e76 0009:Ret gdi32.GetPixel() retval=00000000 ret=01005e76 0009:Call gdi32.GetPixel(00000314,0000016d,00000019) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=00003333 ret=01005e8b 0009:Call gdi32.BitBlt(00000314,00000127,00000018,00000047,00000009,00000ea8,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,00000127,00000018,00000000) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00000000 ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000128,00000018,003300cc) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=003300cc ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000127,00000019,00000000) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00000000 ret=01005ff0 0009:Call gdi32.SetPixel(00000314,0000016d,00000018,00003333) ret=01006003 0009:Ret gdi32.SetPixel() retval=00003333 ret=01006003 0009:Call gdi32.SetPixel(00000314,0000016c,00000018,00000000) ret=01006016 0009:Ret gdi32.SetPixel() retval=00000000 ret=01006016 0009:Call gdi32.SetPixel(00000314,0000016d,00000019,00003333) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00003333 ret=0100602b 0009:Call gdi32.GetPixel(00000314,00000127,0000001f) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=00000000 ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000128,0000001f) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=003300cc ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000127,00000020) ret=01005e50 0009:Ret gdi32.GetPixel() retval=00000000 ret=01005e50 0009:Call gdi32.GetPixel(00000314,0000016d,0000001f) ret=01005e63 0009:Ret gdi32.GetPixel() retval=00003333 ret=01005e63 0009:Call gdi32.GetPixel(00000314,0000016c,0000001f) ret=01005e76 0009:Ret gdi32.GetPixel() retval=00000000 ret=01005e76 0009:Call gdi32.GetPixel(00000314,0000016d,00000020) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=00003333 ret=01005e8b 0009:Call gdi32.BitBlt(00000314,00000127,0000001f,00000047,00000009,00000ea8,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,00000127,0000001f,00000000) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00000000 ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000128,0000001f,003300cc) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=003300cc ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000127,00000020,00000000) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00000000 ret=01005ff0 0009:Call gdi32.SetPixel(00000314,0000016d,0000001f,00003333) ret=01006003 0009:Ret gdi32.SetPixel() retval=00003333 ret=01006003 0009:Call gdi32.SetPixel(00000314,0000016c,0000001f,00000000) ret=01006016 0009:Ret gdi32.SetPixel() retval=00000000 ret=01006016 0009:Call gdi32.SetPixel(00000314,0000016d,00000020,00003333) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00003333 ret=0100602b 0009:Call gdi32.GetPixel(00000314,00000127,00000026) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=00000000 ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000128,00000026) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=003300cc ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000127,00000027) ret=01005e50 0009:Ret gdi32.GetPixel() retval=00000000 ret=01005e50 0009:Call gdi32.GetPixel(00000314,0000016d,00000026) ret=01005e63 0009:Ret gdi32.GetPixel() retval=00003333 ret=01005e63 0009:Call gdi32.GetPixel(00000314,0000016c,00000026) ret=01005e76 0009:Ret gdi32.GetPixel() retval=00000000 ret=01005e76 0009:Call gdi32.GetPixel(00000314,0000016d,00000027) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=00003333 ret=01005e8b 0009:Call gdi32.GetPixel(00000314,00000127,00000085) ret=01005ea5 0009:Ret gdi32.GetPixel() retval=00339900 ret=01005ea5 0009:Call gdi32.GetPixel(00000314,00000128,00000085) ret=01005eba 0009:Ret gdi32.GetPixel() retval=00666600 ret=01005eba 0009:Call gdi32.GetPixel(00000314,00000127,00000084) ret=01005ecd 0009:Ret gdi32.GetPixel() retval=00336600 ret=01005ecd 0009:Call gdi32.GetPixel(00000314,0000016d,00000085) ret=01005ee1 0009:Ret gdi32.GetPixel() retval=00339900 ret=01005ee1 0009:Call gdi32.GetPixel(00000314,0000016c,00000085) ret=01005ef5 0009:Ret gdi32.GetPixel() retval=00339900 ret=01005ef5 0009:Call gdi32.GetPixel(00000314,0000016d,00000084) ret=01005f09 0009:Ret gdi32.GetPixel() retval=00336600 ret=01005f09 0009:Call gdi32.BitBlt(00000314,00000127,00000026,00000047,00000060,00000ea8,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,00000127,00000026,00000000) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00000000 ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000128,00000026,003300cc) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=003300cc ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000127,00000027,00000000) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00000000 ret=01005ff0 0009:Call gdi32.SetPixel(00000314,0000016d,00000026,00003333) ret=01006003 0009:Ret gdi32.SetPixel() retval=00003333 ret=01006003 0009:Call gdi32.SetPixel(00000314,0000016c,00000026,00000000) ret=01006016 0009:Ret gdi32.SetPixel() retval=00000000 ret=01006016 0009:Call gdi32.SetPixel(00000314,0000016d,00000027,00003333) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00003333 ret=0100602b 0009:Call gdi32.SetPixel(00000314,00000127,00000085,00339900) ret=01006044 0009:Ret gdi32.SetPixel() retval=00339900 ret=01006044 0009:Call gdi32.SetPixel(00000314,00000128,00000085,00666600) ret=01006059 0009:Ret gdi32.SetPixel() retval=00666600 ret=01006059 0009:Call gdi32.SetPixel(00000314,00000127,00000084,00336600) ret=01006069 0009:Ret gdi32.SetPixel() retval=00336600 ret=01006069 0009:Call gdi32.SetPixel(00000314,0000016d,00000085,00339900) ret=0100607d 0009:Ret gdi32.SetPixel() retval=00339900 ret=0100607d 0009:Call gdi32.SetPixel(00000314,0000016c,00000085,00339900) ret=01006091 0009:Ret gdi32.SetPixel() retval=00339900 ret=01006091 0009:Call gdi32.SetPixel(00000314,0000016d,00000084,00336600) ret=010060a5 0009:Ret gdi32.SetPixel() retval=00336600 ret=010060a5 0009:Call gdi32.GetPixel(00000314,000001a1,0000000a) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=00336600 ret=01005e2e 0009:Call gdi32.GetPixel(00000314,000001a2,0000000a) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=00669900 ret=01005e3f 0009:Call gdi32.GetPixel(00000314,000001a1,0000000b) ret=01005e50 0009:Ret gdi32.GetPixel() retval=00339900 ret=01005e50 0009:Call gdi32.GetPixel(00000314,000001e7,0000000a) ret=01005e63 0009:Ret gdi32.GetPixel() retval=00336600 ret=01005e63 0009:Call gdi32.GetPixel(00000314,000001e6,0000000a) ret=01005e76 0009:Ret gdi32.GetPixel() retval=00339900 ret=01005e76 0009:Call gdi32.GetPixel(00000314,000001e7,0000000b) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=00339900 ret=01005e8b 0009:Call gdi32.BitBlt(00000314,000001a1,0000000a,00000047,00000009,00000ea8,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,000001a1,0000000a,00336600) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00336600 ret=01005fce 0009:Call gdi32.SetPixel(00000314,000001a2,0000000a,00669900) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00669900 ret=01005fdf 0009:Call gdi32.SetPixel(00000314,000001a1,0000000b,00339900) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00339900 ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000001e7,0000000a,00336600) ret=01006003 0009:Ret gdi32.SetPixel() retval=00336600 ret=01006003 0009:Call gdi32.SetPixel(00000314,000001e6,0000000a,00339900) ret=01006016 0009:Ret gdi32.SetPixel() retval=00339900 ret=01006016 0009:Call gdi32.SetPixel(00000314,000001e7,0000000b,00339900) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00339900 ret=0100602b 0009:Call gdi32.GetPixel(00000314,000001a1,00000011) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=00000000 ret=01005e2e 0009:Call gdi32.GetPixel(00000314,000001a2,00000011) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=003300cc ret=01005e3f 0009:Call gdi32.GetPixel(00000314,000001a1,00000012) ret=01005e50 0009:Ret gdi32.GetPixel() retval=00000000 ret=01005e50 0009:Call gdi32.GetPixel(00000314,000001e7,00000011) ret=01005e63 0009:Ret gdi32.GetPixel() retval=00003333 ret=01005e63 0009:Call gdi32.GetPixel(00000314,000001e6,00000011) ret=01005e76 0009:Ret gdi32.GetPixel() retval=00000000 ret=01005e76 0009:Call gdi32.GetPixel(00000314,000001e7,00000012) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=00003333 ret=01005e8b 0009:Call gdi32.BitBlt(00000314,000001a1,00000011,00000047,00000009,00000ea8,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,000001a1,00000011,00000000) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00000000 ret=01005fce 0009:Call gdi32.SetPixel(00000314,000001a2,00000011,003300cc) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=003300cc ret=01005fdf 0009:Call gdi32.SetPixel(00000314,000001a1,00000012,00000000) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00000000 ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000001e7,00000011,00003333) ret=01006003 0009:Ret gdi32.SetPixel() retval=00003333 ret=01006003 0009:Call gdi32.SetPixel(00000314,000001e6,00000011,00000000) ret=01006016 0009:Ret gdi32.SetPixel() retval=00000000 ret=01006016 0009:Call gdi32.SetPixel(00000314,000001e7,00000012,00003333) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00003333 ret=0100602b 0009:Call gdi32.GetPixel(00000314,000001a1,00000018) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=00000000 ret=01005e2e 0009:Call gdi32.GetPixel(00000314,000001a2,00000018) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=003300cc ret=01005e3f 0009:Call gdi32.GetPixel(00000314,000001a1,00000019) ret=01005e50 0009:Ret gdi32.GetPixel() retval=00000000 ret=01005e50 0009:Call gdi32.GetPixel(00000314,000001e7,00000018) ret=01005e63 0009:Ret gdi32.GetPixel() retval=00003333 ret=01005e63 0009:Call gdi32.GetPixel(00000314,000001e6,00000018) ret=01005e76 0009:Ret gdi32.GetPixel() retval=00000000 ret=01005e76 0009:Call gdi32.GetPixel(00000314,000001e7,00000019) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=00003333 ret=01005e8b 0009:Call gdi32.BitBlt(00000314,000001a1,00000018,00000047,00000009,00000ea8,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,000001a1,00000018,00000000) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00000000 ret=01005fce 0009:Call gdi32.SetPixel(00000314,000001a2,00000018,003300cc) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=003300cc ret=01005fdf 0009:Call gdi32.SetPixel(00000314,000001a1,00000019,00000000) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00000000 ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000001e7,00000018,00003333) ret=01006003 0009:Ret gdi32.SetPixel() retval=00003333 ret=01006003 0009:Call gdi32.SetPixel(00000314,000001e6,00000018,00000000) ret=01006016 0009:Ret gdi32.SetPixel() retval=00000000 ret=01006016 0009:Call gdi32.SetPixel(00000314,000001e7,00000019,00003333) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00003333 ret=0100602b 0009:Call gdi32.GetPixel(00000314,000001a1,0000001f) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=00000000 ret=01005e2e 0009:Call gdi32.GetPixel(00000314,000001a2,0000001f) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=003300cc ret=01005e3f 0009:Call gdi32.GetPixel(00000314,000001a1,00000020) ret=01005e50 0009:Ret gdi32.GetPixel() retval=00000000 ret=01005e50 0009:Call gdi32.GetPixel(00000314,000001e7,0000001f) ret=01005e63 0009:Ret gdi32.GetPixel() retval=00003333 ret=01005e63 0009:Call gdi32.GetPixel(00000314,000001e6,0000001f) ret=01005e76 0009:Ret gdi32.GetPixel() retval=00000000 ret=01005e76 0009:Call gdi32.GetPixel(00000314,000001e7,00000020) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=00003333 ret=01005e8b 0009:Call gdi32.BitBlt(00000314,000001a1,0000001f,00000047,00000009,00000ea8,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,000001a1,0000001f,00000000) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00000000 ret=01005fce 0009:Call gdi32.SetPixel(00000314,000001a2,0000001f,003300cc) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=003300cc ret=01005fdf 0009:Call gdi32.SetPixel(00000314,000001a1,00000020,00000000) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00000000 ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000001e7,0000001f,00003333) ret=01006003 0009:Ret gdi32.SetPixel() retval=00003333 ret=01006003 0009:Call gdi32.SetPixel(00000314,000001e6,0000001f,00000000) ret=01006016 0009:Ret gdi32.SetPixel() retval=00000000 ret=01006016 0009:Call gdi32.SetPixel(00000314,000001e7,00000020,00003333) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00003333 ret=0100602b 0009:Call gdi32.GetPixel(00000314,000001a1,00000026) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=00000000 ret=01005e2e 0009:Call gdi32.GetPixel(00000314,000001a2,00000026) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=003300cc ret=01005e3f 0009:Call gdi32.GetPixel(00000314,000001a1,00000027) ret=01005e50 0009:Ret gdi32.GetPixel() retval=00000000 ret=01005e50 0009:Call gdi32.GetPixel(00000314,000001e7,00000026) ret=01005e63 0009:Ret gdi32.GetPixel() retval=00003333 ret=01005e63 0009:Call gdi32.GetPixel(00000314,000001e6,00000026) ret=01005e76 0009:Ret gdi32.GetPixel() retval=00000000 ret=01005e76 0009:Call gdi32.GetPixel(00000314,000001e7,00000027) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=00003333 ret=01005e8b 0009:Call gdi32.GetPixel(00000314,000001a1,00000085) ret=01005ea5 0009:Ret gdi32.GetPixel() retval=00339900 ret=01005ea5 0009:Call gdi32.GetPixel(00000314,000001a2,00000085) ret=01005eba 0009:Ret gdi32.GetPixel() retval=00336600 ret=01005eba 0009:Call gdi32.GetPixel(00000314,000001a1,00000084) ret=01005ecd 0009:Ret gdi32.GetPixel() retval=00339900 ret=01005ecd 0009:Call gdi32.GetPixel(00000314,000001e7,00000085) ret=01005ee1 0009:Ret gdi32.GetPixel() retval=00336600 ret=01005ee1 0009:Call gdi32.GetPixel(00000314,000001e6,00000085) ret=01005ef5 0009:Ret gdi32.GetPixel() retval=00339900 ret=01005ef5 0009:Call gdi32.GetPixel(00000314,000001e7,00000084) ret=01005f09 0009:Ret gdi32.GetPixel() retval=00339900 ret=01005f09 0009:Call gdi32.BitBlt(00000314,000001a1,00000026,00000047,00000060,00000ea8,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,000001a1,00000026,00000000) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00000000 ret=01005fce 0009:Call gdi32.SetPixel(00000314,000001a2,00000026,003300cc) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=003300cc ret=01005fdf 0009:Call gdi32.SetPixel(00000314,000001a1,00000027,00000000) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00000000 ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000001e7,00000026,00003333) ret=01006003 0009:Ret gdi32.SetPixel() retval=00003333 ret=01006003 0009:Call gdi32.SetPixel(00000314,000001e6,00000026,00000000) ret=01006016 0009:Ret gdi32.SetPixel() retval=00000000 ret=01006016 0009:Call gdi32.SetPixel(00000314,000001e7,00000027,00003333) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00003333 ret=0100602b 0009:Call gdi32.SetPixel(00000314,000001a1,00000085,00339900) ret=01006044 0009:Ret gdi32.SetPixel() retval=00339900 ret=01006044 0009:Call gdi32.SetPixel(00000314,000001a2,00000085,00336600) ret=01006059 0009:Ret gdi32.SetPixel() retval=00336600 ret=01006059 0009:Call gdi32.SetPixel(00000314,000001a1,00000084,00339900) ret=01006069 0009:Ret gdi32.SetPixel() retval=00339900 ret=01006069 0009:Call gdi32.SetPixel(00000314,000001e7,00000085,00336600) ret=0100607d 0009:Ret gdi32.SetPixel() retval=00336600 ret=0100607d 0009:Call gdi32.SetPixel(00000314,000001e6,00000085,00339900) ret=01006091 0009:Ret gdi32.SetPixel() retval=00339900 ret=01006091 0009:Call gdi32.SetPixel(00000314,000001e7,00000084,00339900) ret=010060a5 0009:Ret gdi32.SetPixel() retval=00339900 ret=010060a5 0009:Call gdi32.GetPixel(00000314,0000021b,0000000a) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=00339900 ret=01005e2e 0009:Call gdi32.GetPixel(00000314,0000021c,0000000a) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=00666600 ret=01005e3f 0009:Call gdi32.GetPixel(00000314,0000021b,0000000b) ret=01005e50 0009:Ret gdi32.GetPixel() retval=00339900 ret=01005e50 0009:Call gdi32.GetPixel(00000314,00000261,0000000a) ret=01005e63 0009:Ret gdi32.GetPixel() retval=00339900 ret=01005e63 0009:Call gdi32.GetPixel(00000314,00000260,0000000a) ret=01005e76 0009:Ret gdi32.GetPixel() retval=00336600 ret=01005e76 0009:Call gdi32.GetPixel(00000314,00000261,0000000b) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=00339900 ret=01005e8b 0009:Call gdi32.BitBlt(00000314,0000021b,0000000a,00000047,00000009,00000ea8,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,0000021b,0000000a,00339900) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00339900 ret=01005fce 0009:Call gdi32.SetPixel(00000314,0000021c,0000000a,00666600) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00666600 ret=01005fdf 0009:Call gdi32.SetPixel(00000314,0000021b,0000000b,00339900) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00339900 ret=01005ff0 0009:Call gdi32.SetPixel(00000314,00000261,0000000a,00339900) ret=01006003 0009:Ret gdi32.SetPixel() retval=00339900 ret=01006003 0009:Call gdi32.SetPixel(00000314,00000260,0000000a,00336600) ret=01006016 0009:Ret gdi32.SetPixel() retval=00336600 ret=01006016 0009:Call gdi32.SetPixel(00000314,00000261,0000000b,00339900) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00339900 ret=0100602b 0009:Call gdi32.GetPixel(00000314,0000021b,00000011) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=00000000 ret=01005e2e 0009:Call gdi32.GetPixel(00000314,0000021c,00000011) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=003300cc ret=01005e3f 0009:Call gdi32.GetPixel(00000314,0000021b,00000012) ret=01005e50 0009:Ret gdi32.GetPixel() retval=00000000 ret=01005e50 0009:Call gdi32.GetPixel(00000314,00000261,00000011) ret=01005e63 0009:Ret gdi32.GetPixel() retval=00003333 ret=01005e63 0009:Call gdi32.GetPixel(00000314,00000260,00000011) ret=01005e76 0009:Ret gdi32.GetPixel() retval=00000000 ret=01005e76 0009:Call gdi32.GetPixel(00000314,00000261,00000012) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=00003333 ret=01005e8b 0009:Call gdi32.BitBlt(00000314,0000021b,00000011,00000047,00000009,00000ea8,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,0000021b,00000011,00000000) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00000000 ret=01005fce 0009:Call gdi32.SetPixel(00000314,0000021c,00000011,003300cc) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=003300cc ret=01005fdf 0009:Call gdi32.SetPixel(00000314,0000021b,00000012,00000000) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00000000 ret=01005ff0 0009:Call gdi32.SetPixel(00000314,00000261,00000011,00003333) ret=01006003 0009:Ret gdi32.SetPixel() retval=00003333 ret=01006003 0009:Call gdi32.SetPixel(00000314,00000260,00000011,00000000) ret=01006016 0009:Ret gdi32.SetPixel() retval=00000000 ret=01006016 0009:Call gdi32.SetPixel(00000314,00000261,00000012,00003333) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00003333 ret=0100602b 0009:Call gdi32.GetPixel(00000314,0000021b,00000018) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=00000000 ret=01005e2e 0009:Call gdi32.GetPixel(00000314,0000021c,00000018) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=003300cc ret=01005e3f 0009:Call gdi32.GetPixel(00000314,0000021b,00000019) ret=01005e50 0009:Ret gdi32.GetPixel() retval=00000000 ret=01005e50 0009:Call gdi32.GetPixel(00000314,00000261,00000018) ret=01005e63 0009:Ret gdi32.GetPixel() retval=00003333 ret=01005e63 0009:Call gdi32.GetPixel(00000314,00000260,00000018) ret=01005e76 0009:Ret gdi32.GetPixel() retval=00000000 ret=01005e76 0009:Call gdi32.GetPixel(00000314,00000261,00000019) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=00003333 ret=01005e8b 0009:Call gdi32.BitBlt(00000314,0000021b,00000018,00000047,00000009,00000ea8,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,0000021b,00000018,00000000) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00000000 ret=01005fce 0009:Call gdi32.SetPixel(00000314,0000021c,00000018,003300cc) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=003300cc ret=01005fdf 0009:Call gdi32.SetPixel(00000314,0000021b,00000019,00000000) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00000000 ret=01005ff0 0009:Call gdi32.SetPixel(00000314,00000261,00000018,00003333) ret=01006003 0009:Ret gdi32.SetPixel() retval=00003333 ret=01006003 0009:Call gdi32.SetPixel(00000314,00000260,00000018,00000000) ret=01006016 0009:Ret gdi32.SetPixel() retval=00000000 ret=01006016 0009:Call gdi32.SetPixel(00000314,00000261,00000019,00003333) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00003333 ret=0100602b 0009:Call gdi32.GetPixel(00000314,0000021b,0000001f) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=00000000 ret=01005e2e 0009:Call gdi32.GetPixel(00000314,0000021c,0000001f) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=003300cc ret=01005e3f 0009:Call gdi32.GetPixel(00000314,0000021b,00000020) ret=01005e50 0009:Ret gdi32.GetPixel() retval=00000000 ret=01005e50 0009:Call gdi32.GetPixel(00000314,00000261,0000001f) ret=01005e63 0009:Ret gdi32.GetPixel() retval=00003333 ret=01005e63 0009:Call gdi32.GetPixel(00000314,00000260,0000001f) ret=01005e76 0009:Ret gdi32.GetPixel() retval=00000000 ret=01005e76 0009:Call gdi32.GetPixel(00000314,00000261,00000020) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=00003333 ret=01005e8b 0009:Call gdi32.GetPixel(00000314,0000021b,0000007e) ret=01005ea5 0009:Ret gdi32.GetPixel() retval=00339900 ret=01005ea5 0009:Call gdi32.GetPixel(00000314,0000021c,0000007e) ret=01005eba 0009:Ret gdi32.GetPixel() retval=00339900 ret=01005eba 0009:Call gdi32.GetPixel(00000314,0000021b,0000007d) ret=01005ecd 0009:Ret gdi32.GetPixel() retval=00339900 ret=01005ecd 0009:Call gdi32.GetPixel(00000314,00000261,0000007e) ret=01005ee1 0009:Ret gdi32.GetPixel() retval=00669900 ret=01005ee1 0009:Call gdi32.GetPixel(00000314,00000260,0000007e) ret=01005ef5 0009:Ret gdi32.GetPixel() retval=00336600 ret=01005ef5 0009:Call gdi32.GetPixel(00000314,00000261,0000007d) ret=01005f09 0009:Ret gdi32.GetPixel() retval=00339900 ret=01005f09 0009:Call gdi32.BitBlt(00000314,0000021b,0000001f,00000047,00000060,00000ea8,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,0000021b,0000001f,00000000) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00000000 ret=01005fce 0009:Call gdi32.SetPixel(00000314,0000021c,0000001f,003300cc) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=003300cc ret=01005fdf 0009:Call gdi32.SetPixel(00000314,0000021b,00000020,00000000) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00000000 ret=01005ff0 0009:Call gdi32.SetPixel(00000314,00000261,0000001f,00003333) ret=01006003 0009:Ret gdi32.SetPixel() retval=00003333 ret=01006003 0009:Call gdi32.SetPixel(00000314,00000260,0000001f,00000000) ret=01006016 0009:Ret gdi32.SetPixel() retval=00000000 ret=01006016 0009:Call gdi32.SetPixel(00000314,00000261,00000020,00003333) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00003333 ret=0100602b 0009:Call gdi32.SetPixel(00000314,0000021b,0000007e,00339900) ret=01006044 0009:Ret gdi32.SetPixel() retval=00339900 ret=01006044 0009:Call gdi32.SetPixel(00000314,0000021c,0000007e,00339900) ret=01006059 0009:Ret gdi32.SetPixel() retval=00339900 ret=01006059 0009:Call gdi32.SetPixel(00000314,0000021b,0000007d,00339900) ret=01006069 0009:Ret gdi32.SetPixel() retval=00339900 ret=01006069 0009:Call gdi32.SetPixel(00000314,00000261,0000007e,00669900) ret=0100607d 0009:Ret gdi32.SetPixel() retval=00669900 ret=0100607d 0009:Call gdi32.SetPixel(00000314,00000260,0000007e,00336600) ret=01006091 0009:Ret gdi32.SetPixel() retval=00336600 ret=01006091 0009:Call gdi32.SetPixel(00000314,00000261,0000007d,00339900) ret=010060a5 0009:Ret gdi32.SetPixel() retval=00339900 ret=010060a5 0009:Call gdi32.GetPixel(00000314,00000295,0000000a) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=00336600 ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000296,0000000a) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=00339900 ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000295,0000000b) ret=01005e50 0009:Ret gdi32.GetPixel() retval=00339900 ret=01005e50 0009:Call gdi32.GetPixel(00000314,000002db,0000000a) ret=01005e63 0009:Ret gdi32.GetPixel() retval=00669900 ret=01005e63 0009:Call gdi32.GetPixel(00000314,000002da,0000000a) ret=01005e76 0009:Ret gdi32.GetPixel() retval=00339900 ret=01005e76 0009:Call gdi32.GetPixel(00000314,000002db,0000000b) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=00336600 ret=01005e8b 0009:Call gdi32.BitBlt(00000314,00000295,0000000a,00000047,00000009,00000ea8,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,00000295,0000000a,00336600) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00336600 ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000296,0000000a,00339900) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00339900 ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000295,0000000b,00339900) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00339900 ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000002db,0000000a,00669900) ret=01006003 0009:Ret gdi32.SetPixel() retval=00669900 ret=01006003 0009:Call gdi32.SetPixel(00000314,000002da,0000000a,00339900) ret=01006016 0009:Ret gdi32.SetPixel() retval=00339900 ret=01006016 0009:Call gdi32.SetPixel(00000314,000002db,0000000b,00336600) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00336600 ret=0100602b 0009:Call gdi32.GetPixel(00000314,00000295,00000011) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=00000000 ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000296,00000011) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=003300cc ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000295,00000012) ret=01005e50 0009:Ret gdi32.GetPixel() retval=00000000 ret=01005e50 0009:Call gdi32.GetPixel(00000314,000002db,00000011) ret=01005e63 0009:Ret gdi32.GetPixel() retval=00003333 ret=01005e63 0009:Call gdi32.GetPixel(00000314,000002da,00000011) ret=01005e76 0009:Ret gdi32.GetPixel() retval=00000000 ret=01005e76 0009:Call gdi32.GetPixel(00000314,000002db,00000012) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=00003333 ret=01005e8b 0009:Call gdi32.BitBlt(00000314,00000295,00000011,00000047,00000009,00000ea8,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,00000295,00000011,00000000) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00000000 ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000296,00000011,003300cc) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=003300cc ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000295,00000012,00000000) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00000000 ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000002db,00000011,00003333) ret=01006003 0009:Ret gdi32.SetPixel() retval=00003333 ret=01006003 0009:Call gdi32.SetPixel(00000314,000002da,00000011,00000000) ret=01006016 0009:Ret gdi32.SetPixel() retval=00000000 ret=01006016 0009:Call gdi32.SetPixel(00000314,000002db,00000012,00003333) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00003333 ret=0100602b 0009:Call gdi32.GetPixel(00000314,00000295,00000018) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=00000000 ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000296,00000018) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=003300cc ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000295,00000019) ret=01005e50 0009:Ret gdi32.GetPixel() retval=00000000 ret=01005e50 0009:Call gdi32.GetPixel(00000314,000002db,00000018) ret=01005e63 0009:Ret gdi32.GetPixel() retval=00003333 ret=01005e63 0009:Call gdi32.GetPixel(00000314,000002da,00000018) ret=01005e76 0009:Ret gdi32.GetPixel() retval=00000000 ret=01005e76 0009:Call gdi32.GetPixel(00000314,000002db,00000019) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=00003333 ret=01005e8b 0009:Call gdi32.BitBlt(00000314,00000295,00000018,00000047,00000009,00000ea8,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,00000295,00000018,00000000) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00000000 ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000296,00000018,003300cc) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=003300cc ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000295,00000019,00000000) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00000000 ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000002db,00000018,00003333) ret=01006003 0009:Ret gdi32.SetPixel() retval=00003333 ret=01006003 0009:Call gdi32.SetPixel(00000314,000002da,00000018,00000000) ret=01006016 0009:Ret gdi32.SetPixel() retval=00000000 ret=01006016 0009:Call gdi32.SetPixel(00000314,000002db,00000019,00003333) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00003333 ret=0100602b 0009:Call gdi32.GetPixel(00000314,00000295,0000001f) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=00000000 ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000296,0000001f) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=003300cc ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000295,00000020) ret=01005e50 0009:Ret gdi32.GetPixel() retval=00000000 ret=01005e50 0009:Call gdi32.GetPixel(00000314,000002db,0000001f) ret=01005e63 0009:Ret gdi32.GetPixel() retval=00003333 ret=01005e63 0009:Call gdi32.GetPixel(00000314,000002da,0000001f) ret=01005e76 0009:Ret gdi32.GetPixel() retval=00000000 ret=01005e76 0009:Call gdi32.GetPixel(00000314,000002db,00000020) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=00003333 ret=01005e8b 0009:Call gdi32.GetPixel(00000314,00000295,0000007e) ret=01005ea5 0009:Ret gdi32.GetPixel() retval=00339900 ret=01005ea5 0009:Call gdi32.GetPixel(00000314,00000296,0000007e) ret=01005eba 0009:Ret gdi32.GetPixel() retval=00666600 ret=01005eba 0009:Call gdi32.GetPixel(00000314,00000295,0000007d) ret=01005ecd 0009:Ret gdi32.GetPixel() retval=00669900 ret=01005ecd 0009:Call gdi32.GetPixel(00000314,000002db,0000007e) ret=01005ee1 0009:Ret gdi32.GetPixel() retval=00669900 ret=01005ee1 0009:Call gdi32.GetPixel(00000314,000002da,0000007e) ret=01005ef5 0009:Ret gdi32.GetPixel() retval=00339900 ret=01005ef5 0009:Call gdi32.GetPixel(00000314,000002db,0000007d) ret=01005f09 0009:Ret gdi32.GetPixel() retval=00339900 ret=01005f09 0009:Call gdi32.BitBlt(00000314,00000295,0000001f,00000047,00000060,00000ea8,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,00000295,0000001f,00000000) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00000000 ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000296,0000001f,003300cc) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=003300cc ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000295,00000020,00000000) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00000000 ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000002db,0000001f,00003333) ret=01006003 0009:Ret gdi32.SetPixel() retval=00003333 ret=01006003 0009:Call gdi32.SetPixel(00000314,000002da,0000001f,00000000) ret=01006016 0009:Ret gdi32.SetPixel() retval=00000000 ret=01006016 0009:Call gdi32.SetPixel(00000314,000002db,00000020,00003333) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00003333 ret=0100602b 0009:Call gdi32.SetPixel(00000314,00000295,0000007e,00339900) ret=01006044 0009:Ret gdi32.SetPixel() retval=00339900 ret=01006044 0009:Call gdi32.SetPixel(00000314,00000296,0000007e,00666600) ret=01006059 0009:Ret gdi32.SetPixel() retval=00666600 ret=01006059 0009:Call gdi32.SetPixel(00000314,00000295,0000007d,00669900) ret=01006069 0009:Ret gdi32.SetPixel() retval=00669900 ret=01006069 0009:Call gdi32.SetPixel(00000314,000002db,0000007e,00669900) ret=0100607d 0009:Ret gdi32.SetPixel() retval=00669900 ret=0100607d 0009:Call gdi32.SetPixel(00000314,000002da,0000007e,00339900) ret=01006091 0009:Ret gdi32.SetPixel() retval=00339900 ret=01006091 0009:Call gdi32.SetPixel(00000314,000002db,0000007d,00339900) ret=010060a5 0009:Ret gdi32.SetPixel() retval=00339900 ret=010060a5 0009:Call gdi32.GetPixel(00000314,0000030f,0000000a) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=00669900 ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000310,0000000a) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=00336600 ret=01005e3f 0009:Call gdi32.GetPixel(00000314,0000030f,0000000b) ret=01005e50 0009:Ret gdi32.GetPixel() retval=00336600 ret=01005e50 0009:Call gdi32.GetPixel(00000314,00000355,0000000a) ret=01005e63 0009:Ret gdi32.GetPixel() retval=00339900 ret=01005e63 0009:Call gdi32.GetPixel(00000314,00000354,0000000a) ret=01005e76 0009:Ret gdi32.GetPixel() retval=00339900 ret=01005e76 0009:Call gdi32.GetPixel(00000314,00000355,0000000b) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=00666600 ret=01005e8b 0009:Call gdi32.BitBlt(00000314,0000030f,0000000a,00000047,00000009,00000ea8,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,0000030f,0000000a,00669900) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00669900 ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000310,0000000a,00336600) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00336600 ret=01005fdf 0009:Call gdi32.SetPixel(00000314,0000030f,0000000b,00336600) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00336600 ret=01005ff0 0009:Call gdi32.SetPixel(00000314,00000355,0000000a,00339900) ret=01006003 0009:Ret gdi32.SetPixel() retval=00339900 ret=01006003 0009:Call gdi32.SetPixel(00000314,00000354,0000000a,00339900) ret=01006016 0009:Ret gdi32.SetPixel() retval=00339900 ret=01006016 0009:Call gdi32.SetPixel(00000314,00000355,0000000b,00666600) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00666600 ret=0100602b 0009:Call gdi32.GetPixel(00000314,0000030f,00000011) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=00000000 ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000310,00000011) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=003300cc ret=01005e3f 0009:Call gdi32.GetPixel(00000314,0000030f,00000012) ret=01005e50 0009:Ret gdi32.GetPixel() retval=00000000 ret=01005e50 0009:Call gdi32.GetPixel(00000314,00000355,00000011) ret=01005e63 0009:Ret gdi32.GetPixel() retval=00003333 ret=01005e63 0009:Call gdi32.GetPixel(00000314,00000354,00000011) ret=01005e76 0009:Ret gdi32.GetPixel() retval=00000000 ret=01005e76 0009:Call gdi32.GetPixel(00000314,00000355,00000012) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=00003333 ret=01005e8b 0009:Call gdi32.BitBlt(00000314,0000030f,00000011,00000047,00000009,00000ea8,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,0000030f,00000011,00000000) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00000000 ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000310,00000011,003300cc) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=003300cc ret=01005fdf 0009:Call gdi32.SetPixel(00000314,0000030f,00000012,00000000) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00000000 ret=01005ff0 0009:Call gdi32.SetPixel(00000314,00000355,00000011,00003333) ret=01006003 0009:Ret gdi32.SetPixel() retval=00003333 ret=01006003 0009:Call gdi32.SetPixel(00000314,00000354,00000011,00000000) ret=01006016 0009:Ret gdi32.SetPixel() retval=00000000 ret=01006016 0009:Call gdi32.SetPixel(00000314,00000355,00000012,00003333) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00003333 ret=0100602b 0009:Call gdi32.GetPixel(00000314,0000030f,00000018) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=00000000 ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000310,00000018) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=003300cc ret=01005e3f 0009:Call gdi32.GetPixel(00000314,0000030f,00000019) ret=01005e50 0009:Ret gdi32.GetPixel() retval=00000000 ret=01005e50 0009:Call gdi32.GetPixel(00000314,00000355,00000018) ret=01005e63 0009:Ret gdi32.GetPixel() retval=00003333 ret=01005e63 0009:Call gdi32.GetPixel(00000314,00000354,00000018) ret=01005e76 0009:Ret gdi32.GetPixel() retval=00000000 ret=01005e76 0009:Call gdi32.GetPixel(00000314,00000355,00000019) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=00003333 ret=01005e8b 0009:Call gdi32.BitBlt(00000314,0000030f,00000018,00000047,00000009,00000ea8,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,0000030f,00000018,00000000) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00000000 ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000310,00000018,003300cc) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=003300cc ret=01005fdf 0009:Call gdi32.SetPixel(00000314,0000030f,00000019,00000000) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00000000 ret=01005ff0 0009:Call gdi32.SetPixel(00000314,00000355,00000018,00003333) ret=01006003 0009:Ret gdi32.SetPixel() retval=00003333 ret=01006003 0009:Call gdi32.SetPixel(00000314,00000354,00000018,00000000) ret=01006016 0009:Ret gdi32.SetPixel() retval=00000000 ret=01006016 0009:Call gdi32.SetPixel(00000314,00000355,00000019,00003333) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00003333 ret=0100602b 0009:Call gdi32.GetPixel(00000314,0000030f,0000001f) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=00000000 ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000310,0000001f) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=003300cc ret=01005e3f 0009:Call gdi32.GetPixel(00000314,0000030f,00000020) ret=01005e50 0009:Ret gdi32.GetPixel() retval=00000000 ret=01005e50 0009:Call gdi32.GetPixel(00000314,00000355,0000001f) ret=01005e63 0009:Ret gdi32.GetPixel() retval=00003333 ret=01005e63 0009:Call gdi32.GetPixel(00000314,00000354,0000001f) ret=01005e76 0009:Ret gdi32.GetPixel() retval=00000000 ret=01005e76 0009:Call gdi32.GetPixel(00000314,00000355,00000020) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=00003333 ret=01005e8b 0009:Call gdi32.GetPixel(00000314,0000030f,0000007e) ret=01005ea5 0009:Ret gdi32.GetPixel() retval=00336600 ret=01005ea5 0009:Call gdi32.GetPixel(00000314,00000310,0000007e) ret=01005eba 0009:Ret gdi32.GetPixel() retval=00339900 ret=01005eba 0009:Call gdi32.GetPixel(00000314,0000030f,0000007d) ret=01005ecd 0009:Ret gdi32.GetPixel() retval=00669900 ret=01005ecd 0009:Call gdi32.GetPixel(00000314,00000355,0000007e) ret=01005ee1 0009:Ret gdi32.GetPixel() retval=00339900 ret=01005ee1 0009:Call gdi32.GetPixel(00000314,00000354,0000007e) ret=01005ef5 0009:Ret gdi32.GetPixel() retval=00339900 ret=01005ef5 0009:Call gdi32.GetPixel(00000314,00000355,0000007d) ret=01005f09 0009:Ret gdi32.GetPixel() retval=00666600 ret=01005f09 0009:Call gdi32.BitBlt(00000314,0000030f,0000001f,00000047,00000060,00000ea8,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,0000030f,0000001f,00000000) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00000000 ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000310,0000001f,003300cc) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=003300cc ret=01005fdf 0009:Call gdi32.SetPixel(00000314,0000030f,00000020,00000000) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00000000 ret=01005ff0 0009:Call gdi32.SetPixel(00000314,00000355,0000001f,00003333) ret=01006003 0009:Ret gdi32.SetPixel() retval=00003333 ret=01006003 0009:Call gdi32.SetPixel(00000314,00000354,0000001f,00000000) ret=01006016 0009:Ret gdi32.SetPixel() retval=00000000 ret=01006016 0009:Call gdi32.SetPixel(00000314,00000355,00000020,00003333) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00003333 ret=0100602b 0009:Call gdi32.SetPixel(00000314,0000030f,0000007e,00336600) ret=01006044 0009:Ret gdi32.SetPixel() retval=00336600 ret=01006044 0009:Call gdi32.SetPixel(00000314,00000310,0000007e,00339900) ret=01006059 0009:Ret gdi32.SetPixel() retval=00339900 ret=01006059 0009:Call gdi32.SetPixel(00000314,0000030f,0000007d,00669900) ret=01006069 0009:Ret gdi32.SetPixel() retval=00669900 ret=01006069 0009:Call gdi32.SetPixel(00000314,00000355,0000007e,00339900) ret=0100607d 0009:Ret gdi32.SetPixel() retval=00339900 ret=0100607d 0009:Call gdi32.SetPixel(00000314,00000354,0000007e,00339900) ret=01006091 0009:Ret gdi32.SetPixel() retval=00339900 ret=01006091 0009:Call gdi32.SetPixel(00000314,00000355,0000007d,00666600) ret=010060a5 0009:Ret gdi32.SetPixel() retval=00666600 ret=010060a5 0009:Call gdi32.GetPixel(00000314,00000389,0000000a) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=00339900 ret=01005e2e 0009:Call gdi32.GetPixel(00000314,0000038a,0000000a) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=00339900 ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000389,0000000b) ret=01005e50 0009:Ret gdi32.GetPixel() retval=00669900 ret=01005e50 0009:Call gdi32.GetPixel(00000314,000003cf,0000000a) ret=01005e63 0009:Ret gdi32.GetPixel() retval=00339900 ret=01005e63 0009:Call gdi32.GetPixel(00000314,000003ce,0000000a) ret=01005e76 0009:Ret gdi32.GetPixel() retval=00669900 ret=01005e76 0009:Call gdi32.GetPixel(00000314,000003cf,0000000b) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=00336600 ret=01005e8b 0009:Call gdi32.BitBlt(00000314,00000389,0000000a,00000047,00000009,00000ea8,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,00000389,0000000a,00339900) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00339900 ret=01005fce 0009:Call gdi32.SetPixel(00000314,0000038a,0000000a,00339900) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00339900 ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000389,0000000b,00669900) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00669900 ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000003cf,0000000a,00339900) ret=01006003 0009:Ret gdi32.SetPixel() retval=00339900 ret=01006003 0009:Call gdi32.SetPixel(00000314,000003ce,0000000a,00669900) ret=01006016 0009:Ret gdi32.SetPixel() retval=00669900 ret=01006016 0009:Call gdi32.SetPixel(00000314,000003cf,0000000b,00336600) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00336600 ret=0100602b 0009:Call gdi32.GetPixel(00000314,00000389,00000011) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=00000000 ret=01005e2e 0009:Call gdi32.GetPixel(00000314,0000038a,00000011) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=003300cc ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000389,00000012) ret=01005e50 0009:Ret gdi32.GetPixel() retval=00000000 ret=01005e50 0009:Call gdi32.GetPixel(00000314,000003cf,00000011) ret=01005e63 0009:Ret gdi32.GetPixel() retval=00003333 ret=01005e63 0009:Call gdi32.GetPixel(00000314,000003ce,00000011) ret=01005e76 0009:Ret gdi32.GetPixel() retval=00000000 ret=01005e76 0009:Call gdi32.GetPixel(00000314,000003cf,00000012) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=00003333 ret=01005e8b 0009:Call gdi32.BitBlt(00000314,00000389,00000011,00000047,00000009,00000ea8,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,00000389,00000011,00000000) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00000000 ret=01005fce 0009:Call gdi32.SetPixel(00000314,0000038a,00000011,003300cc) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=003300cc ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000389,00000012,00000000) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00000000 ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000003cf,00000011,00003333) ret=01006003 0009:Ret gdi32.SetPixel() retval=00003333 ret=01006003 0009:Call gdi32.SetPixel(00000314,000003ce,00000011,00000000) ret=01006016 0009:Ret gdi32.SetPixel() retval=00000000 ret=01006016 0009:Call gdi32.SetPixel(00000314,000003cf,00000012,00003333) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00003333 ret=0100602b 0009:Call gdi32.GetPixel(00000314,00000389,00000018) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=00000000 ret=01005e2e 0009:Call gdi32.GetPixel(00000314,0000038a,00000018) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=003300cc ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000389,00000019) ret=01005e50 0009:Ret gdi32.GetPixel() retval=00000000 ret=01005e50 0009:Call gdi32.GetPixel(00000314,000003cf,00000018) ret=01005e63 0009:Ret gdi32.GetPixel() retval=00003333 ret=01005e63 0009:Call gdi32.GetPixel(00000314,000003ce,00000018) ret=01005e76 0009:Ret gdi32.GetPixel() retval=00000000 ret=01005e76 0009:Call gdi32.GetPixel(00000314,000003cf,00000019) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=00003333 ret=01005e8b 0009:Call gdi32.BitBlt(00000314,00000389,00000018,00000047,00000009,00000ea8,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,00000389,00000018,00000000) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00000000 ret=01005fce 0009:Call gdi32.SetPixel(00000314,0000038a,00000018,003300cc) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=003300cc ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000389,00000019,00000000) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00000000 ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000003cf,00000018,00003333) ret=01006003 0009:Ret gdi32.SetPixel() retval=00003333 ret=01006003 0009:Call gdi32.SetPixel(00000314,000003ce,00000018,00000000) ret=01006016 0009:Ret gdi32.SetPixel() retval=00000000 ret=01006016 0009:Call gdi32.SetPixel(00000314,000003cf,00000019,00003333) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00003333 ret=0100602b 0009:Call gdi32.GetPixel(00000314,00000389,0000001f) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=00000000 ret=01005e2e 0009:Call gdi32.GetPixel(00000314,0000038a,0000001f) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=003300cc ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000389,00000020) ret=01005e50 0009:Ret gdi32.GetPixel() retval=00000000 ret=01005e50 0009:Call gdi32.GetPixel(00000314,000003cf,0000001f) ret=01005e63 0009:Ret gdi32.GetPixel() retval=00003333 ret=01005e63 0009:Call gdi32.GetPixel(00000314,000003ce,0000001f) ret=01005e76 0009:Ret gdi32.GetPixel() retval=00000000 ret=01005e76 0009:Call gdi32.GetPixel(00000314,000003cf,00000020) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=00003333 ret=01005e8b 0009:Call gdi32.GetPixel(00000314,00000389,0000007e) ret=01005ea5 0009:Ret gdi32.GetPixel() retval=00339900 ret=01005ea5 0009:Call gdi32.GetPixel(00000314,0000038a,0000007e) ret=01005eba 0009:Ret gdi32.GetPixel() retval=00339900 ret=01005eba 0009:Call gdi32.GetPixel(00000314,00000389,0000007d) ret=01005ecd 0009:Ret gdi32.GetPixel() retval=00669900 ret=01005ecd 0009:Call gdi32.GetPixel(00000314,000003cf,0000007e) ret=01005ee1 0009:Ret gdi32.GetPixel() retval=00339900 ret=01005ee1 0009:Call gdi32.GetPixel(00000314,000003ce,0000007e) ret=01005ef5 0009:Ret gdi32.GetPixel() retval=00339900 ret=01005ef5 0009:Call gdi32.GetPixel(00000314,000003cf,0000007d) ret=01005f09 0009:Ret gdi32.GetPixel() retval=00339900 ret=01005f09 0009:Call gdi32.BitBlt(00000314,00000389,0000001f,00000047,00000060,00000ea8,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,00000389,0000001f,00000000) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00000000 ret=01005fce 0009:Call gdi32.SetPixel(00000314,0000038a,0000001f,003300cc) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=003300cc ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000389,00000020,00000000) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00000000 ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000003cf,0000001f,00003333) ret=01006003 0009:Ret gdi32.SetPixel() retval=00003333 ret=01006003 0009:Call gdi32.SetPixel(00000314,000003ce,0000001f,00000000) ret=01006016 0009:Ret gdi32.SetPixel() retval=00000000 ret=01006016 0009:Call gdi32.SetPixel(00000314,000003cf,00000020,00003333) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00003333 ret=0100602b 0009:Call gdi32.SetPixel(00000314,00000389,0000007e,00339900) ret=01006044 0009:Ret gdi32.SetPixel() retval=00339900 ret=01006044 0009:Call gdi32.SetPixel(00000314,0000038a,0000007e,00339900) ret=01006059 0009:Ret gdi32.SetPixel() retval=00339900 ret=01006059 0009:Call gdi32.SetPixel(00000314,00000389,0000007d,00669900) ret=01006069 0009:Ret gdi32.SetPixel() retval=00669900 ret=01006069 0009:Call gdi32.SetPixel(00000314,000003cf,0000007e,00339900) ret=0100607d 0009:Ret gdi32.SetPixel() retval=00339900 ret=0100607d 0009:Call gdi32.SetPixel(00000314,000003ce,0000007e,00339900) ret=01006091 0009:Ret gdi32.SetPixel() retval=00339900 ret=01006091 0009:Call gdi32.SetPixel(00000314,000003cf,0000007d,00339900) ret=010060a5 0009:Ret gdi32.SetPixel() retval=00339900 ret=010060a5 0009:Call gdi32.GetPixel(00000314,00000403,0000000a) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=00336600 ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000404,0000000a) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=00339900 ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000403,0000000b) ret=01005e50 0009:Ret gdi32.GetPixel() retval=00669900 ret=01005e50 0009:Call gdi32.GetPixel(00000314,00000449,0000000a) ret=01005e63 0009:Ret gdi32.GetPixel() retval=00339900 ret=01005e63 0009:Call gdi32.GetPixel(00000314,00000448,0000000a) ret=01005e76 0009:Ret gdi32.GetPixel() retval=00339900 ret=01005e76 0009:Call gdi32.GetPixel(00000314,00000449,0000000b) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=00339900 ret=01005e8b 0009:Call gdi32.BitBlt(00000314,00000403,0000000a,00000047,00000009,00000ea8,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,00000403,0000000a,00336600) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00336600 ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000404,0000000a,00339900) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00339900 ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000403,0000000b,00669900) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00669900 ret=01005ff0 0009:Call gdi32.SetPixel(00000314,00000449,0000000a,00339900) ret=01006003 0009:Ret gdi32.SetPixel() retval=00339900 ret=01006003 0009:Call gdi32.SetPixel(00000314,00000448,0000000a,00339900) ret=01006016 0009:Ret gdi32.SetPixel() retval=00339900 ret=01006016 0009:Call gdi32.SetPixel(00000314,00000449,0000000b,00339900) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00339900 ret=0100602b 0009:Call gdi32.GetPixel(00000314,00000403,00000011) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=00000000 ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000404,00000011) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=003300cc ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000403,00000012) ret=01005e50 0009:Ret gdi32.GetPixel() retval=00000000 ret=01005e50 0009:Call gdi32.GetPixel(00000314,00000449,00000011) ret=01005e63 0009:Ret gdi32.GetPixel() retval=00003333 ret=01005e63 0009:Call gdi32.GetPixel(00000314,00000448,00000011) ret=01005e76 0009:Ret gdi32.GetPixel() retval=00000000 ret=01005e76 0009:Call gdi32.GetPixel(00000314,00000449,00000012) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=00003333 ret=01005e8b 0009:Call gdi32.BitBlt(00000314,00000403,00000011,00000047,00000009,00000ea8,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,00000403,00000011,00000000) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00000000 ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000404,00000011,003300cc) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=003300cc ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000403,00000012,00000000) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00000000 ret=01005ff0 0009:Call gdi32.SetPixel(00000314,00000449,00000011,00003333) ret=01006003 0009:Ret gdi32.SetPixel() retval=00003333 ret=01006003 0009:Call gdi32.SetPixel(00000314,00000448,00000011,00000000) ret=01006016 0009:Ret gdi32.SetPixel() retval=00000000 ret=01006016 0009:Call gdi32.SetPixel(00000314,00000449,00000012,00003333) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00003333 ret=0100602b 0009:Call gdi32.GetPixel(00000314,00000403,00000018) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=00000000 ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000404,00000018) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=003300cc ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000403,00000019) ret=01005e50 0009:Ret gdi32.GetPixel() retval=00000000 ret=01005e50 0009:Call gdi32.GetPixel(00000314,00000449,00000018) ret=01005e63 0009:Ret gdi32.GetPixel() retval=00003333 ret=01005e63 0009:Call gdi32.GetPixel(00000314,00000448,00000018) ret=01005e76 0009:Ret gdi32.GetPixel() retval=00000000 ret=01005e76 0009:Call gdi32.GetPixel(00000314,00000449,00000019) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=00003333 ret=01005e8b 0009:Call gdi32.BitBlt(00000314,00000403,00000018,00000047,00000009,00000ea8,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,00000403,00000018,00000000) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00000000 ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000404,00000018,003300cc) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=003300cc ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000403,00000019,00000000) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00000000 ret=01005ff0 0009:Call gdi32.SetPixel(00000314,00000449,00000018,00003333) ret=01006003 0009:Ret gdi32.SetPixel() retval=00003333 ret=01006003 0009:Call gdi32.SetPixel(00000314,00000448,00000018,00000000) ret=01006016 0009:Ret gdi32.SetPixel() retval=00000000 ret=01006016 0009:Call gdi32.SetPixel(00000314,00000449,00000019,00003333) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00003333 ret=0100602b 0009:Call gdi32.GetPixel(00000314,00000403,0000001f) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=00000000 ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000404,0000001f) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=003300cc ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000403,00000020) ret=01005e50 0009:Ret gdi32.GetPixel() retval=00000000 ret=01005e50 0009:Call gdi32.GetPixel(00000314,00000449,0000001f) ret=01005e63 0009:Ret gdi32.GetPixel() retval=00003333 ret=01005e63 0009:Call gdi32.GetPixel(00000314,00000448,0000001f) ret=01005e76 0009:Ret gdi32.GetPixel() retval=00000000 ret=01005e76 0009:Call gdi32.GetPixel(00000314,00000449,00000020) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=00003333 ret=01005e8b 0009:Call gdi32.GetPixel(00000314,00000403,0000007e) ret=01005ea5 0009:Ret gdi32.GetPixel() retval=00339900 ret=01005ea5 0009:Call gdi32.GetPixel(00000314,00000404,0000007e) ret=01005eba 0009:Ret gdi32.GetPixel() retval=00336600 ret=01005eba 0009:Call gdi32.GetPixel(00000314,00000403,0000007d) ret=01005ecd 0009:Ret gdi32.GetPixel() retval=00339900 ret=01005ecd 0009:Call gdi32.GetPixel(00000314,00000449,0000007e) ret=01005ee1 0009:Ret gdi32.GetPixel() retval=00339900 ret=01005ee1 0009:Call gdi32.GetPixel(00000314,00000448,0000007e) ret=01005ef5 0009:Ret gdi32.GetPixel() retval=00669900 ret=01005ef5 0009:Call gdi32.GetPixel(00000314,00000449,0000007d) ret=01005f09 0009:Ret gdi32.GetPixel() retval=00339900 ret=01005f09 0009:Call gdi32.BitBlt(00000314,00000403,0000001f,00000047,00000060,00000ea8,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,00000403,0000001f,00000000) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00000000 ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000404,0000001f,003300cc) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=003300cc ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000403,00000020,00000000) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00000000 ret=01005ff0 0009:Call gdi32.SetPixel(00000314,00000449,0000001f,00003333) ret=01006003 0009:Ret gdi32.SetPixel() retval=00003333 ret=01006003 0009:Call gdi32.SetPixel(00000314,00000448,0000001f,00000000) ret=01006016 0009:Ret gdi32.SetPixel() retval=00000000 ret=01006016 0009:Call gdi32.SetPixel(00000314,00000449,00000020,00003333) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00003333 ret=0100602b 0009:Call gdi32.SetPixel(00000314,00000403,0000007e,00339900) ret=01006044 0009:Ret gdi32.SetPixel() retval=00339900 ret=01006044 0009:Call gdi32.SetPixel(00000314,00000404,0000007e,00336600) ret=01006059 0009:Ret gdi32.SetPixel() retval=00336600 ret=01006059 0009:Call gdi32.SetPixel(00000314,00000403,0000007d,00339900) ret=01006069 0009:Ret gdi32.SetPixel() retval=00339900 ret=01006069 0009:Call gdi32.SetPixel(00000314,00000449,0000007e,00339900) ret=0100607d 0009:Ret gdi32.SetPixel() retval=00339900 ret=0100607d 0009:Call gdi32.SetPixel(00000314,00000448,0000007e,00669900) ret=01006091 0009:Ret gdi32.SetPixel() retval=00669900 ret=01006091 0009:Call gdi32.SetPixel(00000314,00000449,0000007d,00339900) ret=010060a5 0009:Ret gdi32.SetPixel() retval=00339900 ret=010060a5 0009:Call gdi32.GetPixel(00000314,0000047d,0000000a) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=00339900 ret=01005e2e 0009:Call gdi32.GetPixel(00000314,0000047e,0000000a) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=00339900 ret=01005e3f 0009:Call gdi32.GetPixel(00000314,0000047d,0000000b) ret=01005e50 0009:Ret gdi32.GetPixel() retval=00669900 ret=01005e50 0009:Call gdi32.GetPixel(00000314,000004c3,0000000a) ret=01005e63 0009:Ret gdi32.GetPixel() retval=00336600 ret=01005e63 0009:Call gdi32.GetPixel(00000314,000004c2,0000000a) ret=01005e76 0009:Ret gdi32.GetPixel() retval=00669900 ret=01005e76 0009:Call gdi32.GetPixel(00000314,000004c3,0000000b) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=00339900 ret=01005e8b 0009:Call gdi32.BitBlt(00000314,0000047d,0000000a,00000047,00000009,00000ea8,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,0000047d,0000000a,00339900) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00339900 ret=01005fce 0009:Call gdi32.SetPixel(00000314,0000047e,0000000a,00339900) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00339900 ret=01005fdf 0009:Call gdi32.SetPixel(00000314,0000047d,0000000b,00669900) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00669900 ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000004c3,0000000a,00336600) ret=01006003 0009:Ret gdi32.SetPixel() retval=00336600 ret=01006003 0009:Call gdi32.SetPixel(00000314,000004c2,0000000a,00669900) ret=01006016 0009:Ret gdi32.SetPixel() retval=00669900 ret=01006016 0009:Call gdi32.SetPixel(00000314,000004c3,0000000b,00339900) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00339900 ret=0100602b 0009:Call gdi32.GetPixel(00000314,0000047d,00000011) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=00000000 ret=01005e2e 0009:Call gdi32.GetPixel(00000314,0000047e,00000011) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=003300cc ret=01005e3f 0009:Call gdi32.GetPixel(00000314,0000047d,00000012) ret=01005e50 0009:Ret gdi32.GetPixel() retval=00000000 ret=01005e50 0009:Call gdi32.GetPixel(00000314,000004c3,00000011) ret=01005e63 0009:Ret gdi32.GetPixel() retval=00003333 ret=01005e63 0009:Call gdi32.GetPixel(00000314,000004c2,00000011) ret=01005e76 0009:Ret gdi32.GetPixel() retval=00000000 ret=01005e76 0009:Call gdi32.GetPixel(00000314,000004c3,00000012) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=00003333 ret=01005e8b 0009:Call gdi32.BitBlt(00000314,0000047d,00000011,00000047,00000009,00000ea8,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,0000047d,00000011,00000000) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00000000 ret=01005fce 0009:Call gdi32.SetPixel(00000314,0000047e,00000011,003300cc) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=003300cc ret=01005fdf 0009:Call gdi32.SetPixel(00000314,0000047d,00000012,00000000) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00000000 ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000004c3,00000011,00003333) ret=01006003 0009:Ret gdi32.SetPixel() retval=00003333 ret=01006003 0009:Call gdi32.SetPixel(00000314,000004c2,00000011,00000000) ret=01006016 0009:Ret gdi32.SetPixel() retval=00000000 ret=01006016 0009:Call gdi32.SetPixel(00000314,000004c3,00000012,00003333) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00003333 ret=0100602b 0009:Call gdi32.GetPixel(00000314,0000047d,00000018) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=00000000 ret=01005e2e 0009:Call gdi32.GetPixel(00000314,0000047e,00000018) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=003300cc ret=01005e3f 0009:Call gdi32.GetPixel(00000314,0000047d,00000019) ret=01005e50 0009:Ret gdi32.GetPixel() retval=00000000 ret=01005e50 0009:Call gdi32.GetPixel(00000314,000004c3,00000018) ret=01005e63 0009:Ret gdi32.GetPixel() retval=00003333 ret=01005e63 0009:Call gdi32.GetPixel(00000314,000004c2,00000018) ret=01005e76 0009:Ret gdi32.GetPixel() retval=00000000 ret=01005e76 0009:Call gdi32.GetPixel(00000314,000004c3,00000019) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=00003333 ret=01005e8b 0009:Call gdi32.BitBlt(00000314,0000047d,00000018,00000047,00000009,00000ea8,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,0000047d,00000018,00000000) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00000000 ret=01005fce 0009:Call gdi32.SetPixel(00000314,0000047e,00000018,003300cc) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=003300cc ret=01005fdf 0009:Call gdi32.SetPixel(00000314,0000047d,00000019,00000000) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00000000 ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000004c3,00000018,00003333) ret=01006003 0009:Ret gdi32.SetPixel() retval=00003333 ret=01006003 0009:Call gdi32.SetPixel(00000314,000004c2,00000018,00000000) ret=01006016 0009:Ret gdi32.SetPixel() retval=00000000 ret=01006016 0009:Call gdi32.SetPixel(00000314,000004c3,00000019,00003333) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00003333 ret=0100602b 0009:Call gdi32.GetPixel(00000314,0000047d,0000001f) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=00000000 ret=01005e2e 0009:Call gdi32.GetPixel(00000314,0000047e,0000001f) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=003300cc ret=01005e3f 0009:Call gdi32.GetPixel(00000314,0000047d,00000020) ret=01005e50 0009:Ret gdi32.GetPixel() retval=00000000 ret=01005e50 0009:Call gdi32.GetPixel(00000314,000004c3,0000001f) ret=01005e63 0009:Ret gdi32.GetPixel() retval=00003333 ret=01005e63 0009:Call gdi32.GetPixel(00000314,000004c2,0000001f) ret=01005e76 0009:Ret gdi32.GetPixel() retval=00000000 ret=01005e76 0009:Call gdi32.GetPixel(00000314,000004c3,00000020) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=00003333 ret=01005e8b 0009:Call gdi32.GetPixel(00000314,0000047d,0000007e) ret=01005ea5 0009:Ret gdi32.GetPixel() retval=00339900 ret=01005ea5 0009:Call gdi32.GetPixel(00000314,0000047e,0000007e) ret=01005eba 0009:Ret gdi32.GetPixel() retval=00339900 ret=01005eba 0009:Call gdi32.GetPixel(00000314,0000047d,0000007d) ret=01005ecd 0009:Ret gdi32.GetPixel() retval=00339900 ret=01005ecd 0009:Call gdi32.GetPixel(00000314,000004c3,0000007e) ret=01005ee1 0009:Ret gdi32.GetPixel() retval=00339900 ret=01005ee1 0009:Call gdi32.GetPixel(00000314,000004c2,0000007e) ret=01005ef5 0009:Ret gdi32.GetPixel() retval=00339900 ret=01005ef5 0009:Call gdi32.GetPixel(00000314,000004c3,0000007d) ret=01005f09 0009:Ret gdi32.GetPixel() retval=00336600 ret=01005f09 0009:Call gdi32.BitBlt(00000314,0000047d,0000001f,00000047,00000060,00000ea8,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,0000047d,0000001f,00000000) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00000000 ret=01005fce 0009:Call gdi32.SetPixel(00000314,0000047e,0000001f,003300cc) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=003300cc ret=01005fdf 0009:Call gdi32.SetPixel(00000314,0000047d,00000020,00000000) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00000000 ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000004c3,0000001f,00003333) ret=01006003 0009:Ret gdi32.SetPixel() retval=00003333 ret=01006003 0009:Call gdi32.SetPixel(00000314,000004c2,0000001f,00000000) ret=01006016 0009:Ret gdi32.SetPixel() retval=00000000 ret=01006016 0009:Call gdi32.SetPixel(00000314,000004c3,00000020,00003333) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00003333 ret=0100602b 0009:Call gdi32.SetPixel(00000314,0000047d,0000007e,00339900) ret=01006044 0009:Ret gdi32.SetPixel() retval=00339900 ret=01006044 0009:Call gdi32.SetPixel(00000314,0000047e,0000007e,00339900) ret=01006059 0009:Ret gdi32.SetPixel() retval=00339900 ret=01006059 0009:Call gdi32.SetPixel(00000314,0000047d,0000007d,00339900) ret=01006069 0009:Ret gdi32.SetPixel() retval=00339900 ret=01006069 0009:Call gdi32.SetPixel(00000314,000004c3,0000007e,00339900) ret=0100607d 0009:Ret gdi32.SetPixel() retval=00339900 ret=0100607d 0009:Call gdi32.SetPixel(00000314,000004c2,0000007e,00339900) ret=01006091 0009:Ret gdi32.SetPixel() retval=00339900 ret=01006091 0009:Call gdi32.SetPixel(00000314,000004c3,0000007d,00336600) ret=010060a5 0009:Ret gdi32.SetPixel() retval=00336600 ret=010060a5 0009:Call gdi32.SelectObject(00000ea8,0000006c) ret=010061a0 0009:Ret gdi32.SelectObject() retval=00000ec0 ret=010061a0 0009:Call gdi32.DeleteObject(00000ec0) ret=010061a9 0009:Ret gdi32.DeleteObject() retval=00000001 ret=010061a9 0009:Call gdi32.DeleteDC(00000ea8) ret=010061b4 0009:Ret gdi32.DeleteDC() retval=00000001 ret=010061b4 0009:Call gdi32.DeleteDC(00000e9c) ret=010061b9 0009:Ret gdi32.DeleteDC() retval=00000001 ret=010061b9 0009:Call user32.GetClientRect(00010030,0033f190) ret=01003826 0009:Ret user32.GetClientRect() retval=00000001 ret=01003826 0009:Call user32.GetClientRect(00010030,0033f140) ret=01002b2e 0009:Ret user32.GetClientRect() retval=00000001 ret=01002b2e 0009:Call user32.OffsetRect(0033f190,00000000,00000000) ret=01004a4e 0009:Ret user32.OffsetRect() retval=00000001 ret=01004a4e 0009:Call gdi32.CreateSolidBrush(00007f00) ret=01004a59 0009:Ret gdi32.CreateSolidBrush() retval=00000ed4 ret=01004a59 0009:Call gdi32.GetStockObject(00000004) ret=01004a63 0009:Ret gdi32.GetStockObject() retval=00000054 ret=01004a63 0009:Call user32.FillRect(00000314,0033f190,00000ed4) ret=01004a78 0009:Ret user32.FillRect() retval=00000001 ret=01004a78 0009:Call gdi32.DeleteObject(00000ed4) ret=01004a7f 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01004a7f 0009:Call user32.FrameRect(00000314,0033f190,00000054) ret=01004a92 0009:Ret user32.FrameRect() retval=00000001 ret=01004a92 0009:Call gdi32.GetBkMode(00000314) ret=01004a99 0009:Ret gdi32.GetBkMode() retval=00000002 ret=01004a99 0009:Call gdi32.GetTextColor(00000314) ret=01004aa6 0009:Ret gdi32.GetTextColor() retval=00000000 ret=01004aa6 0009:Call gdi32.SetBkMode(00000314,00000001) ret=01004ab5 0009:Ret gdi32.SetBkMode() retval=00000002 ret=01004ab5 0009:Call gdi32.SetTextColor(00000314,00ffffff) ret=01004ac1 0009:Ret gdi32.SetTextColor() retval=00000000 ret=01004ac1 0009:Call user32.SetRect(0033f17c,00000225,00000276,0000027f,0000028a) ret=01004aec 0009:Ret user32.SetRect() retval=00000001 ret=01004aec 0009:Call user32.LoadStringW(01000000,00000035,01011800,00000400) ret=0100361b 0009:Ret user32.LoadStringW() retval=00000006 ret=0100361b 0009:Call user32.DrawTextW(00000314,01011800 L"Score:",ffffffff,0033f17c,00000022) ret=01004b08 0009:Ret user32.DrawTextW() retval=00000010 ret=01004b08 0009:Call user32.SetRect(0033f17c,00000225,0000028a,0000027f,000002a8) ret=01004b2d 0009:Ret user32.SetRect() retval=00000001 ret=01004b2d 0009:Call user32.LoadStringW(01000000,00000036,01011800,00000400) ret=0100361b 0009:Ret user32.LoadStringW() retval=00000006 ret=0100361b 0009:Call user32.DrawTextW(00000314,01011800 L"Moves:",ffffffff,0033f17c,00000022) ret=01004b43 0009:Ret user32.DrawTextW() retval=00000010 ret=01004b43 0009:Call user32.SetRect(0033f17c,00000289,00000276,000002e3,0000028a) ret=01004b8c 0009:Ret user32.SetRect() retval=00000001 ret=01004b8c 0009:Call user32.DrawTextW(00000314,0033f1a4 L"500",ffffffff,0033f17c,00000020) ret=01004ba1 0009:Ret user32.DrawTextW() retval=00000010 ret=01004ba1 0009:Call user32.SetRect(0033f17c,00000289,0000028a,000002e3,000002a8) ret=01004bea 0009:Ret user32.SetRect() retval=00000001 ret=01004bea 0009:Call user32.DrawTextW(00000314,0033f1a4 L"0",ffffffff,0033f17c,00000020) ret=01004bff 0009:Ret user32.DrawTextW() retval=00000010 ret=01004bff 0009:Call gdi32.SetBkMode(00000314,00000002) ret=01004c0c 0009:Ret gdi32.SetBkMode() retval=00000001 ret=01004c0c 0009:Call gdi32.SetTextColor(00000314,00000000) ret=01004c19 0009:Ret gdi32.SetTextColor() retval=00ffffff ret=01004c19 0009:Call user32.GetClientRect(00010030,0033f248) ret=01002b2e 0009:Ret user32.GetClientRect() retval=00000001 ret=01002b2e 0009:Call user32.LoadBitmapW(01000000,010012c8 L"CARDBACK") ret=010028ff 0009:Ret user32.LoadBitmapW() retval=00000f04 ret=010028ff 0009:Call gdi32.CreateCompatibleDC(00000314) ret=01002909 0009:Ret gdi32.CreateCompatibleDC() retval=00000f18 ret=01002909 0009:Call gdi32.SelectObject(00000f18,00000f04) ret=01002917 0009:Ret gdi32.SelectObject() retval=0000006c ret=01002917 0009:Call gdi32.BitBlt(00000314,0000047d,00000258,00000047,00000060,00000f18,00000000,00000000,00cc0020) ret=01002938 0009:Ret gdi32.BitBlt() retval=00000001 ret=01002938 0009:Call gdi32.SelectObject(00000f18,0000006c) ret=0100293e 0009:Ret gdi32.SelectObject() retval=00000f04 ret=0100293e 0009:Call gdi32.DeleteObject(00000f04) ret=01002947 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01002947 0009:Call gdi32.DeleteDC(00000f18) ret=0100294e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100294e 0009:Call gdi32.SetPixel(00000314,0000047d,00000258,00008000) ret=01002969 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002969 0009:Call gdi32.SetPixel(00000314,0000047e,00000258,00008000) ret=01002976 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002976 0009:Call gdi32.SetPixel(00000314,0000047d,00000259,00008000) ret=01002982 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002982 0009:Call gdi32.SetPixel(00000314,000004c3,00000258,00008000) ret=0100298f 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100298f 0009:Call gdi32.SetPixel(00000314,000004c2,00000258,00008000) ret=0100299c 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100299c 0009:Call gdi32.SetPixel(00000314,000004c3,00000259,00008000) ret=010029ab 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ab 0009:Call gdi32.SetPixel(00000314,0000047d,000002b7,00008000) ret=010029bf 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029bf 0009:Call gdi32.SetPixel(00000314,0000047e,000002b7,00008000) ret=010029d0 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029d0 0009:Call gdi32.SetPixel(00000314,0000047d,000002b6,00008000) ret=010029de 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029de 0009:Call gdi32.SetPixel(00000314,000004c3,000002b7,00008000) ret=010029ef 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ef 0009:Call gdi32.SetPixel(00000314,000004c2,000002b7,00008000) ret=01002a00 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a00 0009:Call gdi32.SetPixel(00000314,000004c3,000002b6,00008000) ret=01002a11 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a11 0009:Call user32.LoadBitmapW(01000000,010012c8 L"CARDBACK") ret=010028ff 0009:Ret user32.LoadBitmapW() retval=00000f30 ret=010028ff 0009:Call gdi32.CreateCompatibleDC(00000314) ret=01002909 0009:Ret gdi32.CreateCompatibleDC() retval=00000f44 ret=01002909 0009:Call gdi32.SelectObject(00000f44,00000f30) ret=01002917 0009:Ret gdi32.SelectObject() retval=0000006c ret=01002917 0009:Call gdi32.BitBlt(00000314,00000471,00000258,00000047,00000060,00000f44,00000000,00000000,00cc0020) ret=01002938 0009:Ret gdi32.BitBlt() retval=00000001 ret=01002938 0009:Call gdi32.SelectObject(00000f44,0000006c) ret=0100293e 0009:Ret gdi32.SelectObject() retval=00000f30 ret=0100293e 0009:Call gdi32.DeleteObject(00000f30) ret=01002947 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01002947 0009:Call gdi32.DeleteDC(00000f44) ret=0100294e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100294e 0009:Call gdi32.SetPixel(00000314,00000471,00000258,00008000) ret=01002969 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002969 0009:Call gdi32.SetPixel(00000314,00000472,00000258,00008000) ret=01002976 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002976 0009:Call gdi32.SetPixel(00000314,00000471,00000259,00008000) ret=01002982 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002982 0009:Call gdi32.SetPixel(00000314,000004b7,00000258,00008000) ret=0100298f 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100298f 0009:Call gdi32.SetPixel(00000314,000004b6,00000258,00008000) ret=0100299c 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100299c 0009:Call gdi32.SetPixel(00000314,000004b7,00000259,00008000) ret=010029ab 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ab 0009:Call gdi32.SetPixel(00000314,00000471,000002b7,00008000) ret=010029bf 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029bf 0009:Call gdi32.SetPixel(00000314,00000472,000002b7,00008000) ret=010029d0 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029d0 0009:Call gdi32.SetPixel(00000314,00000471,000002b6,00008000) ret=010029de 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029de 0009:Call gdi32.SetPixel(00000314,000004b7,000002b7,00008000) ret=010029ef 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ef 0009:Call gdi32.SetPixel(00000314,000004b6,000002b7,00008000) ret=01002a00 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a00 0009:Call gdi32.SetPixel(00000314,000004b7,000002b6,00008000) ret=01002a11 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a11 0009:Call user32.LoadBitmapW(01000000,010012c8 L"CARDBACK") ret=010028ff 0009:Ret user32.LoadBitmapW() retval=00000f5c ret=010028ff 0009:Call gdi32.CreateCompatibleDC(00000314) ret=01002909 0009:Ret gdi32.CreateCompatibleDC() retval=00000f70 ret=01002909 0009:Call gdi32.SelectObject(00000f70,00000f5c) ret=01002917 0009:Ret gdi32.SelectObject() retval=0000006c ret=01002917 0009:Call gdi32.BitBlt(00000314,00000465,00000258,00000047,00000060,00000f70,00000000,00000000,00cc0020) ret=01002938 0009:Ret gdi32.BitBlt() retval=00000001 ret=01002938 0009:Call gdi32.SelectObject(00000f70,0000006c) ret=0100293e 0009:Ret gdi32.SelectObject() retval=00000f5c ret=0100293e 0009:Call gdi32.DeleteObject(00000f5c) ret=01002947 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01002947 0009:Call gdi32.DeleteDC(00000f70) ret=0100294e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100294e 0009:Call gdi32.SetPixel(00000314,00000465,00000258,00008000) ret=01002969 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002969 0009:Call gdi32.SetPixel(00000314,00000466,00000258,00008000) ret=01002976 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002976 0009:Call gdi32.SetPixel(00000314,00000465,00000259,00008000) ret=01002982 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002982 0009:Call gdi32.SetPixel(00000314,000004ab,00000258,00008000) ret=0100298f 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100298f 0009:Call gdi32.SetPixel(00000314,000004aa,00000258,00008000) ret=0100299c 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100299c 0009:Call gdi32.SetPixel(00000314,000004ab,00000259,00008000) ret=010029ab 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ab 0009:Call gdi32.SetPixel(00000314,00000465,000002b7,00008000) ret=010029bf 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029bf 0009:Call gdi32.SetPixel(00000314,00000466,000002b7,00008000) ret=010029d0 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029d0 0009:Call gdi32.SetPixel(00000314,00000465,000002b6,00008000) ret=010029de 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029de 0009:Call gdi32.SetPixel(00000314,000004ab,000002b7,00008000) ret=010029ef 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ef 0009:Call gdi32.SetPixel(00000314,000004aa,000002b7,00008000) ret=01002a00 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a00 0009:Call gdi32.SetPixel(00000314,000004ab,000002b6,00008000) ret=01002a11 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a11 0009:Call user32.LoadBitmapW(01000000,010012c8 L"CARDBACK") ret=010028ff 0009:Ret user32.LoadBitmapW() retval=00000f88 ret=010028ff 0009:Call gdi32.CreateCompatibleDC(00000314) ret=01002909 0009:Ret gdi32.CreateCompatibleDC() retval=00000f9c ret=01002909 0009:Call gdi32.SelectObject(00000f9c,00000f88) ret=01002917 0009:Ret gdi32.SelectObject() retval=0000006c ret=01002917 0009:Call gdi32.BitBlt(00000314,00000459,00000258,00000047,00000060,00000f9c,00000000,00000000,00cc0020) ret=01002938 0009:Ret gdi32.BitBlt() retval=00000001 ret=01002938 0009:Call gdi32.SelectObject(00000f9c,0000006c) ret=0100293e 0009:Ret gdi32.SelectObject() retval=00000f88 ret=0100293e 0009:Call gdi32.DeleteObject(00000f88) ret=01002947 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01002947 0009:Call gdi32.DeleteDC(00000f9c) ret=0100294e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100294e 0009:Call gdi32.SetPixel(00000314,00000459,00000258,00008000) ret=01002969 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002969 0009:Call gdi32.SetPixel(00000314,0000045a,00000258,00008000) ret=01002976 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002976 0009:Call gdi32.SetPixel(00000314,00000459,00000259,00008000) ret=01002982 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002982 0009:Call gdi32.SetPixel(00000314,0000049f,00000258,00008000) ret=0100298f 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100298f 0009:Call gdi32.SetPixel(00000314,0000049e,00000258,00008000) ret=0100299c 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100299c 0009:Call gdi32.SetPixel(00000314,0000049f,00000259,00008000) ret=010029ab 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ab 0009:Call gdi32.SetPixel(00000314,00000459,000002b7,00008000) ret=010029bf 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029bf 0009:Call gdi32.SetPixel(00000314,0000045a,000002b7,00008000) ret=010029d0 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029d0 0009:Call gdi32.SetPixel(00000314,00000459,000002b6,00008000) ret=010029de 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029de 0009:Call gdi32.SetPixel(00000314,0000049f,000002b7,00008000) ret=010029ef 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ef 0009:Call gdi32.SetPixel(00000314,0000049e,000002b7,00008000) ret=01002a00 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a00 0009:Call gdi32.SetPixel(00000314,0000049f,000002b6,00008000) ret=01002a11 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a11 0009:Call user32.LoadBitmapW(01000000,010012c8 L"CARDBACK") ret=010028ff 0009:Ret user32.LoadBitmapW() retval=00000fb4 ret=010028ff 0009:Call gdi32.CreateCompatibleDC(00000314) ret=01002909 0009:Ret gdi32.CreateCompatibleDC() retval=00000fc8 ret=01002909 0009:Call gdi32.SelectObject(00000fc8,00000fb4) ret=01002917 0009:Ret gdi32.SelectObject() retval=0000006c ret=01002917 0009:Call gdi32.BitBlt(00000314,0000044d,00000258,00000047,00000060,00000fc8,00000000,00000000,00cc0020) ret=01002938 0009:Ret gdi32.BitBlt() retval=00000001 ret=01002938 0009:Call gdi32.SelectObject(00000fc8,0000006c) ret=0100293e 0009:Ret gdi32.SelectObject() retval=00000fb4 ret=0100293e 0009:Call gdi32.DeleteObject(00000fb4) ret=01002947 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01002947 0009:Call gdi32.DeleteDC(00000fc8) ret=0100294e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100294e 0009:Call gdi32.SetPixel(00000314,0000044d,00000258,00008000) ret=01002969 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002969 0009:Call gdi32.SetPixel(00000314,0000044e,00000258,00008000) ret=01002976 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002976 0009:Call gdi32.SetPixel(00000314,0000044d,00000259,00008000) ret=01002982 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002982 0009:Call gdi32.SetPixel(00000314,00000493,00000258,00008000) ret=0100298f 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100298f 0009:Call gdi32.SetPixel(00000314,00000492,00000258,00008000) ret=0100299c 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100299c 0009:Call gdi32.SetPixel(00000314,00000493,00000259,00008000) ret=010029ab 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ab 0009:Call gdi32.SetPixel(00000314,0000044d,000002b7,00008000) ret=010029bf 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029bf 0009:Call gdi32.SetPixel(00000314,0000044e,000002b7,00008000) ret=010029d0 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029d0 0009:Call gdi32.SetPixel(00000314,0000044d,000002b6,00008000) ret=010029de 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029de 0009:Call gdi32.SetPixel(00000314,00000493,000002b7,00008000) ret=010029ef 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ef 0009:Call gdi32.SetPixel(00000314,00000492,000002b7,00008000) ret=01002a00 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a00 0009:Call gdi32.SetPixel(00000314,00000493,000002b6,00008000) ret=01002a11 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a11 0009:Call user32.LoadBitmapW(01000000,010012c8 L"CARDBACK") ret=010028ff 0009:Ret user32.LoadBitmapW() retval=00000fe0 ret=010028ff 0009:Call gdi32.CreateCompatibleDC(00000314) ret=01002909 0009:Ret gdi32.CreateCompatibleDC() retval=00000ff4 ret=01002909 0009:Call gdi32.SelectObject(00000ff4,00000fe0) ret=01002917 0009:Ret gdi32.SelectObject() retval=0000006c ret=01002917 0009:Call gdi32.BitBlt(00000314,00000441,00000258,00000047,00000060,00000ff4,00000000,00000000,00cc0020) ret=01002938 0009:Ret gdi32.BitBlt() retval=00000001 ret=01002938 0009:Call gdi32.SelectObject(00000ff4,0000006c) ret=0100293e 0009:Ret gdi32.SelectObject() retval=00000fe0 ret=0100293e 0009:Call gdi32.DeleteObject(00000fe0) ret=01002947 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01002947 0009:Call gdi32.DeleteDC(00000ff4) ret=0100294e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100294e 0009:Call gdi32.SetPixel(00000314,00000441,00000258,00008000) ret=01002969 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002969 0009:Call gdi32.SetPixel(00000314,00000442,00000258,00008000) ret=01002976 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002976 0009:Call gdi32.SetPixel(00000314,00000441,00000259,00008000) ret=01002982 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002982 0009:Call gdi32.SetPixel(00000314,00000487,00000258,00008000) ret=0100298f 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100298f 0009:Call gdi32.SetPixel(00000314,00000486,00000258,00008000) ret=0100299c 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100299c 0009:Call gdi32.SetPixel(00000314,00000487,00000259,00008000) ret=010029ab 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ab 0009:Call gdi32.SetPixel(00000314,00000441,000002b7,00008000) ret=010029bf 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029bf 0009:Call gdi32.SetPixel(00000314,00000442,000002b7,00008000) ret=010029d0 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029d0 0009:Call gdi32.SetPixel(00000314,00000441,000002b6,00008000) ret=010029de 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029de 0009:Call gdi32.SetPixel(00000314,00000487,000002b7,00008000) ret=010029ef 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ef 0009:Call gdi32.SetPixel(00000314,00000486,000002b7,00008000) ret=01002a00 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a00 0009:Call gdi32.SetPixel(00000314,00000487,000002b6,00008000) ret=01002a11 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a11 0009:Call user32.GetClientRect(00010030,0033f250) ret=01002b2e 0009:Ret user32.GetClientRect() retval=00000001 ret=01002b2e 0009:Call user32.EndPaint(00010030,0033f364) ret=01006ee5 0009:Ret user32.EndPaint() retval=00000001 ret=01006ee5 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_PAINT,wp=00000000,lp=00000000) retval=00000000 0009:Ret user32.UpdateWindow() retval=00000001 ret=01005be2 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,0000000c) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c56d0 ret=0100a7d2 0009:Call user32.GetClientRect(00010030,0033f61c) ret=01005145 0009:Ret user32.GetClientRect() retval=00000001 ret=01005145 0009:Call user32.GetDC(00010030) ret=010051ad 0009:Ret user32.GetDC() retval=00000314 ret=010051ad 0009:Call gdi32.CreateCompatibleDC(00000314) ret=010051bc 0009:Ret gdi32.CreateCompatibleDC() retval=00001008 ret=010051bc 0009:Call gdi32.CreateCompatibleDC(00000314) ret=010051ca 0009:Ret gdi32.CreateCompatibleDC() retval=00001014 ret=010051ca 0009:Call gdi32.CreateCompatibleDC(00000314) ret=010051d8 0009:Ret gdi32.CreateCompatibleDC() retval=00001020 ret=010051d8 0009:Call gdi32.CreateCompatibleBitmap(00000314,00000047,00000060) ret=010051f8 0009:Ret gdi32.CreateCompatibleBitmap() retval=0000102c ret=010051f8 0009:Call gdi32.CreateCompatibleBitmap(00000314,00000047,00000060) ret=01005212 0009:Ret gdi32.CreateCompatibleBitmap() retval=00001030 ret=01005212 0009:Call gdi32.CreateCompatibleBitmap(00000314,00000047,00000060) ret=0100522c 0009:Ret gdi32.CreateCompatibleBitmap() retval=00001034 ret=0100522c 0009:Call gdi32.SelectObject(00001008,0000102c) ret=01005246 0009:Ret gdi32.SelectObject() retval=0000006c ret=01005246 0009:Call gdi32.SelectObject(00001014,00001030) ret=0100525a 0009:Ret gdi32.SelectObject() retval=0000006c ret=0100525a 0009:Call gdi32.SelectObject(00001020,00001034) ret=0100526e 0009:Ret gdi32.SelectObject() retval=0000006c ret=0100526e 0009:Call user32.LoadBitmapW(01000000,0033f5b4 L"CARD50") ret=010028ff 0009:Ret user32.LoadBitmapW() retval=00001044 ret=010028ff 0009:Call gdi32.CreateCompatibleDC(00001014) ret=01002909 0009:Ret gdi32.CreateCompatibleDC() retval=00001058 ret=01002909 0009:Call gdi32.SelectObject(00001058,00001044) ret=01002917 0009:Ret gdi32.SelectObject() retval=0000006c ret=01002917 0009:Call gdi32.BitBlt(00001014,00000000,00000000,00000047,00000060,00001058,00000000,00000000,00cc0020) ret=01002938 0009:Ret gdi32.BitBlt() retval=00000001 ret=01002938 0009:Call gdi32.SelectObject(00001058,0000006c) ret=0100293e 0009:Ret gdi32.SelectObject() retval=00001044 ret=0100293e 0009:Call gdi32.DeleteObject(00001044) ret=01002947 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01002947 0009:Call gdi32.DeleteDC(00001058) ret=0100294e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100294e 0009:Call gdi32.SetPixel(00001014,00000000,00000000,00008000) ret=01002969 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002969 0009:Call gdi32.SetPixel(00001014,00000001,00000000,00008000) ret=01002976 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002976 0009:Call gdi32.SetPixel(00001014,00000000,00000001,00008000) ret=01002982 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002982 0009:Call gdi32.SetPixel(00001014,00000046,00000000,00008000) ret=0100298f 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100298f 0009:Call gdi32.SetPixel(00001014,00000045,00000000,00008000) ret=0100299c 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100299c 0009:Call gdi32.SetPixel(00001014,00000046,00000001,00008000) ret=010029ab 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ab 0009:Call gdi32.SetPixel(00001014,00000000,0000005f,00008000) ret=010029bf 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029bf 0009:Call gdi32.SetPixel(00001014,00000001,0000005f,00008000) ret=010029d0 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029d0 0009:Call gdi32.SetPixel(00001014,00000000,0000005e,00008000) ret=010029de 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029de 0009:Call gdi32.SetPixel(00001014,00000046,0000005f,00008000) ret=010029ef 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ef 0009:Call gdi32.SetPixel(00001014,00000045,0000005f,00008000) ret=01002a00 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a00 0009:Call gdi32.SetPixel(00001014,00000046,0000005e,00008000) ret=01002a11 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a11 0009:Call user32.LoadBitmapW(01000000,010012c8 L"CARDBACK") ret=010028ff 0009:Ret user32.LoadBitmapW() retval=00001070 ret=010028ff 0009:Call gdi32.CreateCompatibleDC(00001008) ret=01002909 0009:Ret gdi32.CreateCompatibleDC() retval=00001084 ret=01002909 0009:Call gdi32.SelectObject(00001084,00001070) ret=01002917 0009:Ret gdi32.SelectObject() retval=0000006c ret=01002917 0009:Call gdi32.BitBlt(00001008,00000000,00000000,00000047,00000060,00001084,00000000,00000000,00cc0020) ret=01002938 0009:Ret gdi32.BitBlt() retval=00000001 ret=01002938 0009:Call gdi32.SelectObject(00001084,0000006c) ret=0100293e 0009:Ret gdi32.SelectObject() retval=00001070 ret=0100293e 0009:Call gdi32.DeleteObject(00001070) ret=01002947 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01002947 0009:Call gdi32.DeleteDC(00001084) ret=0100294e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100294e 0009:Call gdi32.SetPixel(00001008,00000000,00000000,00008000) ret=01002969 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002969 0009:Call gdi32.SetPixel(00001008,00000001,00000000,00008000) ret=01002976 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002976 0009:Call gdi32.SetPixel(00001008,00000000,00000001,00008000) ret=01002982 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002982 0009:Call gdi32.SetPixel(00001008,00000046,00000000,00008000) ret=0100298f 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100298f 0009:Call gdi32.SetPixel(00001008,00000045,00000000,00008000) ret=0100299c 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100299c 0009:Call gdi32.SetPixel(00001008,00000046,00000001,00008000) ret=010029ab 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ab 0009:Call gdi32.SetPixel(00001008,00000000,0000005f,00008000) ret=010029bf 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029bf 0009:Call gdi32.SetPixel(00001008,00000001,0000005f,00008000) ret=010029d0 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029d0 0009:Call gdi32.SetPixel(00001008,00000000,0000005e,00008000) ret=010029de 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029de 0009:Call gdi32.SetPixel(00001008,00000046,0000005f,00008000) ret=010029ef 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ef 0009:Call gdi32.SetPixel(00001008,00000045,0000005f,00008000) ret=01002a00 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a00 0009:Call gdi32.SetPixel(00001008,00000046,0000005e,00008000) ret=01002a11 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a11 0009:Call winmm.timeGetTime() ret=010047d1 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00001658 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00001658 ret=010047d1 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00001659 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00001659 ret=01004881 0009:Call gdi32.BitBlt(00001020,00000000,0000005b,00000047,00000005,00001008,00000000,0000005b,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001020,0000003d,00000000,0000000a,0000005b,00001008,0000003d,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001008,0000000a,00000005,0000003e,0000005c,00001008,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001008,00000000,00000000,00000047,00000005,00000314,00000437,00000253,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001008,00000000,00000005,0000000a,0000005b,00000314,00000437,00000258,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000437,00000253,00000047,00000060,00001014,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000441,000002b3,00000047,00000005,00001020,00000000,0000005b,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000047e,00000258,0000000a,0000005b,00001020,0000003d,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=0000165f ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=0000165f ret=01004881 0009:Call gdi32.BitBlt(00001020,00000000,0000003f,00000047,00000021,00001008,00000000,0000003f,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001020,00000009,00000000,0000003e,0000003f,00001008,00000009,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001008,0000003e,00000021,0000000a,00000040,00001008,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001008,00000000,00000000,00000047,00000021,00000314,000003f9,00000232,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001008,00000000,00000021,0000003e,0000003f,00000314,000003f9,00000253,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000003f9,00000232,00000047,00000060,00001014,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000437,00000292,00000047,00000021,00001020,00000000,0000003f,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000440,00000253,0000003e,0000003f,00001020,00000009,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00001667 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00001667 ret=01004881 0009:Call gdi32.BitBlt(00001020,00000000,00000033,00000047,0000002d,00001008,00000000,00000033,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001020,fffffff4,00000000,00000053,00000033,00001008,fffffff4,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001008,00000000,00000000,00000047,0000002d,00000314,000003a6,00000205,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001008,00000000,0000002d,00000053,00000033,00000314,000003a6,00000232,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000003a6,00000205,00000047,00000060,00001014,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000003f9,00000265,00000047,0000002d,00001020,00000000,00000033,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,000003f9,00000232,00000047,00000033,00001020,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=0000166f ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=0000166f ret=01004881 0009:Call gdi32.BitBlt(00001020,00000000,00000034,00000047,0000002c,00001008,00000000,00000034,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001020,fffffff4,00000000,00000053,00000034,00001008,fffffff4,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001008,00000000,00000000,00000047,0000002c,00000314,00000353,000001d9,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001008,00000000,0000002c,00000053,00000034,00000314,00000353,00000205,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000353,000001d9,00000047,00000060,00001014,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000003a6,00000239,00000047,0000002c,00001020,00000000,00000034,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,000003a6,00000205,00000047,00000034,00001020,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00001677 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00001677 ret=01004881 0009:Call gdi32.BitBlt(00001020,00000000,00000033,00000047,0000002d,00001008,00000000,00000033,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001020,fffffff4,00000000,00000053,00000033,00001008,fffffff4,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001008,00000000,00000000,00000047,0000002d,00000314,00000300,000001ac,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001008,00000000,0000002d,00000053,00000033,00000314,00000300,000001d9,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000300,000001ac,00000047,00000060,00001014,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000353,0000020c,00000047,0000002d,00001020,00000000,00000033,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000353,000001d9,00000047,00000033,00001020,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=0000167f ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=0000167f ret=01004881 0009:Call gdi32.BitBlt(00001020,00000000,00000034,00000047,0000002c,00001008,00000000,00000034,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001020,fffffff4,00000000,00000053,00000034,00001008,fffffff4,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001008,00000000,00000000,00000047,0000002c,00000314,000002ad,00000180,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001008,00000000,0000002c,00000053,00000034,00000314,000002ad,000001ac,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000002ad,00000180,00000047,00000060,00001014,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000300,000001e0,00000047,0000002c,00001020,00000000,00000034,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000300,000001ac,00000047,00000034,00001020,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00001687 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00001687 ret=01004881 0009:Call gdi32.BitBlt(00001020,00000000,00000034,00000047,0000002c,00001008,00000000,00000034,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001020,fffffff4,00000000,00000053,00000034,00001008,fffffff4,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001008,00000000,00000000,00000047,0000002c,00000314,0000025a,00000154,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001008,00000000,0000002c,00000053,00000034,00000314,0000025a,00000180,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,0000025a,00000154,00000047,00000060,00001014,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000002ad,000001b4,00000047,0000002c,00001020,00000000,00000034,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,000002ad,00000180,00000047,00000034,00001020,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=0000168f ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=0000168f ret=01004881 0009:Call gdi32.BitBlt(00001020,00000000,00000033,00000047,0000002d,00001008,00000000,00000033,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001020,fffffff4,00000000,00000053,00000033,00001008,fffffff4,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001008,00000000,00000000,00000047,0000002d,00000314,00000207,00000127,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001008,00000000,0000002d,00000053,00000033,00000314,00000207,00000154,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000207,00000127,00000047,00000060,00001014,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,0000025a,00000187,00000047,0000002d,00001020,00000000,00000033,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000025a,00000154,00000047,00000033,00001020,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00001697 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00001697 ret=01004881 0009:Call gdi32.BitBlt(00001020,00000000,00000034,00000047,0000002c,00001008,00000000,00000034,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001020,fffffff4,00000000,00000053,00000034,00001008,fffffff4,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001008,00000000,00000000,00000047,0000002c,00000314,000001b4,000000fb,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001008,00000000,0000002c,00000053,00000034,00000314,000001b4,00000127,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000001b4,000000fb,00000047,00000060,00001014,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000207,0000015b,00000047,0000002c,00001020,00000000,00000034,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000207,00000127,00000047,00000034,00001020,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=0000169f ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=0000169f ret=01004881 0009:Call gdi32.BitBlt(00001020,00000000,00000033,00000047,0000002d,00001008,00000000,00000033,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001020,fffffff4,00000000,00000053,00000033,00001008,fffffff4,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001008,00000000,00000000,00000047,0000002d,00000314,00000161,000000ce,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001008,00000000,0000002d,00000053,00000033,00000314,00000161,000000fb,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000161,000000ce,00000047,00000060,00001014,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000001b4,0000012e,00000047,0000002d,00001020,00000000,00000033,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,000001b4,000000fb,00000047,00000033,00001020,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000016a7 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000016a7 ret=01004881 0009:Call gdi32.BitBlt(00001020,00000000,00000034,00000047,0000002c,00001008,00000000,00000034,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001020,fffffff3,00000000,00000054,00000034,00001008,fffffff3,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001008,00000000,00000000,00000047,0000002c,00000314,0000010d,000000a2,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001008,00000000,0000002c,00000054,00000034,00000314,0000010d,000000ce,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,0000010d,000000a2,00000047,00000060,00001014,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000161,00000102,00000047,0000002c,00001020,00000000,00000034,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000161,000000ce,00000047,00000034,00001020,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000016af ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000016af ret=01004881 0009:Call gdi32.BitBlt(00001020,00000000,00000034,00000047,0000002c,00001008,00000000,00000034,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001020,fffffff4,00000000,00000053,00000034,00001008,fffffff4,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001008,00000000,00000000,00000047,0000002c,00000314,000000ba,00000076,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001008,00000000,0000002c,00000053,00000034,00000314,000000ba,000000a2,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000000ba,00000076,00000047,00000060,00001014,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,0000010d,000000d6,00000047,0000002c,00001020,00000000,00000034,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000010d,000000a2,00000047,00000034,00001020,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000016b7 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000016b7 ret=01004881 0009:Call gdi32.BitBlt(00001020,00000000,00000033,00000047,0000002d,00001008,00000000,00000033,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001020,fffffff4,00000000,00000053,00000033,00001008,fffffff4,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001008,00000000,00000000,00000047,0000002d,00000314,00000067,00000049,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001008,00000000,0000002d,00000053,00000033,00000314,00000067,00000076,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000067,00000049,00000047,00000060,00001014,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000000ba,000000a9,00000047,0000002d,00001020,00000000,00000033,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,000000ba,00000076,00000047,00000033,00001020,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000016bf ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000016bf ret=01004881 0009:Call gdi32.BitBlt(00001020,00000000,00000044,00000047,0000001c,00001008,00000000,00000044,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001020,00000013,00000000,00000034,00000044,00001008,00000013,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001008,00000034,0000001c,00000014,00000045,00001008,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001008,00000000,00000000,00000047,0000001c,00000314,00000033,0000002d,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001008,00000000,0000001c,00000034,00000044,00000314,00000033,00000049,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000033,0000002d,00000047,00000060,00001014,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000067,0000008d,00000047,0000001c,00001020,00000000,00000044,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000007a,00000049,00000034,00000044,00001020,00000013,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call gdi32.SelectObject(00001008,0000006c) ret=01005316 0009:Ret gdi32.SelectObject() retval=0000102c ret=01005316 0009:Call gdi32.SelectObject(00001014,0000006c) ret=01005324 0009:Ret gdi32.SelectObject() retval=00001030 ret=01005324 0009:Call gdi32.SelectObject(00001020,0000006c) ret=01005332 0009:Ret gdi32.SelectObject() retval=00001034 ret=01005332 0009:Call gdi32.DeleteObject(0000102c) ret=01005340 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005340 0009:Call gdi32.DeleteObject(00001030) ret=01005348 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005348 0009:Call gdi32.DeleteObject(00001034) ret=01005350 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005350 0009:Call gdi32.DeleteDC(00001008) ret=0100535e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100535e 0009:Call gdi32.DeleteDC(00001014) ret=01005366 0009:Ret gdi32.DeleteDC() retval=00000001 ret=01005366 0009:Call gdi32.DeleteDC(00001020) ret=0100536e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100536e 0009:Call user32.ReleaseDC(00010030,00000314) ret=0100537c 0009:Ret user32.ReleaseDC() retval=00000001 ret=0100537c 0009:Call user32.InvalidateRect(00010030,0033f62c,00000000) ret=0100538a 0009:Ret user32.InvalidateRect() retval=00000001 ret=0100538a 0009:Call KERNEL32.GetModuleHandleW(00000000) ret=01005c37 0009:Ret KERNEL32.GetModuleHandleW() retval=01000000 ret=01005c37 0009:Call winmm.PlaySoundW(0000007c,01000000,00040007) ret=01005c40 0009:Call ntdll.RtlAllocateHeap(00110000,00000008,0000001c) ret=7e7356bc 0009:Ret ntdll.RtlAllocateHeap() retval=00148cb8 ret=7e7356bc 0009:Call KERNEL32.CreateThread(00000000,00000000,7e7348a0,00148cb8,00000000,0033f5a8) ret=7e73560c 001a:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) 001a:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 001a:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) 001a:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 001a:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) 001a:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) retval=1 001a:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) 001a:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 001a:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) 001a:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 001a:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) 001a:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 001a:Starting thread proc 0x7e7348a0 (arg=0x148cb8) 001a:Call KERNEL32.FindResourceW(01000000,0000007c,7e741bde L"WAVE") ret=7e734ca3 001a:Ret KERNEL32.FindResourceW() retval=01014c40 ret=7e734ca3 001a:Call KERNEL32.LoadResource(01000000,01014c40) ret=7e734cb9 001a:Ret KERNEL32.LoadResource() retval=0104d668 ret=7e734cb9 001a:Call KERNEL32.LockResource(0104d668) ret=7e734cce 001a:Ret KERNEL32.LockResource() retval=0104d668 ret=7e734cce 001a:Call KERNEL32.FreeResource(0104d668) ret=7e734ce9 001a:Ret KERNEL32.FreeResource() retval=00000000 ret=7e734ce9 001a:Call ntdll.RtlAllocateHeap(00110000,00000008,0000005c) ret=7e733960 001a:Ret ntdll.RtlAllocateHeap() retval=00148c28 ret=7e733960 001a:Call KERNEL32.GetFileSize(ffffffff,00000000) ret=7e733ab9 001a:Ret KERNEL32.GetFileSize() retval=ffffffff ret=7e733ab9 001a:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7e733cf0 001a:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e733cf0 001a:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7e734e1c 001a:Ret ntdll.RtlAllocateHeap() retval=0014bef8 ret=7e734e1c 001a:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e734f1f 001a:Ret KERNEL32.CreateEventW() retval=00000068 ret=7e734f1f 001a:Call ntdll.RtlAllocateHeap(00110000,00000008,0000001c) ret=7e72abbe 001a:Ret ntdll.RtlAllocateHeap() retval=0014bf10 ret=7e72abbe 001a:Call msacm32.drv.wodMessage(0000ffff,00000005,007ce918,007ce970,00030000) ret=7e728e1f 001a:Call ntdll.RtlAllocateHeap(00110000,00000000,0000002c) ret=7e0bfd8c 001a:Ret ntdll.RtlAllocateHeap() retval=0014bf38 ret=7e0bfd8c 001a:Call winmm.waveOutGetNumDevs() ret=7e0bfdb5 001a:Ret winmm.waveOutGetNumDevs() retval=00000002 ret=7e0bfdb5 001a:Call winmm.waveOutOpen(0014bf40,00000000,0014bef8,7e0bde60,0014bf38,00030008) ret=7e0c0313 001a:Call ntdll.RtlAllocateHeap(00110000,00000008,0000001c) ret=7e72abbe 001a:Ret ntdll.RtlAllocateHeap() retval=0014bf70 ret=7e72abbe 001a:Call winealsa.drv.wodMessage(00000000,00000005,007ce5b8,007ce610,00030008) ret=7e728e1f 001a:Call ntdll.RtlAllocateHeap(00110000,00000008,00000068) ret=7e1c6c82 001a:Ret ntdll.RtlAllocateHeap() retval=00148b18 ret=7e1c6c82 001a:Call ntdll.RtlAllocateHeap(00110000,00000008,00000300) ret=7e1b2459 001a:Ret ntdll.RtlAllocateHeap() retval=0014c7d0 ret=7e1b2459 001a:Call KERNEL32.InitializeCriticalSection(0013cefc) ret=7e1b2469 001a:Ret KERNEL32.InitializeCriticalSection() retval=00000001 ret=7e1b2469 001a:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1c73ab 0009:Ret KERNEL32.CreateThread() retval=00000064 ret=7e73560c 0009:Call KERNEL32.SetThreadPriority(00000064,0000000f) ret=7e73562d 0009:Ret KERNEL32.SetThreadPriority() retval=00000001 ret=7e73562d 0009:Ret winmm.PlaySoundW() retval=00000001 ret=01005c40 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,0000000c) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c56e8 ret=0100a7d2 0009:Call user32.GetClientRect(00010030,0033f61c) ret=01005145 0009:Ret user32.GetClientRect() retval=00000001 ret=01005145 0009:Call user32.GetDC(00010030) ret=010051ad 0009:Ret user32.GetDC() retval=00000314 ret=010051ad 0009:Call gdi32.CreateCompatibleDC(00000314) ret=010051bc 0009:Ret gdi32.CreateCompatibleDC() retval=00001094 ret=010051bc 0009:Call gdi32.CreateCompatibleDC(00000314) ret=010051ca 0009:Ret gdi32.CreateCompatibleDC() retval=000010a0 ret=010051ca 0009:Call gdi32.CreateCompatibleDC(00000314) ret=010051d8 0009:Ret gdi32.CreateCompatibleDC() retval=000010ac ret=010051d8 0009:Call gdi32.CreateCompatibleBitmap(00000314,00000047,00000060) ret=010051f8 0009:Ret gdi32.CreateCompatibleBitmap() retval=000010b8 ret=010051f8 0009:Call gdi32.CreateCompatibleBitmap(00000314,00000047,00000060) ret=01005212 0009:Ret gdi32.CreateCompatibleBitmap() retval=000010bc ret=01005212 0009:Call gdi32.CreateCompatibleBitmap(00000314,00000047,00000060) ret=0100522c 0009:Ret gdi32.CreateCompatibleBitmap() retval=000010c0 ret=0100522c 0009:Call gdi32.SelectObject(00001094,000010b8) ret=01005246 0009:Ret gdi32.SelectObject() retval=0000006c ret=01005246 0009:Call gdi32.SelectObject(000010a0,000010bc) ret=0100525a 0009:Ret gdi32.SelectObject() retval=0000006c ret=0100525a 0009:Call gdi32.SelectObject(000010ac,000010c0) ret=0100526e 0009:Ret gdi32.SelectObject() retval=0000006c ret=0100526e 0009:Call user32.LoadBitmapW(01000000,0033f5b4 L"CARD44") ret=010028ff 001a:Ret KERNEL32.CreateEventW() retval=00000070 ret=7e1c73ab 001a:Call KERNEL32.CreateThread(00000000,00000000,7e1c5570,00000000,00000000,0013cedc) ret=7e1c73ef 0009:Ret user32.LoadBitmapW() retval=000010d0 ret=010028ff 0009:Call gdi32.CreateCompatibleDC(000010a0) ret=01002909 0009:Ret gdi32.CreateCompatibleDC() retval=000010e4 ret=01002909 0009:Call gdi32.SelectObject(000010e4,000010d0) ret=01002917 0009:Ret gdi32.SelectObject() retval=0000006c ret=01002917 0009:Call gdi32.BitBlt(000010a0,00000000,00000000,00000047,00000060,000010e4,00000000,00000000,00cc0020) ret=01002938 0009:Ret gdi32.BitBlt() retval=00000001 ret=01002938 0009:Call gdi32.SelectObject(000010e4,0000006c) ret=0100293e 0009:Ret gdi32.SelectObject() retval=000010d0 ret=0100293e 0009:Call gdi32.DeleteObject(000010d0) ret=01002947 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01002947 0009:Call gdi32.DeleteDC(000010e4) ret=0100294e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100294e 0009:Call gdi32.SetPixel(000010a0,00000000,00000000,00008000) ret=01002969 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002969 0009:Call gdi32.SetPixel(000010a0,00000001,00000000,00008000) ret=01002976 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002976 0009:Call gdi32.SetPixel(000010a0,00000000,00000001,00008000) ret=01002982 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002982 0009:Call gdi32.SetPixel(000010a0,00000046,00000000,00008000) ret=0100298f 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100298f 0009:Call gdi32.SetPixel(000010a0,00000045,00000000,00008000) ret=0100299c 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100299c 0009:Call gdi32.SetPixel(000010a0,00000046,00000001,00008000) ret=010029ab 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ab 0009:Call gdi32.SetPixel(000010a0,00000000,0000005f,00008000) ret=010029bf 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029bf 0009:Call gdi32.SetPixel(000010a0,00000001,0000005f,00008000) ret=010029d0 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029d0 0009:Call gdi32.SetPixel(000010a0,00000000,0000005e,00008000) ret=010029de 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029de 0009:Call gdi32.SetPixel(000010a0,00000046,0000005f,00008000) ret=010029ef 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ef 0009:Call gdi32.SetPixel(000010a0,00000045,0000005f,00008000) ret=01002a00 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a00 0009:Call gdi32.SetPixel(000010a0,00000046,0000005e,00008000) ret=01002a11 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a11 0009:Call user32.LoadBitmapW(01000000,010012c8 L"CARDBACK") ret=010028ff 0009:Ret user32.LoadBitmapW() retval=000010fc ret=010028ff 0009:Call gdi32.CreateCompatibleDC(00001094) ret=01002909 0009:Ret gdi32.CreateCompatibleDC() retval=00001110 ret=01002909 0009:Call gdi32.SelectObject(00001110,000010fc) ret=01002917 0009:Ret gdi32.SelectObject() retval=0000006c ret=01002917 0009:Call gdi32.BitBlt(00001094,00000000,00000000,00000047,00000060,00001110,00000000,00000000,00cc0020) ret=01002938 0009:Ret gdi32.BitBlt() retval=00000001 ret=01002938 0009:Call gdi32.SelectObject(00001110,0000006c) ret=0100293e 0009:Ret gdi32.SelectObject() retval=000010fc ret=0100293e 0009:Call gdi32.DeleteObject(000010fc) ret=01002947 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01002947 0009:Call gdi32.DeleteDC(00001110) ret=0100294e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100294e 0009:Call gdi32.SetPixel(00001094,00000000,00000000,00008000) ret=01002969 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002969 0009:Call gdi32.SetPixel(00001094,00000001,00000000,00008000) ret=01002976 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002976 0009:Call gdi32.SetPixel(00001094,00000000,00000001,00008000) ret=01002982 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002982 0009:Call gdi32.SetPixel(00001094,00000046,00000000,00008000) ret=0100298f 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100298f 0009:Call gdi32.SetPixel(00001094,00000045,00000000,00008000) ret=0100299c 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100299c 0009:Call gdi32.SetPixel(00001094,00000046,00000001,00008000) ret=010029ab 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ab 0009:Call gdi32.SetPixel(00001094,00000000,0000005f,00008000) ret=010029bf 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029bf 0009:Call gdi32.SetPixel(00001094,00000001,0000005f,00008000) ret=010029d0 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029d0 0009:Call gdi32.SetPixel(00001094,00000000,0000005e,00008000) ret=010029de 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029de 0009:Call gdi32.SetPixel(00001094,00000046,0000005f,00008000) ret=010029ef 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ef 0009:Call gdi32.SetPixel(00001094,00000045,0000005f,00008000) ret=01002a00 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a00 0009:Call gdi32.SetPixel(00001094,00000046,0000005e,00008000) ret=01002a11 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a11 0009:Call winmm.timeGetTime() ret=010047d1 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000016ef ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000016ef ret=010047d1 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000016ef ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000016ef ret=01004881 0009:Call gdi32.BitBlt(00001094,00000000,00000000,00000048,00000061,00001094,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00000314,00000441,00000258,00000047,00000060,000010a0,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 001b:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) 001b:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 001b:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) 001b:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 001b:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) 001b:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) retval=1 001b:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) 001b:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 001b:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) 001b:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 001b:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) 001b:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 001b:Starting thread proc 0x7e1c5570 (arg=(nil)) 001b:Call KERNEL32.SetEvent(00000070) ret=7e1c55aa 001b:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c55aa 001a:Ret KERNEL32.CreateThread() retval=00000074 ret=7e1c73ef 001a:Call KERNEL32.SetThreadPriority(00000074,0000000f) ret=7e1c7413 001a:Ret KERNEL32.SetThreadPriority() retval=00000001 ret=7e1c7413 001a:Call KERNEL32.WaitForSingleObject(00000070,ffffffff) ret=7e1c742f 001a:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1c742f 001a:Call KERNEL32.CloseHandle(00000070) ret=7e1c7443 001a:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1c7443 001a:Call ntdll.RtlFreeHeap(00110000,00000000,00148b18) ret=7e1c7479 001a:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e1c7479 001a:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bb,0014bf38,00000000,00000000) ret=7e1c4643 001a:Call KERNEL32.IsBadReadPtr(0014bf38,0000002c) ret=7e0bdbc9 001a:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 001a:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bb,007ceaa4,00000000,00000000) ret=7e0bdf33 001a:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 001a:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 001a:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 001a:Ret winmm.waveOutOpen() retval=00000000 ret=7e0c0313 001a:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 001a:Call ntdll.RtlAllocateHeap(00110000,00000000,000039ac) ret=7e73520d 001a:Ret ntdll.RtlAllocateHeap() retval=0014d3a0 ret=7e73520d 001a:Call msacm32.drv.wodMessage(0000ffff,00000007,0014bf38,0014d3a0,00000020) ret=7e728e1f 001a:Call winmm.waveOutPrepareHeader(00008001,0014d3a0,00000020) ret=7e0c09d8 001a:Call winealsa.drv.wodMessage(00000000,00000007,7e72ab2b,0014d3a0,00000020) ret=7e728e1f 001a:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 001a:Ret winmm.waveOutPrepareHeader() retval=00000000 ret=7e0c09d8 001a:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 001a:Call msacm32.drv.wodMessage(0000ffff,00000007,0014bf38,0014d3c0,00000020) ret=7e728e1f 001a:Call winmm.waveOutPrepareHeader(00008001,0014d3c0,00000020) ret=7e0c09d8 001a:Call winealsa.drv.wodMessage(00000000,00000007,7e72ab2b,0014d3c0,00000020) ret=7e728e1f 001a:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 001a:Ret winmm.waveOutPrepareHeader() retval=00000000 ret=7e0c09d8 001a:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 001a:Call KERNEL32.WaitForSingleObject(00000038,00000000) ret=7e735343 001a:Ret KERNEL32.WaitForSingleObject() retval=00000102 ret=7e735343 001a:Call msacm32.drv.wodMessage(0000ffff,00000009,0014bf38,0014d3a0,00000020) ret=7e728e1f 001a:Call winmm.waveOutWrite(00008001,0014d3a0,00000020) ret=7e0c09b5 001a:Call winealsa.drv.wodMessage(00000000,00000009,7e72ab2b,0014d3a0,00000020) ret=7e728e1f 001a:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 001a:Ret winmm.waveOutWrite() retval=00000000 ret=7e0c09b5 001a:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 001a:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 001a:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 001a:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 001a:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 001a:Call KERNEL32.WaitForSingleObject(00000068,ffffffff) ret=7e73429b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000016f7 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000016f7 ret=01004881 0009:Call gdi32.BitBlt(000010ac,00000000,00000034,00000047,0000002c,00001094,00000000,00000034,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000010ac,fffffffe,00000000,00000049,00000034,00001094,fffffffe,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001094,00000000,00000000,00000047,0000002c,00000314,000003f8,0000022c,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001094,00000000,0000002c,00000049,00000034,00000314,000003f8,00000258,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000003f8,0000022c,00000047,00000060,000010a0,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000441,0000028c,00000047,0000002c,000010ac,00000000,00000034,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000441,00000258,00000047,00000034,000010ac,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000016ff ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000016ff ret=01004881 0009:Call gdi32.BitBlt(000010ac,00000000,00000034,00000047,0000002c,00001094,00000000,00000034,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000010ac,fffffffe,00000000,00000049,00000034,00001094,fffffffe,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001094,00000000,00000000,00000047,0000002c,00000314,000003af,00000200,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001094,00000000,0000002c,00000049,00000034,00000314,000003af,0000022c,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000003af,00000200,00000047,00000060,000010a0,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000003f8,00000260,00000047,0000002c,000010ac,00000000,00000034,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,000003f8,0000022c,00000047,00000034,000010ac,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00001707 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00001707 ret=01004881 0009:Call gdi32.BitBlt(000010ac,00000000,00000033,00000047,0000002d,00001094,00000000,00000033,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000010ac,fffffffe,00000000,00000049,00000033,00001094,fffffffe,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001094,00000000,00000000,00000047,0000002d,00000314,00000366,000001d3,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001094,00000000,0000002d,00000049,00000033,00000314,00000366,00000200,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000366,000001d3,00000047,00000060,000010a0,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000003af,00000233,00000047,0000002d,000010ac,00000000,00000033,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,000003af,00000200,00000047,00000033,000010ac,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=0000170f ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=0000170f ret=01004881 0009:Call gdi32.BitBlt(000010ac,00000000,00000034,00000047,0000002c,00001094,00000000,00000034,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000010ac,fffffffd,00000000,0000004a,00000034,00001094,fffffffd,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001094,00000000,00000000,00000047,0000002c,00000314,0000031c,000001a7,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001094,00000000,0000002c,0000004a,00000034,00000314,0000031c,000001d3,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,0000031c,000001a7,00000047,00000060,000010a0,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000366,00000207,00000047,0000002c,000010ac,00000000,00000034,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000366,000001d3,00000047,00000034,000010ac,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00001717 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00001717 ret=01004881 0009:Call gdi32.BitBlt(000010ac,00000000,00000034,00000047,0000002c,00001094,00000000,00000034,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000010ac,fffffffe,00000000,00000049,00000034,00001094,fffffffe,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001094,00000000,00000000,00000047,0000002c,00000314,000002d3,0000017b,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001094,00000000,0000002c,00000049,00000034,00000314,000002d3,000001a7,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000002d3,0000017b,00000047,00000060,000010a0,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,0000031c,000001db,00000047,0000002c,000010ac,00000000,00000034,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000031c,000001a7,00000047,00000034,000010ac,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=0000171f ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=0000171f ret=01004881 0009:Call gdi32.BitBlt(000010ac,00000000,00000033,00000047,0000002d,00001094,00000000,00000033,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000010ac,fffffffe,00000000,00000049,00000033,00001094,fffffffe,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001094,00000000,00000000,00000047,0000002d,00000314,0000028a,0000014e,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001094,00000000,0000002d,00000049,00000033,00000314,0000028a,0000017b,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,0000028a,0000014e,00000047,00000060,000010a0,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000002d3,000001ae,00000047,0000002d,000010ac,00000000,00000033,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,000002d3,0000017b,00000047,00000033,000010ac,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00001727 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00001727 ret=01004881 0009:Call gdi32.BitBlt(000010ac,00000000,00000034,00000047,0000002c,00001094,00000000,00000034,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000010ac,fffffffe,00000000,00000049,00000034,00001094,fffffffe,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001094,00000000,00000000,00000047,0000002c,00000314,00000241,00000122,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001094,00000000,0000002c,00000049,00000034,00000314,00000241,0000014e,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000241,00000122,00000047,00000060,000010a0,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,0000028a,00000182,00000047,0000002c,000010ac,00000000,00000034,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000028a,0000014e,00000047,00000034,000010ac,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=0000172f ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=0000172f ret=01004881 0009:Call gdi32.BitBlt(000010ac,00000000,00000033,00000047,0000002d,00001094,00000000,00000033,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000010ac,fffffffd,00000000,0000004a,00000033,00001094,fffffffd,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001094,00000000,00000000,00000047,0000002d,00000314,000001f7,000000f5,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001094,00000000,0000002d,0000004a,00000033,00000314,000001f7,00000122,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000001f7,000000f5,00000047,00000060,000010a0,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000241,00000155,00000047,0000002d,000010ac,00000000,00000033,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000241,00000122,00000047,00000033,000010ac,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00001737 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00001737 ret=01004881 0009:Call gdi32.BitBlt(000010ac,00000000,00000034,00000047,0000002c,00001094,00000000,00000034,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000010ac,fffffffe,00000000,00000049,00000034,00001094,fffffffe,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001094,00000000,00000000,00000047,0000002c,00000314,000001ae,000000c9,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001094,00000000,0000002c,00000049,00000034,00000314,000001ae,000000f5,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000001ae,000000c9,00000047,00000060,000010a0,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000001f7,00000129,00000047,0000002c,000010ac,00000000,00000034,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,000001f7,000000f5,00000047,00000034,000010ac,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=0000173f ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=0000173f ret=01004881 0009:Call gdi32.BitBlt(000010ac,00000000,00000034,00000047,0000002c,00001094,00000000,00000034,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000010ac,fffffffe,00000000,00000049,00000034,00001094,fffffffe,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001094,00000000,00000000,00000047,0000002c,00000314,00000165,0000009d,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001094,00000000,0000002c,00000049,00000034,00000314,00000165,000000c9,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000165,0000009d,00000047,00000060,000010a0,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000001ae,000000fd,00000047,0000002c,000010ac,00000000,00000034,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,000001ae,000000c9,00000047,00000034,000010ac,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00001747 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00001747 ret=01004881 0009:Call gdi32.BitBlt(000010ac,00000000,00000033,00000047,0000002d,00001094,00000000,00000033,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000010ac,fffffffd,00000000,0000004a,00000033,00001094,fffffffd,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001094,00000000,00000000,00000047,0000002d,00000314,0000011b,00000070,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001094,00000000,0000002d,0000004a,00000033,00000314,0000011b,0000009d,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,0000011b,00000070,00000047,00000060,000010a0,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000165,000000d0,00000047,0000002d,000010ac,00000000,00000033,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000165,0000009d,00000047,00000033,000010ac,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=0000174f ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=0000174f ret=01004881 0009:Call gdi32.BitBlt(000010ac,00000000,00000034,00000047,0000002c,00001094,00000000,00000034,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000010ac,fffffffe,00000000,00000049,00000034,00001094,fffffffe,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001094,00000000,00000000,00000047,0000002c,00000314,000000d2,00000044,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001094,00000000,0000002c,00000049,00000034,00000314,000000d2,00000070,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000000d2,00000044,00000047,00000060,000010a0,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,0000011b,000000a4,00000047,0000002c,000010ac,00000000,00000034,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000011b,00000070,00000047,00000034,000010ac,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00001757 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00001757 ret=01004881 0009:Call gdi32.BitBlt(000010ac,00000000,00000049,00000047,00000017,00001094,00000000,00000049,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000010ac,00000022,00000000,00000025,00000049,00001094,00000022,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001094,00000025,00000017,00000023,0000004a,00001094,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001094,00000000,00000000,00000047,00000017,00000314,000000ad,0000002d,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001094,00000000,00000017,00000025,00000049,00000314,000000ad,00000044,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000000ad,0000002d,00000047,00000060,000010a0,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000000d2,0000008d,00000047,00000017,000010ac,00000000,00000049,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,000000f4,00000044,00000025,00000049,000010ac,00000022,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call gdi32.SelectObject(00001094,0000006c) ret=01005316 0009:Ret gdi32.SelectObject() retval=000010b8 ret=01005316 0009:Call gdi32.SelectObject(000010a0,0000006c) ret=01005324 0009:Ret gdi32.SelectObject() retval=000010bc ret=01005324 0009:Call gdi32.SelectObject(000010ac,0000006c) ret=01005332 0009:Ret gdi32.SelectObject() retval=000010c0 ret=01005332 0009:Call gdi32.DeleteObject(000010b8) ret=01005340 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005340 0009:Call gdi32.DeleteObject(000010bc) ret=01005348 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005348 0009:Call gdi32.DeleteObject(000010c0) ret=01005350 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005350 0009:Call gdi32.DeleteDC(00001094) ret=0100535e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100535e 0009:Call gdi32.DeleteDC(000010a0) ret=01005366 0009:Ret gdi32.DeleteDC() retval=00000001 ret=01005366 0009:Call gdi32.DeleteDC(000010ac) ret=0100536e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100536e 0009:Call user32.ReleaseDC(00010030,00000314) ret=0100537c 0009:Ret user32.ReleaseDC() retval=00000001 ret=0100537c 0009:Call user32.InvalidateRect(00010030,0033f62c,00000000) ret=0100538a 0009:Ret user32.InvalidateRect() retval=00000001 ret=0100538a 0009:Call KERNEL32.GetModuleHandleW(00000000) ret=01005c37 0009:Ret KERNEL32.GetModuleHandleW() retval=01000000 ret=01005c37 0009:Call winmm.PlaySoundW(0000007c,01000000,00040007) ret=01005c40 0009:Call ntdll.RtlAllocateHeap(00110000,00000008,0000001c) ret=7e7356bc 0009:Ret ntdll.RtlAllocateHeap() retval=00148b18 ret=7e7356bc 0009:Call KERNEL32.ResetEvent(00000040) ret=7e735513 0009:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e735513 0009:Call KERNEL32.SetEvent(00000038) ret=7e735520 0009:Ret KERNEL32.SetEvent() retval=00000001 ret=7e735520 0009:Call msacm32.drv.wodMessage(0000ffff,0000000c,0014bf38,00000000,00000000) ret=7e728e1f 0009:Call winmm.waveOutReset(00008001) ret=7e0c0180 0009:Call winealsa.drv.wodMessage(00000000,0000000c,7e72ab2b,00000000,00000000) ret=7e728e1f 0009:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1b2580 0009:Ret KERNEL32.CreateEventW() retval=00000070 ret=7e1b2580 0009:Call KERNEL32.WaitForSingleObject(00000070,ffffffff) ret=7e1b2635 001b:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bd,0014bf38,0014d3a0,00000000) ret=7e1c4643 001b:Call KERNEL32.IsBadReadPtr(0014bf38,0000002c) ret=7e0bdbc9 001b:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 001b:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bd,007ceaa4,0014d3a0,00000000) ret=7e0bdf33 001b:Call KERNEL32.SetEvent(00000068) ret=7e7341f6 001b:Ret KERNEL32.SetEvent() retval=00000001 ret=7e7341f6 001b:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 001b:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 001b:Call KERNEL32.SetEvent(00000070) ret=7e1c4f3d 001b:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c4f3d 001a:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e73429b 001a:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 001a:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 001a:Call msacm32.drv.wodMessage(0000ffff,0000000c,0014bf38,00000000,00000000) ret=7e728e1f 001a:Call winmm.waveOutReset(00008001) ret=7e0c0180 001a:Call winealsa.drv.wodMessage(00000000,0000000c,7e72ab2b,00000000,00000000) ret=7e728e1f 001a:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1b2580 001a:Ret KERNEL32.CreateEventW() retval=00000078 ret=7e1b2580 001a:Call KERNEL32.WaitForSingleObject(00000078,ffffffff) ret=7e1b2635 001b:Call KERNEL32.SetEvent(00000078) ret=7e1c4f3d 001b:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c4f3d 001a:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1b2635 001a:Call KERNEL32.CloseHandle(00000078) ret=7e1b2640 001a:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1b2640 001a:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 001a:Ret winmm.waveOutReset() retval=00000000 ret=7e0c0180 001a:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 001a:Call msacm32.drv.wodMessage(0000ffff,00000008,0014bf38,0014d3a0,00000020) ret=7e728e1f 001a:Call winmm.waveOutUnprepareHeader(00008001,0014d3a0,00000020) ret=7e0c00b6 001a:Call winealsa.drv.wodMessage(00000000,00000008,7e72ab2b,0014d3a0,00000020) ret=7e728e1f 001a:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 001a:Ret winmm.waveOutUnprepareHeader() retval=00000000 ret=7e0c00b6 001a:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 001a:Call msacm32.drv.wodMessage(0000ffff,00000008,0014bf38,0014d3c0,00000020) ret=7e728e1f 001a:Call winmm.waveOutUnprepareHeader(00008001,0014d3c0,00000020) ret=7e0c00b6 001a:Call winealsa.drv.wodMessage(00000000,00000008,7e72ab2b,0014d3c0,00000020) ret=7e728e1f 001a:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 001a:Ret winmm.waveOutUnprepareHeader() retval=00000000 ret=7e0c00b6 001a:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 001a:Call KERNEL32.CloseHandle(00000068) ret=7e7349fd 001a:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e7349fd 001a:Call ntdll.RtlFreeHeap(00110000,00000000,0014d3a0) ret=7e734a23 001a:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e734a23 001a:Call ntdll.RtlFreeHeap(00110000,00000000,0014bef8) ret=7e734a49 001a:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e734a49 001a:Call msacm32.drv.wodMessage(0000ffff,00000006,0014bf38,00000000,00000000) ret=7e728e1f 001a:Call winmm.waveOutClose(00008001) ret=7e0c01a5 001a:Call winealsa.drv.wodMessage(00000000,00000006,7e72ab2b,00000000,00000000) ret=7e728e1f 001a:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1b2580 001a:Ret KERNEL32.CreateEventW() retval=00000068 ret=7e1b2580 001a:Call KERNEL32.WaitForSingleObject(00000068,ffffffff) ret=7e1b2635 001b:Call KERNEL32.SetEvent(00000068) ret=7e1c4ea1 001b:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c4ea1 001b:Call KERNEL32.ExitThread(00000000) ret=7e1c4eb0 001b:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) 001b:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 001b:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) 001b:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) retval=1 001b:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) 001b:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 001b:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) 001b:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) retval=1 001b:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) 001b:Call KERNEL32.TlsGetValue(00000000) ret=7e3f4071 001b:Ret KERNEL32.TlsGetValue() retval=00000000 ret=7e3f4071 001b:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 001b:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) 001b:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 001a:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1b2635 001a:Call KERNEL32.CloseHandle(00000068) ret=7e1b2640 001a:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1b2640 001a:Call ntdll.RtlFreeHeap(00110000,00000000,0014c7d0) ret=7e1b24dc 001a:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e1b24dc 001a:Call ntdll.RtlDeleteCriticalSection(0013cefc) ret=7e1b24fb 001a:Ret ntdll.RtlDeleteCriticalSection() retval=00000000 ret=7e1b24fb 001a:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bc,0014bf38,00000000,00000000) ret=7e1c4643 001a:Call KERNEL32.IsBadReadPtr(0014bf38,0000002c) ret=7e0bdbc9 001a:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 001a:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bc,007ceaa4,00000000,00000000) ret=7e0bdf33 001a:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 001a:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 001a:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 001a:Call ntdll.RtlFreeHeap(00110000,00000000,0014bf70) ret=7e72ae0b 001a:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e72ae0b 001a:Ret winmm.waveOutClose() retval=00000000 ret=7e0c01a5 001a:Call ntdll.RtlFreeHeap(00110000,00000000,0014bf38) ret=7e0c01f7 001a:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e0c01f7 001a:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 001a:Call ntdll.RtlFreeHeap(00110000,00000000,0014bf10) ret=7e72ae0b 001a:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e72ae0b 0009:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1b2635 0009:Call KERNEL32.CloseHandle(00000070) ret=7e1b2640 0009:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1b2640 0009:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0009:Ret winmm.waveOutReset() retval=00000000 ret=7e0c0180 0009:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0009:Call KERNEL32.WaitForSingleObject(00000040,ffffffff) ret=7e73555a 001a:Call ntdll.RtlFreeHeap(00110000,00000000,00148c28) ret=7e731f79 001a:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e731f79 001a:Call KERNEL32.SetEvent(00000040) ret=7e7343a0 001a:Ret KERNEL32.SetEvent() retval=00000001 ret=7e7343a0 001a:Call KERNEL32.CloseHandle(00000064) ret=7e734340 001a:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e734340 001a:Call ntdll.RtlFreeHeap(00110000,00000000,00148cb8) ret=7e734360 001a:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e734360 001a:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) 001a:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 001a:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) 001a:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) retval=1 001a:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) 001a:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 001a:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) 001a:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) retval=1 001a:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) 001a:Call KERNEL32.TlsGetValue(00000000) ret=7e3f4071 001a:Ret KERNEL32.TlsGetValue() retval=00000000 ret=7e3f4071 001a:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 001a:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) 001a:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0009:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e73555a 0009:Call KERNEL32.ResetEvent(00000038) ret=7e735572 0009:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e735572 0009:Call KERNEL32.CreateThread(00000000,00000000,7e7348a0,00148b18,00000000,0033f5a8) ret=7e73560c 001c:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) 001c:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 001c:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) 001c:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 001c:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) 001c:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) retval=1 001c:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) 001c:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 001c:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) 001c:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 001c:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) 001c:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 001c:Starting thread proc 0x7e7348a0 (arg=0x148b18) 001c:Call KERNEL32.FindResourceW(01000000,0000007c,7e741bde L"WAVE") ret=7e734ca3 001c:Ret KERNEL32.FindResourceW() retval=01014c40 ret=7e734ca3 001c:Call KERNEL32.LoadResource(01000000,01014c40) ret=7e734cb9 001c:Ret KERNEL32.LoadResource() retval=0104d668 ret=7e734cb9 001c:Call KERNEL32.LockResource(0104d668) ret=7e734cce 001c:Ret KERNEL32.LockResource() retval=0104d668 ret=7e734cce 001c:Call KERNEL32.FreeResource(0104d668) ret=7e734ce9 001c:Ret KERNEL32.FreeResource() retval=00000000 ret=7e734ce9 001c:Call ntdll.RtlAllocateHeap(00110000,00000008,0000005c) ret=7e733960 001c:Ret ntdll.RtlAllocateHeap() retval=00148c28 ret=7e733960 001c:Call KERNEL32.GetFileSize(ffffffff,00000000) ret=7e733ab9 001c:Ret KERNEL32.GetFileSize() retval=ffffffff ret=7e733ab9 001c:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7e733cf0 001c:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e733cf0 001c:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7e734e1c 001c:Ret ntdll.RtlAllocateHeap() retval=00148cb8 ret=7e734e1c 001c:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e734f1f 001c:Ret KERNEL32.CreateEventW() retval=00000068 ret=7e734f1f 001c:Call ntdll.RtlAllocateHeap(00110000,00000008,0000001c) ret=7e72abbe 001c:Ret ntdll.RtlAllocateHeap() retval=0014bef8 ret=7e72abbe 001c:Call msacm32.drv.wodMessage(0000ffff,00000005,008ce918,008ce970,00030000) ret=7e728e1f 001c:Call ntdll.RtlAllocateHeap(00110000,00000000,0000002c) ret=7e0bfd8c 001c:Ret ntdll.RtlAllocateHeap() retval=0014bf20 ret=7e0bfd8c 001c:Call winmm.waveOutGetNumDevs() ret=7e0bfdb5 001c:Ret winmm.waveOutGetNumDevs() retval=00000002 ret=7e0bfdb5 001c:Call winmm.waveOutOpen(0014bf28,00000000,00148cb8,7e0bde60,0014bf20,00030008) ret=7e0c0313 001c:Call ntdll.RtlAllocateHeap(00110000,00000008,0000001c) ret=7e72abbe 001c:Ret ntdll.RtlAllocateHeap() retval=0014bf58 ret=7e72abbe 001c:Call winealsa.drv.wodMessage(00000000,00000005,008ce5b8,008ce610,00030008) ret=7e728e1f 001c:Call ntdll.RtlAllocateHeap(00110000,00000008,00000068) ret=7e1c6c82 001c:Ret ntdll.RtlAllocateHeap() retval=00148b40 ret=7e1c6c82 001c:Call ntdll.RtlAllocateHeap(00110000,00000008,00000300) ret=7e1b2459 001c:Ret ntdll.RtlAllocateHeap() retval=0014c7d0 ret=7e1b2459 001c:Call KERNEL32.InitializeCriticalSection(0013cefc) ret=7e1b2469 001c:Ret KERNEL32.InitializeCriticalSection() retval=00000001 ret=7e1b2469 001c:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1c73ab 0009:Ret KERNEL32.CreateThread() retval=00000064 ret=7e73560c 0009:Call KERNEL32.SetThreadPriority(00000064,0000000f) ret=7e73562d 0009:Ret KERNEL32.SetThreadPriority() retval=00000001 ret=7e73562d 0009:Ret winmm.PlaySoundW() retval=00000001 ret=01005c40 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,0000000c) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c5700 ret=0100a7d2 0009:Call user32.GetClientRect(00010030,0033f61c) ret=01005145 0009:Ret user32.GetClientRect() retval=00000001 ret=01005145 0009:Call user32.GetDC(00010030) ret=010051ad 0009:Ret user32.GetDC() retval=00000314 ret=010051ad 0009:Call gdi32.CreateCompatibleDC(00000314) ret=010051bc 0009:Ret gdi32.CreateCompatibleDC() retval=00001120 ret=010051bc 0009:Call gdi32.CreateCompatibleDC(00000314) ret=010051ca 0009:Ret gdi32.CreateCompatibleDC() retval=0000112c ret=010051ca 0009:Call gdi32.CreateCompatibleDC(00000314) ret=010051d8 0009:Ret gdi32.CreateCompatibleDC() retval=00001138 ret=010051d8 0009:Call gdi32.CreateCompatibleBitmap(00000314,00000047,00000060) ret=010051f8 0009:Ret gdi32.CreateCompatibleBitmap() retval=00001144 ret=010051f8 0009:Call gdi32.CreateCompatibleBitmap(00000314,00000047,00000060) ret=01005212 0009:Ret gdi32.CreateCompatibleBitmap() retval=00001148 ret=01005212 0009:Call gdi32.CreateCompatibleBitmap(00000314,00000047,00000060) ret=0100522c 0009:Ret gdi32.CreateCompatibleBitmap() retval=0000114c ret=0100522c 0009:Call gdi32.SelectObject(00001120,00001144) ret=01005246 0009:Ret gdi32.SelectObject() retval=0000006c ret=01005246 0009:Call gdi32.SelectObject(0000112c,00001148) ret=0100525a 0009:Ret gdi32.SelectObject() retval=0000006c ret=0100525a 0009:Call gdi32.SelectObject(00001138,0000114c) ret=0100526e 0009:Ret gdi32.SelectObject() retval=0000006c ret=0100526e 0009:Call user32.LoadBitmapW(01000000,0033f5b4 L"CARD48") ret=010028ff 001c:Ret KERNEL32.CreateEventW() retval=00000070 ret=7e1c73ab 001c:Call KERNEL32.CreateThread(00000000,00000000,7e1c5570,00000000,00000000,0013cedc) ret=7e1c73ef 001d:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) 001d:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 001d:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) 001d:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 001d:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) 001d:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) retval=1 001d:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) 001d:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 001d:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) 001d:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 001d:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) 001d:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 001d:Starting thread proc 0x7e1c5570 (arg=(nil)) 001d:Call KERNEL32.SetEvent(00000070) ret=7e1c55aa 001d:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c55aa 001c:Ret KERNEL32.CreateThread() retval=00000078 ret=7e1c73ef 001c:Call KERNEL32.SetThreadPriority(00000078,0000000f) ret=7e1c7413 001c:Ret KERNEL32.SetThreadPriority() retval=00000001 ret=7e1c7413 001c:Call KERNEL32.WaitForSingleObject(00000070,ffffffff) ret=7e1c742f 001c:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1c742f 001c:Call KERNEL32.CloseHandle(00000070) ret=7e1c7443 001c:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1c7443 001c:Call ntdll.RtlFreeHeap(00110000,00000000,00148b40) ret=7e1c7479 001c:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e1c7479 001c:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bb,0014bf20,00000000,00000000) ret=7e1c4643 001c:Call KERNEL32.IsBadReadPtr(0014bf20,0000002c) ret=7e0bdbc9 001c:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 001c:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bb,008ceaa4,00000000,00000000) ret=7e0bdf33 001c:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 001c:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 001c:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 001c:Ret winmm.waveOutOpen() retval=00000000 ret=7e0c0313 001c:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 001c:Call ntdll.RtlAllocateHeap(00110000,00000000,000039ac) ret=7e73520d 001c:Ret ntdll.RtlAllocateHeap() retval=0014d3a0 ret=7e73520d 001c:Call msacm32.drv.wodMessage(0000ffff,00000007,0014bf20,0014d3a0,00000020) ret=7e728e1f 001c:Call winmm.waveOutPrepareHeader(00008001,0014d3a0,00000020) ret=7e0c09d8 001c:Call winealsa.drv.wodMessage(00000000,00000007,7e72ab2b,0014d3a0,00000020) ret=7e728e1f 001c:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 001c:Ret winmm.waveOutPrepareHeader() retval=00000000 ret=7e0c09d8 001c:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 001c:Call msacm32.drv.wodMessage(0000ffff,00000007,0014bf20,0014d3c0,00000020) ret=7e728e1f 001c:Call winmm.waveOutPrepareHeader(00008001,0014d3c0,00000020) ret=7e0c09d8 001c:Call winealsa.drv.wodMessage(00000000,00000007,7e72ab2b,0014d3c0,00000020) ret=7e728e1f 001c:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 001c:Ret winmm.waveOutPrepareHeader() retval=00000000 ret=7e0c09d8 001c:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 001c:Call KERNEL32.WaitForSingleObject(00000038,00000000) ret=7e735343 001c:Ret KERNEL32.WaitForSingleObject() retval=00000102 ret=7e735343 001c:Call msacm32.drv.wodMessage(0000ffff,00000009,0014bf20,0014d3a0,00000020) ret=7e728e1f 001c:Call winmm.waveOutWrite(00008001,0014d3a0,00000020) ret=7e0c09b5 001c:Call winealsa.drv.wodMessage(00000000,00000009,7e72ab2b,0014d3a0,00000020) ret=7e728e1f 001c:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 001c:Ret winmm.waveOutWrite() retval=00000000 ret=7e0c09b5 001c:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 001c:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 001c:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 001c:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 001c:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 001c:Call KERNEL32.WaitForSingleObject(00000068,ffffffff) ret=7e73429b 0009:Ret user32.LoadBitmapW() retval=0000115c ret=010028ff 0009:Call gdi32.CreateCompatibleDC(0000112c) ret=01002909 0009:Ret gdi32.CreateCompatibleDC() retval=00001170 ret=01002909 0009:Call gdi32.SelectObject(00001170,0000115c) ret=01002917 0009:Ret gdi32.SelectObject() retval=0000006c ret=01002917 0009:Call gdi32.BitBlt(0000112c,00000000,00000000,00000047,00000060,00001170,00000000,00000000,00cc0020) ret=01002938 0009:Ret gdi32.BitBlt() retval=00000001 ret=01002938 0009:Call gdi32.SelectObject(00001170,0000006c) ret=0100293e 0009:Ret gdi32.SelectObject() retval=0000115c ret=0100293e 0009:Call gdi32.DeleteObject(0000115c) ret=01002947 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01002947 0009:Call gdi32.DeleteDC(00001170) ret=0100294e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100294e 0009:Call gdi32.SetPixel(0000112c,00000000,00000000,00008000) ret=01002969 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002969 0009:Call gdi32.SetPixel(0000112c,00000001,00000000,00008000) ret=01002976 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002976 0009:Call gdi32.SetPixel(0000112c,00000000,00000001,00008000) ret=01002982 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002982 0009:Call gdi32.SetPixel(0000112c,00000046,00000000,00008000) ret=0100298f 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100298f 0009:Call gdi32.SetPixel(0000112c,00000045,00000000,00008000) ret=0100299c 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100299c 0009:Call gdi32.SetPixel(0000112c,00000046,00000001,00008000) ret=010029ab 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ab 0009:Call gdi32.SetPixel(0000112c,00000000,0000005f,00008000) ret=010029bf 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029bf 0009:Call gdi32.SetPixel(0000112c,00000001,0000005f,00008000) ret=010029d0 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029d0 0009:Call gdi32.SetPixel(0000112c,00000000,0000005e,00008000) ret=010029de 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029de 0009:Call gdi32.SetPixel(0000112c,00000046,0000005f,00008000) ret=010029ef 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ef 0009:Call gdi32.SetPixel(0000112c,00000045,0000005f,00008000) ret=01002a00 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a00 0009:Call gdi32.SetPixel(0000112c,00000046,0000005e,00008000) ret=01002a11 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a11 0009:Call user32.LoadBitmapW(01000000,010012c8 L"CARDBACK") ret=010028ff 0009:Ret user32.LoadBitmapW() retval=00001188 ret=010028ff 0009:Call gdi32.CreateCompatibleDC(00001120) ret=01002909 0009:Ret gdi32.CreateCompatibleDC() retval=0000119c ret=01002909 0009:Call gdi32.SelectObject(0000119c,00001188) ret=01002917 0009:Ret gdi32.SelectObject() retval=0000006c ret=01002917 0009:Call gdi32.BitBlt(00001120,00000000,00000000,00000047,00000060,0000119c,00000000,00000000,00cc0020) ret=01002938 0009:Ret gdi32.BitBlt() retval=00000001 ret=01002938 0009:Call gdi32.SelectObject(0000119c,0000006c) ret=0100293e 0009:Ret gdi32.SelectObject() retval=00001188 ret=0100293e 0009:Call gdi32.DeleteObject(00001188) ret=01002947 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01002947 0009:Call gdi32.DeleteDC(0000119c) ret=0100294e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100294e 0009:Call gdi32.SetPixel(00001120,00000000,00000000,00008000) ret=01002969 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002969 0009:Call gdi32.SetPixel(00001120,00000001,00000000,00008000) ret=01002976 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002976 0009:Call gdi32.SetPixel(00001120,00000000,00000001,00008000) ret=01002982 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002982 0009:Call gdi32.SetPixel(00001120,00000046,00000000,00008000) ret=0100298f 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100298f 0009:Call gdi32.SetPixel(00001120,00000045,00000000,00008000) ret=0100299c 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100299c 0009:Call gdi32.SetPixel(00001120,00000046,00000001,00008000) ret=010029ab 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ab 0009:Call gdi32.SetPixel(00001120,00000000,0000005f,00008000) ret=010029bf 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029bf 0009:Call gdi32.SetPixel(00001120,00000001,0000005f,00008000) ret=010029d0 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029d0 0009:Call gdi32.SetPixel(00001120,00000000,0000005e,00008000) ret=010029de 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029de 0009:Call gdi32.SetPixel(00001120,00000046,0000005f,00008000) ret=010029ef 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ef 0009:Call gdi32.SetPixel(00001120,00000045,0000005f,00008000) ret=01002a00 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a00 0009:Call gdi32.SetPixel(00001120,00000046,0000005e,00008000) ret=01002a11 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a11 0009:Call winmm.timeGetTime() ret=010047d1 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=0000178d ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=0000178d ret=010047d1 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=0000178d ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=0000178d ret=01004881 0009:Call gdi32.BitBlt(00001120,00000000,00000000,00000048,00000061,00001120,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00000314,00000441,00000258,00000047,00000060,0000112c,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00001793 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00001793 ret=01004881 0009:Call gdi32.BitBlt(00001138,00000000,0000003f,00000047,00000021,00001120,00000000,0000003f,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001138,00000018,00000000,0000002f,0000003f,00001120,00000018,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001120,0000002f,00000021,00000019,00000040,00001120,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001120,00000000,00000000,00000047,00000021,00000314,00000412,00000237,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001120,00000000,00000021,0000002f,0000003f,00000314,00000412,00000258,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000412,00000237,00000047,00000060,0000112c,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000441,00000297,00000047,00000021,00001138,00000000,0000003f,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000459,00000258,0000002f,0000003f,00001138,00000018,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=0000179b ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=0000179b ret=01004881 0009:Call gdi32.BitBlt(00001138,00000000,00000034,00000047,0000002c,00001120,00000000,00000034,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001138,00000007,00000000,00000040,00000034,00001120,00000007,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001120,00000040,0000002c,00000008,00000035,00001120,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001120,00000000,00000000,00000047,0000002c,00000314,000003d2,0000020b,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001120,00000000,0000002c,00000040,00000034,00000314,000003d2,00000237,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000003d2,0000020b,00000047,00000060,0000112c,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000412,0000026b,00000047,0000002c,00001138,00000000,00000034,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000419,00000237,00000040,00000034,00001138,00000007,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000017a3 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000017a3 ret=01004881 0009:Call gdi32.BitBlt(00001138,00000000,00000033,00000047,0000002d,00001120,00000000,00000033,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001138,00000008,00000000,0000003f,00000033,00001120,00000008,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001120,0000003f,0000002d,00000009,00000034,00001120,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001120,00000000,00000000,00000047,0000002d,00000314,00000393,000001de,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001120,00000000,0000002d,0000003f,00000033,00000314,00000393,0000020b,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000393,000001de,00000047,00000060,0000112c,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000003d2,0000023e,00000047,0000002d,00001138,00000000,00000033,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,000003da,0000020b,0000003f,00000033,00001138,00000008,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000017ab ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000017ab ret=01004881 0009:Call gdi32.BitBlt(00001138,00000000,00000034,00000047,0000002c,00001120,00000000,00000034,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001138,00000007,00000000,00000040,00000034,00001120,00000007,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001120,00000040,0000002c,00000008,00000035,00001120,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001120,00000000,00000000,00000047,0000002c,00000314,00000353,000001b2,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001120,00000000,0000002c,00000040,00000034,00000314,00000353,000001de,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000353,000001b2,00000047,00000060,0000112c,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000393,00000212,00000047,0000002c,00001138,00000000,00000034,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000039a,000001de,00000040,00000034,00001138,00000007,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000017b3 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000017b3 ret=01004881 0009:Call gdi32.BitBlt(00001138,00000000,00000034,00000047,0000002c,00001120,00000000,00000034,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001138,00000008,00000000,0000003f,00000034,00001120,00000008,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001120,0000003f,0000002c,00000009,00000035,00001120,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001120,00000000,00000000,00000047,0000002c,00000314,00000314,00000186,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001120,00000000,0000002c,0000003f,00000034,00000314,00000314,000001b2,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000314,00000186,00000047,00000060,0000112c,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000353,000001e6,00000047,0000002c,00001138,00000000,00000034,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000035b,000001b2,0000003f,00000034,00001138,00000008,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000017bb ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000017bb ret=01004881 0009:Call gdi32.BitBlt(00001138,00000000,00000033,00000047,0000002d,00001120,00000000,00000033,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001138,00000007,00000000,00000040,00000033,00001120,00000007,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001120,00000040,0000002d,00000008,00000034,00001120,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001120,00000000,00000000,00000047,0000002d,00000314,000002d4,00000159,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001120,00000000,0000002d,00000040,00000033,00000314,000002d4,00000186,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000002d4,00000159,00000047,00000060,0000112c,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000314,000001b9,00000047,0000002d,00001138,00000000,00000033,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000031b,00000186,00000040,00000033,00001138,00000007,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000017c3 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000017c3 ret=01004881 0009:Call gdi32.BitBlt(00001138,00000000,00000034,00000047,0000002c,00001120,00000000,00000034,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001138,00000008,00000000,0000003f,00000034,00001120,00000008,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001120,0000003f,0000002c,00000009,00000035,00001120,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001120,00000000,00000000,00000047,0000002c,00000314,00000295,0000012d,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001120,00000000,0000002c,0000003f,00000034,00000314,00000295,00000159,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000295,0000012d,00000047,00000060,0000112c,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000002d4,0000018d,00000047,0000002c,00001138,00000000,00000034,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,000002dc,00000159,0000003f,00000034,00001138,00000008,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000017cb ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000017cb ret=01004881 0009:Call gdi32.BitBlt(00001138,00000000,00000033,00000047,0000002d,00001120,00000000,00000033,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001138,00000007,00000000,00000040,00000033,00001120,00000007,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001120,00000040,0000002d,00000008,00000034,00001120,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001120,00000000,00000000,00000047,0000002d,00000314,00000255,00000100,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001120,00000000,0000002d,00000040,00000033,00000314,00000255,0000012d,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000255,00000100,00000047,00000060,0000112c,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000295,00000160,00000047,0000002d,00001138,00000000,00000033,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000029c,0000012d,00000040,00000033,00001138,00000007,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000017d3 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000017d3 ret=01004881 0009:Call gdi32.BitBlt(00001138,00000000,00000034,00000047,0000002c,00001120,00000000,00000034,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001138,00000008,00000000,0000003f,00000034,00001120,00000008,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001120,0000003f,0000002c,00000009,00000035,00001120,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001120,00000000,00000000,00000047,0000002c,00000314,00000216,000000d4,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001120,00000000,0000002c,0000003f,00000034,00000314,00000216,00000100,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000216,000000d4,00000047,00000060,0000112c,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000255,00000134,00000047,0000002c,00001138,00000000,00000034,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000025d,00000100,0000003f,00000034,00001138,00000008,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000017db ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000017db ret=01004881 0009:Call gdi32.BitBlt(00001138,00000000,00000034,00000047,0000002c,00001120,00000000,00000034,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001138,00000007,00000000,00000040,00000034,00001120,00000007,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001120,00000040,0000002c,00000008,00000035,00001120,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001120,00000000,00000000,00000047,0000002c,00000314,000001d6,000000a8,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001120,00000000,0000002c,00000040,00000034,00000314,000001d6,000000d4,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000001d6,000000a8,00000047,00000060,0000112c,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000216,00000108,00000047,0000002c,00001138,00000000,00000034,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000021d,000000d4,00000040,00000034,00001138,00000007,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000017e3 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000017e3 ret=01004881 0009:Call gdi32.BitBlt(00001138,00000000,00000033,00000047,0000002d,00001120,00000000,00000033,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001138,00000008,00000000,0000003f,00000033,00001120,00000008,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001120,0000003f,0000002d,00000009,00000034,00001120,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001120,00000000,00000000,00000047,0000002d,00000314,00000197,0000007b,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001120,00000000,0000002d,0000003f,00000033,00000314,00000197,000000a8,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000197,0000007b,00000047,00000060,0000112c,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000001d6,000000db,00000047,0000002d,00001138,00000000,00000033,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,000001de,000000a8,0000003f,00000033,00001138,00000008,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000017eb ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000017eb ret=01004881 0009:Call gdi32.BitBlt(00001138,00000000,00000034,00000047,0000002c,00001120,00000000,00000034,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001138,00000007,00000000,00000040,00000034,00001120,00000007,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001120,00000040,0000002c,00000008,00000035,00001120,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001120,00000000,00000000,00000047,0000002c,00000314,00000157,0000004f,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001120,00000000,0000002c,00000040,00000034,00000314,00000157,0000007b,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000157,0000004f,00000047,00000060,0000112c,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000197,000000af,00000047,0000002c,00001138,00000000,00000034,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000019e,0000007b,00000040,00000034,00001138,00000007,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000017f3 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000017f3 ret=01004881 0009:Call gdi32.BitBlt(00001138,00000000,0000003e,00000047,00000022,00001120,00000000,0000003e,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001138,00000017,00000000,00000030,0000003e,00001120,00000017,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001120,00000030,00000022,00000018,0000003f,00001120,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001120,00000000,00000000,00000047,00000022,00000314,00000127,0000002d,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001120,00000000,00000022,00000030,0000003e,00000314,00000127,0000004f,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000127,0000002d,00000047,00000060,0000112c,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000157,0000008d,00000047,00000022,00001138,00000000,0000003e,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000016e,0000004f,00000030,0000003e,00001138,00000017,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call gdi32.SelectObject(00001120,0000006c) ret=01005316 0009:Ret gdi32.SelectObject() retval=00001144 ret=01005316 0009:Call gdi32.SelectObject(0000112c,0000006c) ret=01005324 0009:Ret gdi32.SelectObject() retval=00001148 ret=01005324 0009:Call gdi32.SelectObject(00001138,0000006c) ret=01005332 0009:Ret gdi32.SelectObject() retval=0000114c ret=01005332 0009:Call gdi32.DeleteObject(00001144) ret=01005340 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005340 0009:Call gdi32.DeleteObject(00001148) ret=01005348 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005348 0009:Call gdi32.DeleteObject(0000114c) ret=01005350 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005350 0009:Call gdi32.DeleteDC(00001120) ret=0100535e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100535e 0009:Call gdi32.DeleteDC(0000112c) ret=01005366 0009:Ret gdi32.DeleteDC() retval=00000001 ret=01005366 0009:Call gdi32.DeleteDC(00001138) ret=0100536e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100536e 0009:Call user32.ReleaseDC(00010030,00000314) ret=0100537c 0009:Ret user32.ReleaseDC() retval=00000001 ret=0100537c 0009:Call user32.InvalidateRect(00010030,0033f62c,00000000) ret=0100538a 0009:Ret user32.InvalidateRect() retval=00000001 ret=0100538a 0009:Call KERNEL32.GetModuleHandleW(00000000) ret=01005c37 0009:Ret KERNEL32.GetModuleHandleW() retval=01000000 ret=01005c37 0009:Call winmm.PlaySoundW(0000007c,01000000,00040007) ret=01005c40 0009:Call ntdll.RtlAllocateHeap(00110000,00000008,0000001c) ret=7e7356bc 0009:Ret ntdll.RtlAllocateHeap() retval=0014bf80 ret=7e7356bc 0009:Call KERNEL32.ResetEvent(00000040) ret=7e735513 0009:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e735513 0009:Call KERNEL32.SetEvent(00000038) ret=7e735520 0009:Ret KERNEL32.SetEvent() retval=00000001 ret=7e735520 0009:Call msacm32.drv.wodMessage(0000ffff,0000000c,0014bf20,00000000,00000000) ret=7e728e1f 0009:Call winmm.waveOutReset(00008001) ret=7e0c0180 0009:Call winealsa.drv.wodMessage(00000000,0000000c,7e72ab2b,00000000,00000000) ret=7e728e1f 0009:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1b2580 0009:Ret KERNEL32.CreateEventW() retval=00000070 ret=7e1b2580 0009:Call KERNEL32.WaitForSingleObject(00000070,ffffffff) ret=7e1b2635 001d:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bd,0014bf20,0014d3a0,00000000) ret=7e1c4643 001d:Call KERNEL32.IsBadReadPtr(0014bf20,0000002c) ret=7e0bdbc9 001d:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 001d:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bd,008ceaa4,0014d3a0,00000000) ret=7e0bdf33 001d:Call KERNEL32.SetEvent(00000068) ret=7e7341f6 001d:Ret KERNEL32.SetEvent() retval=00000001 ret=7e7341f6 001d:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 001d:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 001d:Call KERNEL32.SetEvent(00000070) ret=7e1c4f3d 001d:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c4f3d 001c:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e73429b 001c:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 001c:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 001c:Call msacm32.drv.wodMessage(0000ffff,0000000c,0014bf20,00000000,00000000) ret=7e728e1f 001c:Call winmm.waveOutReset(00008001) ret=7e0c0180 001c:Call winealsa.drv.wodMessage(00000000,0000000c,7e72ab2b,00000000,00000000) ret=7e728e1f 001c:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1b2580 001c:Ret KERNEL32.CreateEventW() retval=0000007c ret=7e1b2580 001c:Call KERNEL32.WaitForSingleObject(0000007c,ffffffff) ret=7e1b2635 001d:Call KERNEL32.SetEvent(0000007c) ret=7e1c4f3d 001d:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c4f3d 001c:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1b2635 001c:Call KERNEL32.CloseHandle(0000007c) ret=7e1b2640 001c:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1b2640 001c:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 001c:Ret winmm.waveOutReset() retval=00000000 ret=7e0c0180 001c:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 001c:Call msacm32.drv.wodMessage(0000ffff,00000008,0014bf20,0014d3a0,00000020) ret=7e728e1f 001c:Call winmm.waveOutUnprepareHeader(00008001,0014d3a0,00000020) ret=7e0c00b6 001c:Call winealsa.drv.wodMessage(00000000,00000008,7e72ab2b,0014d3a0,00000020) ret=7e728e1f 001c:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 001c:Ret winmm.waveOutUnprepareHeader() retval=00000000 ret=7e0c00b6 001c:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 001c:Call msacm32.drv.wodMessage(0000ffff,00000008,0014bf20,0014d3c0,00000020) ret=7e728e1f 001c:Call winmm.waveOutUnprepareHeader(00008001,0014d3c0,00000020) ret=7e0c00b6 001c:Call winealsa.drv.wodMessage(00000000,00000008,7e72ab2b,0014d3c0,00000020) ret=7e728e1f 001c:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 001c:Ret winmm.waveOutUnprepareHeader() retval=00000000 ret=7e0c00b6 001c:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 001c:Call KERNEL32.CloseHandle(00000068) ret=7e7349fd 001c:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e7349fd 001c:Call ntdll.RtlFreeHeap(00110000,00000000,0014d3a0) ret=7e734a23 001c:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e734a23 001c:Call ntdll.RtlFreeHeap(00110000,00000000,00148cb8) ret=7e734a49 001c:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e734a49 001c:Call msacm32.drv.wodMessage(0000ffff,00000006,0014bf20,00000000,00000000) ret=7e728e1f 001c:Call winmm.waveOutClose(00008001) ret=7e0c01a5 001c:Call winealsa.drv.wodMessage(00000000,00000006,7e72ab2b,00000000,00000000) ret=7e728e1f 001c:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1b2580 001c:Ret KERNEL32.CreateEventW() retval=00000068 ret=7e1b2580 001c:Call KERNEL32.WaitForSingleObject(00000068,ffffffff) ret=7e1b2635 001d:Call KERNEL32.SetEvent(00000068) ret=7e1c4ea1 001d:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c4ea1 001d:Call KERNEL32.ExitThread(00000000) ret=7e1c4eb0 001d:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) 001d:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 001d:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) 001d:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) retval=1 001d:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) 001d:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 001d:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) 001d:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) retval=1 001d:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) 001d:Call KERNEL32.TlsGetValue(00000000) ret=7e3f4071 001d:Ret KERNEL32.TlsGetValue() retval=00000000 ret=7e3f4071 001d:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 001d:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) 001d:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 001c:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1b2635 001c:Call KERNEL32.CloseHandle(00000068) ret=7e1b2640 001c:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1b2640 001c:Call ntdll.RtlFreeHeap(00110000,00000000,0014c7d0) ret=7e1b24dc 001c:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e1b24dc 001c:Call ntdll.RtlDeleteCriticalSection(0013cefc) ret=7e1b24fb 001c:Ret ntdll.RtlDeleteCriticalSection() retval=00000000 ret=7e1b24fb 001c:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bc,0014bf20,00000000,00000000) ret=7e1c4643 001c:Call KERNEL32.IsBadReadPtr(0014bf20,0000002c) ret=7e0bdbc9 001c:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 001c:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bc,008ceaa4,00000000,00000000) ret=7e0bdf33 001c:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 001c:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 001c:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 001c:Call ntdll.RtlFreeHeap(00110000,00000000,0014bf58) ret=7e72ae0b 001c:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e72ae0b 001c:Ret winmm.waveOutClose() retval=00000000 ret=7e0c01a5 001c:Call ntdll.RtlFreeHeap(00110000,00000000,0014bf20) ret=7e0c01f7 001c:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e0c01f7 001c:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 001c:Call ntdll.RtlFreeHeap(00110000,00000000,0014bef8) ret=7e72ae0b 001c:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e72ae0b 0009:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1b2635 0009:Call KERNEL32.CloseHandle(00000070) ret=7e1b2640 0009:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1b2640 0009:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0009:Ret winmm.waveOutReset() retval=00000000 ret=7e0c0180 0009:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0009:Call KERNEL32.WaitForSingleObject(00000040,ffffffff) ret=7e73555a 001c:Call ntdll.RtlFreeHeap(00110000,00000000,00148c28) ret=7e731f79 001c:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e731f79 001c:Call KERNEL32.SetEvent(00000040) ret=7e7343a0 001c:Ret KERNEL32.SetEvent() retval=00000001 ret=7e7343a0 001c:Call KERNEL32.CloseHandle(00000064) ret=7e734340 001c:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e734340 001c:Call ntdll.RtlFreeHeap(00110000,00000000,00148b18) ret=7e734360 001c:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e734360 001c:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) 001c:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 001c:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) 001c:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) retval=1 001c:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) 001c:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 001c:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) 001c:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) retval=1 001c:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) 001c:Call KERNEL32.TlsGetValue(00000000) ret=7e3f4071 001c:Ret KERNEL32.TlsGetValue() retval=00000000 ret=7e3f4071 001c:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 001c:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) 001c:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0009:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e73555a 0009:Call KERNEL32.ResetEvent(00000038) ret=7e735572 0009:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e735572 0009:Call KERNEL32.CreateThread(00000000,00000000,7e7348a0,0014bf80,00000000,0033f5a8) ret=7e73560c 001e:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) 001e:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 001e:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) 001e:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 001e:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) 001e:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) retval=1 001e:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) 001e:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 001e:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) 001e:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 001e:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) 001e:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 001e:Starting thread proc 0x7e7348a0 (arg=0x14bf80) 001e:Call KERNEL32.FindResourceW(01000000,0000007c,7e741bde L"WAVE") ret=7e734ca3 001e:Ret KERNEL32.FindResourceW() retval=01014c40 ret=7e734ca3 001e:Call KERNEL32.LoadResource(01000000,01014c40) ret=7e734cb9 001e:Ret KERNEL32.LoadResource() retval=0104d668 ret=7e734cb9 001e:Call KERNEL32.LockResource(0104d668) ret=7e734cce 001e:Ret KERNEL32.LockResource() retval=0104d668 ret=7e734cce 001e:Call KERNEL32.FreeResource(0104d668) ret=7e734ce9 001e:Ret KERNEL32.FreeResource() retval=00000000 ret=7e734ce9 001e:Call ntdll.RtlAllocateHeap(00110000,00000008,0000005c) ret=7e733960 001e:Ret ntdll.RtlAllocateHeap() retval=00148c28 ret=7e733960 001e:Call KERNEL32.GetFileSize(ffffffff,00000000) ret=7e733ab9 001e:Ret KERNEL32.GetFileSize() retval=ffffffff ret=7e733ab9 001e:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7e733cf0 001e:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e733cf0 001e:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7e734e1c 001e:Ret ntdll.RtlAllocateHeap() retval=00148cb8 ret=7e734e1c 001e:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e734f1f 001e:Ret KERNEL32.CreateEventW() retval=00000068 ret=7e734f1f 001e:Call ntdll.RtlAllocateHeap(00110000,00000008,0000001c) ret=7e72abbe 001e:Ret ntdll.RtlAllocateHeap() retval=0014bef8 ret=7e72abbe 001e:Call msacm32.drv.wodMessage(0000ffff,00000005,007ce918,007ce970,00030000) ret=7e728e1f 001e:Call ntdll.RtlAllocateHeap(00110000,00000000,0000002c) ret=7e0bfd8c 001e:Ret ntdll.RtlAllocateHeap() retval=0014bf20 ret=7e0bfd8c 001e:Call winmm.waveOutGetNumDevs() ret=7e0bfdb5 001e:Ret winmm.waveOutGetNumDevs() retval=00000002 ret=7e0bfdb5 001e:Call winmm.waveOutOpen(0014bf28,00000000,00148cb8,7e0bde60,0014bf20,00030008) ret=7e0c0313 001e:Call ntdll.RtlAllocateHeap(00110000,00000008,0000001c) ret=7e72abbe 001e:Ret ntdll.RtlAllocateHeap() retval=0014bf58 ret=7e72abbe 001e:Call winealsa.drv.wodMessage(00000000,00000005,007ce5b8,007ce610,00030008) ret=7e728e1f 001e:Call ntdll.RtlAllocateHeap(00110000,00000008,00000068) ret=7e1c6c82 001e:Ret ntdll.RtlAllocateHeap() retval=00148b18 ret=7e1c6c82 001e:Call ntdll.RtlAllocateHeap(00110000,00000008,00000300) ret=7e1b2459 001e:Ret ntdll.RtlAllocateHeap() retval=0014c7d0 ret=7e1b2459 001e:Call KERNEL32.InitializeCriticalSection(0013cefc) ret=7e1b2469 001e:Ret KERNEL32.InitializeCriticalSection() retval=00000001 ret=7e1b2469 001e:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1c73ab 001e:Ret KERNEL32.CreateEventW() retval=00000070 ret=7e1c73ab 001e:Call KERNEL32.CreateThread(00000000,00000000,7e1c5570,00000000,00000000,0013cedc) ret=7e1c73ef 0009:Ret KERNEL32.CreateThread() retval=00000064 ret=7e73560c 0009:Call KERNEL32.SetThreadPriority(00000064,0000000f) ret=7e73562d 0009:Ret KERNEL32.SetThreadPriority() retval=00000001 ret=7e73562d 0009:Ret winmm.PlaySoundW() retval=00000001 ret=01005c40 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,0000000c) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c5718 ret=0100a7d2 0009:Call user32.GetClientRect(00010030,0033f61c) ret=01005145 0009:Ret user32.GetClientRect() retval=00000001 ret=01005145 0009:Call user32.GetDC(00010030) ret=010051ad 0009:Ret user32.GetDC() retval=00000314 ret=010051ad 0009:Call gdi32.CreateCompatibleDC(00000314) ret=010051bc 0009:Ret gdi32.CreateCompatibleDC() retval=000011ac ret=010051bc 0009:Call gdi32.CreateCompatibleDC(00000314) ret=010051ca 0009:Ret gdi32.CreateCompatibleDC() retval=000011b8 ret=010051ca 0009:Call gdi32.CreateCompatibleDC(00000314) ret=010051d8 0009:Ret gdi32.CreateCompatibleDC() retval=000011c4 ret=010051d8 0009:Call gdi32.CreateCompatibleBitmap(00000314,00000047,00000060) ret=010051f8 0009:Ret gdi32.CreateCompatibleBitmap() retval=000011d0 ret=010051f8 0009:Call gdi32.CreateCompatibleBitmap(00000314,00000047,00000060) ret=01005212 0009:Ret gdi32.CreateCompatibleBitmap() retval=000011d4 ret=01005212 0009:Call gdi32.CreateCompatibleBitmap(00000314,00000047,00000060) ret=0100522c 0009:Ret gdi32.CreateCompatibleBitmap() retval=000011d8 ret=0100522c 0009:Call gdi32.SelectObject(000011ac,000011d0) ret=01005246 0009:Ret gdi32.SelectObject() retval=0000006c ret=01005246 0009:Call gdi32.SelectObject(000011b8,000011d4) ret=0100525a 0009:Ret gdi32.SelectObject() retval=0000006c ret=0100525a 0009:Call gdi32.SelectObject(000011c4,000011d8) ret=0100526e 0009:Ret gdi32.SelectObject() retval=0000006c ret=0100526e 0009:Call user32.LoadBitmapW(01000000,0033f5b4 L"CARD47") ret=010028ff 001f:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) 001f:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 001f:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) 001f:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 001f:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) 001f:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) retval=1 001f:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) 001f:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 001f:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) 001f:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 001f:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) 001f:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 001f:Starting thread proc 0x7e1c5570 (arg=(nil)) 001f:Call KERNEL32.SetEvent(00000070) ret=7e1c55aa 001f:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c55aa 001e:Ret KERNEL32.CreateThread() retval=0000007c ret=7e1c73ef 001e:Call KERNEL32.SetThreadPriority(0000007c,0000000f) ret=7e1c7413 001e:Ret KERNEL32.SetThreadPriority() retval=00000001 ret=7e1c7413 001e:Call KERNEL32.WaitForSingleObject(00000070,ffffffff) ret=7e1c742f 001e:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1c742f 001e:Call KERNEL32.CloseHandle(00000070) ret=7e1c7443 001e:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1c7443 001e:Call ntdll.RtlFreeHeap(00110000,00000000,00148b18) ret=7e1c7479 001e:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e1c7479 001e:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bb,0014bf20,00000000,00000000) ret=7e1c4643 001e:Call KERNEL32.IsBadReadPtr(0014bf20,0000002c) ret=7e0bdbc9 001e:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 001e:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bb,007ceaa4,00000000,00000000) ret=7e0bdf33 001e:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 001e:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 001e:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 001e:Ret winmm.waveOutOpen() retval=00000000 ret=7e0c0313 001e:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 001e:Call ntdll.RtlAllocateHeap(00110000,00000000,000039ac) ret=7e73520d 001e:Ret ntdll.RtlAllocateHeap() retval=0014d3a0 ret=7e73520d 001e:Call msacm32.drv.wodMessage(0000ffff,00000007,0014bf20,0014d3a0,00000020) ret=7e728e1f 001e:Call winmm.waveOutPrepareHeader(00008001,0014d3a0,00000020) ret=7e0c09d8 001e:Call winealsa.drv.wodMessage(00000000,00000007,7e72ab2b,0014d3a0,00000020) ret=7e728e1f 001e:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 001e:Ret winmm.waveOutPrepareHeader() retval=00000000 ret=7e0c09d8 001e:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 001e:Call msacm32.drv.wodMessage(0000ffff,00000007,0014bf20,0014d3c0,00000020) ret=7e728e1f 001e:Call winmm.waveOutPrepareHeader(00008001,0014d3c0,00000020) ret=7e0c09d8 001e:Call winealsa.drv.wodMessage(00000000,00000007,7e72ab2b,0014d3c0,00000020) ret=7e728e1f 001e:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 001e:Ret winmm.waveOutPrepareHeader() retval=00000000 ret=7e0c09d8 001e:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 001e:Call KERNEL32.WaitForSingleObject(00000038,00000000) ret=7e735343 001e:Ret KERNEL32.WaitForSingleObject() retval=00000102 ret=7e735343 001e:Call msacm32.drv.wodMessage(0000ffff,00000009,0014bf20,0014d3a0,00000020) ret=7e728e1f 001e:Call winmm.waveOutWrite(00008001,0014d3a0,00000020) ret=7e0c09b5 001e:Call winealsa.drv.wodMessage(00000000,00000009,7e72ab2b,0014d3a0,00000020) ret=7e728e1f 001e:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 001e:Ret winmm.waveOutWrite() retval=00000000 ret=7e0c09b5 001e:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 001e:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 001e:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 001e:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 001e:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 001e:Call KERNEL32.WaitForSingleObject(00000068,ffffffff) ret=7e73429b 0009:Ret user32.LoadBitmapW() retval=000011e8 ret=010028ff 0009:Call gdi32.CreateCompatibleDC(000011b8) ret=01002909 0009:Ret gdi32.CreateCompatibleDC() retval=000011fc ret=01002909 0009:Call gdi32.SelectObject(000011fc,000011e8) ret=01002917 0009:Ret gdi32.SelectObject() retval=0000006c ret=01002917 0009:Call gdi32.BitBlt(000011b8,00000000,00000000,00000047,00000060,000011fc,00000000,00000000,00cc0020) ret=01002938 0009:Ret gdi32.BitBlt() retval=00000001 ret=01002938 0009:Call gdi32.SelectObject(000011fc,0000006c) ret=0100293e 0009:Ret gdi32.SelectObject() retval=000011e8 ret=0100293e 0009:Call gdi32.DeleteObject(000011e8) ret=01002947 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01002947 0009:Call gdi32.DeleteDC(000011fc) ret=0100294e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100294e 0009:Call gdi32.SetPixel(000011b8,00000000,00000000,00008000) ret=01002969 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002969 0009:Call gdi32.SetPixel(000011b8,00000001,00000000,00008000) ret=01002976 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002976 0009:Call gdi32.SetPixel(000011b8,00000000,00000001,00008000) ret=01002982 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002982 0009:Call gdi32.SetPixel(000011b8,00000046,00000000,00008000) ret=0100298f 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100298f 0009:Call gdi32.SetPixel(000011b8,00000045,00000000,00008000) ret=0100299c 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100299c 0009:Call gdi32.SetPixel(000011b8,00000046,00000001,00008000) ret=010029ab 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ab 0009:Call gdi32.SetPixel(000011b8,00000000,0000005f,00008000) ret=010029bf 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029bf 0009:Call gdi32.SetPixel(000011b8,00000001,0000005f,00008000) ret=010029d0 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029d0 0009:Call gdi32.SetPixel(000011b8,00000000,0000005e,00008000) ret=010029de 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029de 0009:Call gdi32.SetPixel(000011b8,00000046,0000005f,00008000) ret=010029ef 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ef 0009:Call gdi32.SetPixel(000011b8,00000045,0000005f,00008000) ret=01002a00 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a00 0009:Call gdi32.SetPixel(000011b8,00000046,0000005e,00008000) ret=01002a11 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a11 0009:Call user32.LoadBitmapW(01000000,010012c8 L"CARDBACK") ret=010028ff 0009:Ret user32.LoadBitmapW() retval=00001214 ret=010028ff 0009:Call gdi32.CreateCompatibleDC(000011ac) ret=01002909 0009:Ret gdi32.CreateCompatibleDC() retval=00001228 ret=01002909 0009:Call gdi32.SelectObject(00001228,00001214) ret=01002917 0009:Ret gdi32.SelectObject() retval=0000006c ret=01002917 0009:Call gdi32.BitBlt(000011ac,00000000,00000000,00000047,00000060,00001228,00000000,00000000,00cc0020) ret=01002938 0009:Ret gdi32.BitBlt() retval=00000001 ret=01002938 0009:Call gdi32.SelectObject(00001228,0000006c) ret=0100293e 0009:Ret gdi32.SelectObject() retval=00001214 ret=0100293e 0009:Call gdi32.DeleteObject(00001214) ret=01002947 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01002947 0009:Call gdi32.DeleteDC(00001228) ret=0100294e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100294e 0009:Call gdi32.SetPixel(000011ac,00000000,00000000,00008000) ret=01002969 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002969 0009:Call gdi32.SetPixel(000011ac,00000001,00000000,00008000) ret=01002976 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002976 0009:Call gdi32.SetPixel(000011ac,00000000,00000001,00008000) ret=01002982 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002982 0009:Call gdi32.SetPixel(000011ac,00000046,00000000,00008000) ret=0100298f 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100298f 0009:Call gdi32.SetPixel(000011ac,00000045,00000000,00008000) ret=0100299c 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100299c 0009:Call gdi32.SetPixel(000011ac,00000046,00000001,00008000) ret=010029ab 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ab 0009:Call gdi32.SetPixel(000011ac,00000000,0000005f,00008000) ret=010029bf 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029bf 0009:Call gdi32.SetPixel(000011ac,00000001,0000005f,00008000) ret=010029d0 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029d0 0009:Call gdi32.SetPixel(000011ac,00000000,0000005e,00008000) ret=010029de 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029de 0009:Call gdi32.SetPixel(000011ac,00000046,0000005f,00008000) ret=010029ef 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ef 0009:Call gdi32.SetPixel(000011ac,00000045,0000005f,00008000) ret=01002a00 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a00 0009:Call gdi32.SetPixel(000011ac,00000046,0000005e,00008000) ret=01002a11 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a11 0009:Call winmm.timeGetTime() ret=010047d1 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00001818 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00001818 ret=010047d1 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00001818 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00001818 ret=01004881 0009:Call gdi32.BitBlt(000011ac,00000000,00000000,00000048,00000061,000011ac,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00000314,00000441,00000258,00000047,00000060,000011b8,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=0000181f ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=0000181f ret=01004881 0009:Call gdi32.BitBlt(000011c4,00000000,0000003a,00000047,00000026,000011ac,00000000,0000003a,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000011c4,00000018,00000000,0000002f,0000003a,000011ac,00000018,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000011ac,0000002f,00000026,00000019,0000003b,000011ac,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(000011ac,00000000,00000000,00000047,00000026,00000314,00000412,00000232,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000011ac,00000000,00000026,0000002f,0000003a,00000314,00000412,00000258,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000412,00000232,00000047,00000060,000011b8,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000441,00000292,00000047,00000026,000011c4,00000000,0000003a,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000459,00000258,0000002f,0000003a,000011c4,00000018,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00001827 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00001827 ret=01004881 0009:Call gdi32.BitBlt(000011c4,00000000,00000033,00000047,0000002d,000011ac,00000000,00000033,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000011c4,00000012,00000000,00000035,00000033,000011ac,00000012,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000011ac,00000035,0000002d,00000013,00000034,000011ac,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(000011ac,00000000,00000000,00000047,0000002d,00000314,000003dd,00000205,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000011ac,00000000,0000002d,00000035,00000033,00000314,000003dd,00000232,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000003dd,00000205,00000047,00000060,000011b8,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000412,00000265,00000047,0000002d,000011c4,00000000,00000033,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000424,00000232,00000035,00000033,000011c4,00000012,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=0000182f ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=0000182f ret=01004881 0009:Call gdi32.BitBlt(000011c4,00000000,00000034,00000047,0000002c,000011ac,00000000,00000034,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000011c4,00000011,00000000,00000036,00000034,000011ac,00000011,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000011ac,00000036,0000002c,00000012,00000035,000011ac,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(000011ac,00000000,00000000,00000047,0000002c,00000314,000003a7,000001d9,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000011ac,00000000,0000002c,00000036,00000034,00000314,000003a7,00000205,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000003a7,000001d9,00000047,00000060,000011b8,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000003dd,00000239,00000047,0000002c,000011c4,00000000,00000034,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,000003ee,00000205,00000036,00000034,000011c4,00000011,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00001837 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00001837 ret=01004881 0009:Call gdi32.BitBlt(000011c4,00000000,00000033,00000047,0000002d,000011ac,00000000,00000033,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000011c4,00000011,00000000,00000036,00000033,000011ac,00000011,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000011ac,00000036,0000002d,00000012,00000034,000011ac,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(000011ac,00000000,00000000,00000047,0000002d,00000314,00000371,000001ac,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000011ac,00000000,0000002d,00000036,00000033,00000314,00000371,000001d9,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000371,000001ac,00000047,00000060,000011b8,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000003a7,0000020c,00000047,0000002d,000011c4,00000000,00000033,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,000003b8,000001d9,00000036,00000033,000011c4,00000011,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=0000183f ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=0000183f ret=01004881 0009:Call gdi32.BitBlt(000011c4,00000000,00000034,00000047,0000002c,000011ac,00000000,00000034,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000011c4,00000011,00000000,00000036,00000034,000011ac,00000011,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000011ac,00000036,0000002c,00000012,00000035,000011ac,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(000011ac,00000000,00000000,00000047,0000002c,00000314,0000033b,00000180,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000011ac,00000000,0000002c,00000036,00000034,00000314,0000033b,000001ac,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,0000033b,00000180,00000047,00000060,000011b8,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000371,000001e0,00000047,0000002c,000011c4,00000000,00000034,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000382,000001ac,00000036,00000034,000011c4,00000011,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00001847 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00001847 ret=01004881 0009:Call gdi32.BitBlt(000011c4,00000000,00000034,00000047,0000002c,000011ac,00000000,00000034,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000011c4,00000012,00000000,00000035,00000034,000011ac,00000012,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000011ac,00000035,0000002c,00000013,00000035,000011ac,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(000011ac,00000000,00000000,00000047,0000002c,00000314,00000306,00000154,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000011ac,00000000,0000002c,00000035,00000034,00000314,00000306,00000180,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000306,00000154,00000047,00000060,000011b8,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,0000033b,000001b4,00000047,0000002c,000011c4,00000000,00000034,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000034d,00000180,00000035,00000034,000011c4,00000012,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=0000184f ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=0000184f ret=01004881 0009:Call gdi32.BitBlt(000011c4,00000000,00000033,00000047,0000002d,000011ac,00000000,00000033,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000011c4,00000011,00000000,00000036,00000033,000011ac,00000011,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000011ac,00000036,0000002d,00000012,00000034,000011ac,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(000011ac,00000000,00000000,00000047,0000002d,00000314,000002d0,00000127,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000011ac,00000000,0000002d,00000036,00000033,00000314,000002d0,00000154,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000002d0,00000127,00000047,00000060,000011b8,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000306,00000187,00000047,0000002d,000011c4,00000000,00000033,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000317,00000154,00000036,00000033,000011c4,00000011,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00001857 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00001857 ret=01004881 0009:Call gdi32.BitBlt(000011c4,00000000,00000034,00000047,0000002c,000011ac,00000000,00000034,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000011c4,00000011,00000000,00000036,00000034,000011ac,00000011,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000011ac,00000036,0000002c,00000012,00000035,000011ac,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(000011ac,00000000,00000000,00000047,0000002c,00000314,0000029a,000000fb,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000011ac,00000000,0000002c,00000036,00000034,00000314,0000029a,00000127,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,0000029a,000000fb,00000047,00000060,000011b8,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000002d0,0000015b,00000047,0000002c,000011c4,00000000,00000034,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,000002e1,00000127,00000036,00000034,000011c4,00000011,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=0000185f ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=0000185f ret=01004881 0009:Call gdi32.BitBlt(000011c4,00000000,00000033,00000047,0000002d,000011ac,00000000,00000033,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000011c4,00000011,00000000,00000036,00000033,000011ac,00000011,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000011ac,00000036,0000002d,00000012,00000034,000011ac,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(000011ac,00000000,00000000,00000047,0000002d,00000314,00000264,000000ce,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000011ac,00000000,0000002d,00000036,00000033,00000314,00000264,000000fb,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000264,000000ce,00000047,00000060,000011b8,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,0000029a,0000012e,00000047,0000002d,000011c4,00000000,00000033,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,000002ab,000000fb,00000036,00000033,000011c4,00000011,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00001867 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00001867 ret=01004881 0009:Call gdi32.BitBlt(000011c4,00000000,00000034,00000047,0000002c,000011ac,00000000,00000034,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000011c4,00000012,00000000,00000035,00000034,000011ac,00000012,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000011ac,00000035,0000002c,00000013,00000035,000011ac,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(000011ac,00000000,00000000,00000047,0000002c,00000314,0000022f,000000a2,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000011ac,00000000,0000002c,00000035,00000034,00000314,0000022f,000000ce,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,0000022f,000000a2,00000047,00000060,000011b8,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000264,00000102,00000047,0000002c,000011c4,00000000,00000034,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000276,000000ce,00000035,00000034,000011c4,00000012,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=0000186f ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=0000186f ret=01004881 0009:Call gdi32.BitBlt(000011c4,00000000,00000034,00000047,0000002c,000011ac,00000000,00000034,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000011c4,00000011,00000000,00000036,00000034,000011ac,00000011,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000011ac,00000036,0000002c,00000012,00000035,000011ac,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(000011ac,00000000,00000000,00000047,0000002c,00000314,000001f9,00000076,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000011ac,00000000,0000002c,00000036,00000034,00000314,000001f9,000000a2,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000001f9,00000076,00000047,00000060,000011b8,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,0000022f,000000d6,00000047,0000002c,000011c4,00000000,00000034,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000240,000000a2,00000036,00000034,000011c4,00000011,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00001877 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00001877 ret=01004881 0009:Call gdi32.BitBlt(000011c4,00000000,00000033,00000047,0000002d,000011ac,00000000,00000033,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000011c4,00000011,00000000,00000036,00000033,000011ac,00000011,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000011ac,00000036,0000002d,00000012,00000034,000011ac,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(000011ac,00000000,00000000,00000047,0000002d,00000314,000001c3,00000049,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000011ac,00000000,0000002d,00000036,00000033,00000314,000001c3,00000076,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000001c3,00000049,00000047,00000060,000011b8,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000001f9,000000a9,00000047,0000002d,000011c4,00000000,00000033,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000020a,00000076,00000036,00000033,000011c4,00000011,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=0000187f ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=0000187f ret=01004881 0009:Call gdi32.BitBlt(000011c4,00000000,00000044,00000047,0000001c,000011ac,00000000,00000044,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000011c4,00000025,00000000,00000022,00000044,000011ac,00000025,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000011ac,00000022,0000001c,00000026,00000045,000011ac,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(000011ac,00000000,00000000,00000047,0000001c,00000314,000001a1,0000002d,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000011ac,00000000,0000001c,00000022,00000044,00000314,000001a1,00000049,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000001a1,0000002d,00000047,00000060,000011b8,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000001c3,0000008d,00000047,0000001c,000011c4,00000000,00000044,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,000001e8,00000049,00000022,00000044,000011c4,00000025,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call gdi32.SelectObject(000011ac,0000006c) ret=01005316 0009:Ret gdi32.SelectObject() retval=000011d0 ret=01005316 0009:Call gdi32.SelectObject(000011b8,0000006c) ret=01005324 0009:Ret gdi32.SelectObject() retval=000011d4 ret=01005324 0009:Call gdi32.SelectObject(000011c4,0000006c) ret=01005332 0009:Ret gdi32.SelectObject() retval=000011d8 ret=01005332 0009:Call gdi32.DeleteObject(000011d0) ret=01005340 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005340 0009:Call gdi32.DeleteObject(000011d4) ret=01005348 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005348 0009:Call gdi32.DeleteObject(000011d8) ret=01005350 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005350 0009:Call gdi32.DeleteDC(000011ac) ret=0100535e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100535e 0009:Call gdi32.DeleteDC(000011b8) ret=01005366 0009:Ret gdi32.DeleteDC() retval=00000001 ret=01005366 0009:Call gdi32.DeleteDC(000011c4) ret=0100536e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100536e 0009:Call user32.ReleaseDC(00010030,00000314) ret=0100537c 0009:Ret user32.ReleaseDC() retval=00000001 ret=0100537c 0009:Call user32.InvalidateRect(00010030,0033f62c,00000000) ret=0100538a 0009:Ret user32.InvalidateRect() retval=00000001 ret=0100538a 0009:Call KERNEL32.GetModuleHandleW(00000000) ret=01005c37 0009:Ret KERNEL32.GetModuleHandleW() retval=01000000 ret=01005c37 0009:Call winmm.PlaySoundW(0000007c,01000000,00040007) ret=01005c40 0009:Call ntdll.RtlAllocateHeap(00110000,00000008,0000001c) ret=7e7356bc 0009:Ret ntdll.RtlAllocateHeap() retval=00148bb0 ret=7e7356bc 0009:Call KERNEL32.ResetEvent(00000040) ret=7e735513 0009:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e735513 0009:Call KERNEL32.SetEvent(00000038) ret=7e735520 0009:Ret KERNEL32.SetEvent() retval=00000001 ret=7e735520 0009:Call msacm32.drv.wodMessage(0000ffff,0000000c,0014bf20,00000000,00000000) ret=7e728e1f 0009:Call winmm.waveOutReset(00008001) ret=7e0c0180 0009:Call winealsa.drv.wodMessage(00000000,0000000c,7e72ab2b,00000000,00000000) ret=7e728e1f 0009:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1b2580 0009:Ret KERNEL32.CreateEventW() retval=00000070 ret=7e1b2580 0009:Call KERNEL32.WaitForSingleObject(00000070,ffffffff) ret=7e1b2635 001f:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bd,0014bf20,0014d3a0,00000000) ret=7e1c4643 001f:Call KERNEL32.IsBadReadPtr(0014bf20,0000002c) ret=7e0bdbc9 001f:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 001f:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bd,007ceaa4,0014d3a0,00000000) ret=7e0bdf33 001f:Call KERNEL32.SetEvent(00000068) ret=7e7341f6 001f:Ret KERNEL32.SetEvent() retval=00000001 ret=7e7341f6 001f:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 001f:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 001f:Call KERNEL32.SetEvent(00000070) ret=7e1c4f3d 001f:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c4f3d 001e:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e73429b 001e:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 001e:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 001e:Call msacm32.drv.wodMessage(0000ffff,0000000c,0014bf20,00000000,00000000) ret=7e728e1f 001e:Call winmm.waveOutReset(00008001) ret=7e0c0180 001e:Call winealsa.drv.wodMessage(00000000,0000000c,7e72ab2b,00000000,00000000) ret=7e728e1f 001e:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1b2580 001e:Ret KERNEL32.CreateEventW() retval=00000080 ret=7e1b2580 001e:Call KERNEL32.WaitForSingleObject(00000080,ffffffff) ret=7e1b2635 001f:Call KERNEL32.SetEvent(00000080) ret=7e1c4f3d 001f:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c4f3d 001e:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1b2635 001e:Call KERNEL32.CloseHandle(00000080) ret=7e1b2640 001e:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1b2640 001e:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 001e:Ret winmm.waveOutReset() retval=00000000 ret=7e0c0180 001e:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 001e:Call msacm32.drv.wodMessage(0000ffff,00000008,0014bf20,0014d3a0,00000020) ret=7e728e1f 001e:Call winmm.waveOutUnprepareHeader(00008001,0014d3a0,00000020) ret=7e0c00b6 001e:Call winealsa.drv.wodMessage(00000000,00000008,7e72ab2b,0014d3a0,00000020) ret=7e728e1f 001e:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 001e:Ret winmm.waveOutUnprepareHeader() retval=00000000 ret=7e0c00b6 001e:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 001e:Call msacm32.drv.wodMessage(0000ffff,00000008,0014bf20,0014d3c0,00000020) ret=7e728e1f 001e:Call winmm.waveOutUnprepareHeader(00008001,0014d3c0,00000020) ret=7e0c00b6 001e:Call winealsa.drv.wodMessage(00000000,00000008,7e72ab2b,0014d3c0,00000020) ret=7e728e1f 001e:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 001e:Ret winmm.waveOutUnprepareHeader() retval=00000000 ret=7e0c00b6 001e:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 001e:Call KERNEL32.CloseHandle(00000068) ret=7e7349fd 001e:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e7349fd 001e:Call ntdll.RtlFreeHeap(00110000,00000000,0014d3a0) ret=7e734a23 001e:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e734a23 001e:Call ntdll.RtlFreeHeap(00110000,00000000,00148cb8) ret=7e734a49 001e:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e734a49 001e:Call msacm32.drv.wodMessage(0000ffff,00000006,0014bf20,00000000,00000000) ret=7e728e1f 001e:Call winmm.waveOutClose(00008001) ret=7e0c01a5 001e:Call winealsa.drv.wodMessage(00000000,00000006,7e72ab2b,00000000,00000000) ret=7e728e1f 001e:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1b2580 001e:Ret KERNEL32.CreateEventW() retval=00000068 ret=7e1b2580 001e:Call KERNEL32.WaitForSingleObject(00000068,ffffffff) ret=7e1b2635 001f:Call KERNEL32.SetEvent(00000068) ret=7e1c4ea1 001f:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c4ea1 001f:Call KERNEL32.ExitThread(00000000) ret=7e1c4eb0 001f:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) 001f:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 001f:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) 001f:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) retval=1 001f:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) 001f:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 001f:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) 001f:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) retval=1 001f:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) 001f:Call KERNEL32.TlsGetValue(00000000) ret=7e3f4071 001f:Ret KERNEL32.TlsGetValue() retval=00000000 ret=7e3f4071 001f:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 001f:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) 001f:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 001e:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1b2635 001e:Call KERNEL32.CloseHandle(00000068) ret=7e1b2640 001e:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1b2640 001e:Call ntdll.RtlFreeHeap(00110000,00000000,0014c7d0) ret=7e1b24dc 001e:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e1b24dc 001e:Call ntdll.RtlDeleteCriticalSection(0013cefc) ret=7e1b24fb 001e:Ret ntdll.RtlDeleteCriticalSection() retval=00000000 ret=7e1b24fb 001e:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bc,0014bf20,00000000,00000000) ret=7e1c4643 001e:Call KERNEL32.IsBadReadPtr(0014bf20,0000002c) ret=7e0bdbc9 001e:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 001e:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bc,007ceaa4,00000000,00000000) ret=7e0bdf33 001e:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 001e:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 001e:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 001e:Call ntdll.RtlFreeHeap(00110000,00000000,0014bf58) ret=7e72ae0b 001e:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e72ae0b 001e:Ret winmm.waveOutClose() retval=00000000 ret=7e0c01a5 001e:Call ntdll.RtlFreeHeap(00110000,00000000,0014bf20) ret=7e0c01f7 001e:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e0c01f7 001e:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 001e:Call ntdll.RtlFreeHeap(00110000,00000000,0014bef8) ret=7e72ae0b 001e:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e72ae0b 0009:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1b2635 0009:Call KERNEL32.CloseHandle(00000070) ret=7e1b2640 0009:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1b2640 0009:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0009:Ret winmm.waveOutReset() retval=00000000 ret=7e0c0180 0009:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0009:Call KERNEL32.WaitForSingleObject(00000040,ffffffff) ret=7e73555a 001e:Call ntdll.RtlFreeHeap(00110000,00000000,00148c28) ret=7e731f79 001e:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e731f79 001e:Call KERNEL32.SetEvent(00000040) ret=7e7343a0 0009:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e73555a 001e:Ret KERNEL32.SetEvent() retval=00000001 ret=7e7343a0 001e:Call KERNEL32.CloseHandle(00000064) ret=7e734340 0009:Call KERNEL32.ResetEvent(00000038) ret=7e735572 0009:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e735572 0009:Call KERNEL32.CreateThread(00000000,00000000,7e7348a0,00148bb0,00000000,0033f5a8) ret=7e73560c 001e:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e734340 001e:Call ntdll.RtlFreeHeap(00110000,00000000,0014bf80) ret=7e734360 001e:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e734360 001e:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) 001e:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 001e:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) 001e:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) retval=1 001e:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) 001e:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 001e:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) 001e:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) retval=1 001e:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) 001e:Call KERNEL32.TlsGetValue(00000000) ret=7e3f4071 001e:Ret KERNEL32.TlsGetValue() retval=00000000 ret=7e3f4071 001e:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 001e:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) 001e:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0020:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) 0020:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0020:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) 0020:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0020:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) 0020:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) retval=1 0020:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) 0020:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0020:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) 0020:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0020:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) 0020:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0020:Starting thread proc 0x7e7348a0 (arg=0x148bb0) 0020:Call KERNEL32.FindResourceW(01000000,0000007c,7e741bde L"WAVE") ret=7e734ca3 0020:Ret KERNEL32.FindResourceW() retval=01014c40 ret=7e734ca3 0020:Call KERNEL32.LoadResource(01000000,01014c40) ret=7e734cb9 0020:Ret KERNEL32.LoadResource() retval=0104d668 ret=7e734cb9 0020:Call KERNEL32.LockResource(0104d668) ret=7e734cce 0020:Ret KERNEL32.LockResource() retval=0104d668 ret=7e734cce 0020:Call KERNEL32.FreeResource(0104d668) ret=7e734ce9 0020:Ret KERNEL32.FreeResource() retval=00000000 ret=7e734ce9 0020:Call ntdll.RtlAllocateHeap(00110000,00000008,0000005c) ret=7e733960 0020:Ret ntdll.RtlAllocateHeap() retval=00148c28 ret=7e733960 0020:Call KERNEL32.GetFileSize(ffffffff,00000000) ret=7e733ab9 0020:Ret KERNEL32.GetFileSize() retval=ffffffff ret=7e733ab9 0020:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7e733cf0 0020:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e733cf0 0020:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7e734e1c 0020:Ret ntdll.RtlAllocateHeap() retval=00148cb8 ret=7e734e1c 0020:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e734f1f 0020:Ret KERNEL32.CreateEventW() retval=00000068 ret=7e734f1f 0020:Call ntdll.RtlAllocateHeap(00110000,00000008,0000001c) ret=7e72abbe 0020:Ret ntdll.RtlAllocateHeap() retval=0014bef8 ret=7e72abbe 0020:Call msacm32.drv.wodMessage(0000ffff,00000005,008ce918,008ce970,00030000) ret=7e728e1f 0020:Call ntdll.RtlAllocateHeap(00110000,00000000,0000002c) ret=7e0bfd8c 0020:Ret ntdll.RtlAllocateHeap() retval=0014bf20 ret=7e0bfd8c 0020:Call winmm.waveOutGetNumDevs() ret=7e0bfdb5 0020:Ret winmm.waveOutGetNumDevs() retval=00000002 ret=7e0bfdb5 0020:Call winmm.waveOutOpen(0014bf28,00000000,00148cb8,7e0bde60,0014bf20,00030008) ret=7e0c0313 0020:Call ntdll.RtlAllocateHeap(00110000,00000008,0000001c) ret=7e72abbe 0020:Ret ntdll.RtlAllocateHeap() retval=0014bf58 ret=7e72abbe 0020:Call winealsa.drv.wodMessage(00000000,00000005,008ce5b8,008ce610,00030008) ret=7e728e1f 0020:Call ntdll.RtlAllocateHeap(00110000,00000008,00000068) ret=7e1c6c82 0020:Ret ntdll.RtlAllocateHeap() retval=00148b18 ret=7e1c6c82 0020:Call ntdll.RtlAllocateHeap(00110000,00000008,00000300) ret=7e1b2459 0020:Ret ntdll.RtlAllocateHeap() retval=0014c7d0 ret=7e1b2459 0020:Call KERNEL32.InitializeCriticalSection(0013cefc) ret=7e1b2469 0020:Ret KERNEL32.InitializeCriticalSection() retval=00000001 ret=7e1b2469 0020:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1c73ab 0020:Ret KERNEL32.CreateEventW() retval=00000070 ret=7e1c73ab 0020:Call KERNEL32.CreateThread(00000000,00000000,7e1c5570,00000000,00000000,0013cedc) ret=7e1c73ef 0009:Ret KERNEL32.CreateThread() retval=00000064 ret=7e73560c 0009:Call KERNEL32.SetThreadPriority(00000064,0000000f) ret=7e73562d 0009:Ret KERNEL32.SetThreadPriority() retval=00000001 ret=7e73562d 0009:Ret winmm.PlaySoundW() retval=00000001 ret=01005c40 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,0000000c) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c5730 ret=0100a7d2 0009:Call user32.GetClientRect(00010030,0033f61c) ret=01005145 0009:Ret user32.GetClientRect() retval=00000001 ret=01005145 0009:Call user32.GetDC(00010030) ret=010051ad 0009:Ret user32.GetDC() retval=00000314 ret=010051ad 0009:Call gdi32.CreateCompatibleDC(00000314) ret=010051bc 0009:Ret gdi32.CreateCompatibleDC() retval=00001238 ret=010051bc 0009:Call gdi32.CreateCompatibleDC(00000314) ret=010051ca 0009:Ret gdi32.CreateCompatibleDC() retval=00001244 ret=010051ca 0009:Call gdi32.CreateCompatibleDC(00000314) ret=010051d8 0009:Ret gdi32.CreateCompatibleDC() retval=00001250 ret=010051d8 0009:Call gdi32.CreateCompatibleBitmap(00000314,00000047,00000060) ret=010051f8 0009:Ret gdi32.CreateCompatibleBitmap() retval=0000125c ret=010051f8 0009:Call gdi32.CreateCompatibleBitmap(00000314,00000047,00000060) ret=01005212 0009:Ret gdi32.CreateCompatibleBitmap() retval=00001260 ret=01005212 0009:Call gdi32.CreateCompatibleBitmap(00000314,00000047,00000060) ret=0100522c 0009:Ret gdi32.CreateCompatibleBitmap() retval=00001264 ret=0100522c 0009:Call gdi32.SelectObject(00001238,0000125c) ret=01005246 0009:Ret gdi32.SelectObject() retval=0000006c ret=01005246 0009:Call gdi32.SelectObject(00001244,00001260) ret=0100525a 0009:Ret gdi32.SelectObject() retval=0000006c ret=0100525a 0009:Call gdi32.SelectObject(00001250,00001264) ret=0100526e 0009:Ret gdi32.SelectObject() retval=0000006c ret=0100526e 0009:Call user32.LoadBitmapW(01000000,0033f5b4 L"CARD41") ret=010028ff 0021:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) 0021:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0021:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) 0021:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0021:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) 0021:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) retval=1 0021:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) 0021:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0021:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) 0021:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0021:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) 0021:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0021:Starting thread proc 0x7e1c5570 (arg=(nil)) 0021:Call KERNEL32.SetEvent(00000070) ret=7e1c55aa 0021:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c55aa 0020:Ret KERNEL32.CreateThread() retval=00000080 ret=7e1c73ef 0020:Call KERNEL32.SetThreadPriority(00000080,0000000f) ret=7e1c7413 0020:Ret KERNEL32.SetThreadPriority() retval=00000001 ret=7e1c7413 0020:Call KERNEL32.WaitForSingleObject(00000070,ffffffff) ret=7e1c742f 0020:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1c742f 0020:Call KERNEL32.CloseHandle(00000070) ret=7e1c7443 0020:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1c7443 0020:Call ntdll.RtlFreeHeap(00110000,00000000,00148b18) ret=7e1c7479 0020:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e1c7479 0020:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bb,0014bf20,00000000,00000000) ret=7e1c4643 0020:Call KERNEL32.IsBadReadPtr(0014bf20,0000002c) ret=7e0bdbc9 0020:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 0020:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bb,008ceaa4,00000000,00000000) ret=7e0bdf33 0020:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 0020:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 0020:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0020:Ret winmm.waveOutOpen() retval=00000000 ret=7e0c0313 0020:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0020:Call ntdll.RtlAllocateHeap(00110000,00000000,000039ac) ret=7e73520d 0020:Ret ntdll.RtlAllocateHeap() retval=0014d3a0 ret=7e73520d 0020:Call msacm32.drv.wodMessage(0000ffff,00000007,0014bf20,0014d3a0,00000020) ret=7e728e1f 0020:Call winmm.waveOutPrepareHeader(00008001,0014d3a0,00000020) ret=7e0c09d8 0020:Call winealsa.drv.wodMessage(00000000,00000007,7e72ab2b,0014d3a0,00000020) ret=7e728e1f 0020:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 0020:Ret winmm.waveOutPrepareHeader() retval=00000000 ret=7e0c09d8 0020:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0020:Call msacm32.drv.wodMessage(0000ffff,00000007,0014bf20,0014d3c0,00000020) ret=7e728e1f 0020:Call winmm.waveOutPrepareHeader(00008001,0014d3c0,00000020) ret=7e0c09d8 0020:Call winealsa.drv.wodMessage(00000000,00000007,7e72ab2b,0014d3c0,00000020) ret=7e728e1f 0020:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 0020:Ret winmm.waveOutPrepareHeader() retval=00000000 ret=7e0c09d8 0020:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0020:Call KERNEL32.WaitForSingleObject(00000038,00000000) ret=7e735343 0020:Ret KERNEL32.WaitForSingleObject() retval=00000102 ret=7e735343 0020:Call msacm32.drv.wodMessage(0000ffff,00000009,0014bf20,0014d3a0,00000020) ret=7e728e1f 0020:Call winmm.waveOutWrite(00008001,0014d3a0,00000020) ret=7e0c09b5 0020:Call winealsa.drv.wodMessage(00000000,00000009,7e72ab2b,0014d3a0,00000020) ret=7e728e1f 0020:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0020:Ret winmm.waveOutWrite() retval=00000000 ret=7e0c09b5 0020:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0020:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 0020:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 0020:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 0020:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 0020:Call KERNEL32.WaitForSingleObject(00000068,ffffffff) ret=7e73429b 0009:Ret user32.LoadBitmapW() retval=00001274 ret=010028ff 0009:Call gdi32.CreateCompatibleDC(00001244) ret=01002909 0009:Ret gdi32.CreateCompatibleDC() retval=00001288 ret=01002909 0009:Call gdi32.SelectObject(00001288,00001274) ret=01002917 0009:Ret gdi32.SelectObject() retval=0000006c ret=01002917 0009:Call gdi32.BitBlt(00001244,00000000,00000000,00000047,00000060,00001288,00000000,00000000,00cc0020) ret=01002938 0009:Ret gdi32.BitBlt() retval=00000001 ret=01002938 0009:Call gdi32.SelectObject(00001288,0000006c) ret=0100293e 0009:Ret gdi32.SelectObject() retval=00001274 ret=0100293e 0009:Call gdi32.DeleteObject(00001274) ret=01002947 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01002947 0009:Call gdi32.DeleteDC(00001288) ret=0100294e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100294e 0009:Call gdi32.SetPixel(00001244,00000000,00000000,00008000) ret=01002969 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002969 0009:Call gdi32.SetPixel(00001244,00000001,00000000,00008000) ret=01002976 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002976 0009:Call gdi32.SetPixel(00001244,00000000,00000001,00008000) ret=01002982 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002982 0009:Call gdi32.SetPixel(00001244,00000046,00000000,00008000) ret=0100298f 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100298f 0009:Call gdi32.SetPixel(00001244,00000045,00000000,00008000) ret=0100299c 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100299c 0009:Call gdi32.SetPixel(00001244,00000046,00000001,00008000) ret=010029ab 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ab 0009:Call gdi32.SetPixel(00001244,00000000,0000005f,00008000) ret=010029bf 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029bf 0009:Call gdi32.SetPixel(00001244,00000001,0000005f,00008000) ret=010029d0 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029d0 0009:Call gdi32.SetPixel(00001244,00000000,0000005e,00008000) ret=010029de 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029de 0009:Call gdi32.SetPixel(00001244,00000046,0000005f,00008000) ret=010029ef 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ef 0009:Call gdi32.SetPixel(00001244,00000045,0000005f,00008000) ret=01002a00 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a00 0009:Call gdi32.SetPixel(00001244,00000046,0000005e,00008000) ret=01002a11 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a11 0009:Call user32.LoadBitmapW(01000000,010012c8 L"CARDBACK") ret=010028ff 0009:Ret user32.LoadBitmapW() retval=000012a0 ret=010028ff 0009:Call gdi32.CreateCompatibleDC(00001238) ret=01002909 0009:Ret gdi32.CreateCompatibleDC() retval=000012b4 ret=01002909 0009:Call gdi32.SelectObject(000012b4,000012a0) ret=01002917 0009:Ret gdi32.SelectObject() retval=0000006c ret=01002917 0009:Call gdi32.BitBlt(00001238,00000000,00000000,00000047,00000060,000012b4,00000000,00000000,00cc0020) ret=01002938 0009:Ret gdi32.BitBlt() retval=00000001 ret=01002938 0009:Call gdi32.SelectObject(000012b4,0000006c) ret=0100293e 0009:Ret gdi32.SelectObject() retval=000012a0 ret=0100293e 0009:Call gdi32.DeleteObject(000012a0) ret=01002947 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01002947 0009:Call gdi32.DeleteDC(000012b4) ret=0100294e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100294e 0009:Call gdi32.SetPixel(00001238,00000000,00000000,00008000) ret=01002969 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002969 0009:Call gdi32.SetPixel(00001238,00000001,00000000,00008000) ret=01002976 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002976 0009:Call gdi32.SetPixel(00001238,00000000,00000001,00008000) ret=01002982 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002982 0009:Call gdi32.SetPixel(00001238,00000046,00000000,00008000) ret=0100298f 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100298f 0009:Call gdi32.SetPixel(00001238,00000045,00000000,00008000) ret=0100299c 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100299c 0009:Call gdi32.SetPixel(00001238,00000046,00000001,00008000) ret=010029ab 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ab 0009:Call gdi32.SetPixel(00001238,00000000,0000005f,00008000) ret=010029bf 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029bf 0009:Call gdi32.SetPixel(00001238,00000001,0000005f,00008000) ret=010029d0 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029d0 0009:Call gdi32.SetPixel(00001238,00000000,0000005e,00008000) ret=010029de 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029de 0009:Call gdi32.SetPixel(00001238,00000046,0000005f,00008000) ret=010029ef 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ef 0009:Call gdi32.SetPixel(00001238,00000045,0000005f,00008000) ret=01002a00 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a00 0009:Call gdi32.SetPixel(00001238,00000046,0000005e,00008000) ret=01002a11 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a11 0009:Call winmm.timeGetTime() ret=010047d1 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000018a2 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000018a2 ret=010047d1 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000018a2 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000018a2 ret=01004881 0009:Call gdi32.BitBlt(00001238,00000000,00000000,00000048,00000061,00001238,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00000314,00000441,00000258,00000047,00000060,00001244,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000018a7 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000018a7 ret=01004881 0009:Call gdi32.BitBlt(00001250,00000000,00000044,00000047,0000001c,00001238,00000000,00000044,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001250,0000002c,00000000,0000001b,00000044,00001238,0000002c,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001238,0000001b,0000001c,0000002d,00000045,00001238,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001238,00000000,00000000,00000047,0000001c,00000314,00000426,0000023c,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001238,00000000,0000001c,0000001b,00000044,00000314,00000426,00000258,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000426,0000023c,00000047,00000060,00001244,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000441,0000029c,00000047,0000001c,00001250,00000000,00000044,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000046d,00000258,0000001b,00000044,00001250,0000002c,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000018af ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000018af ret=01004881 0009:Call gdi32.BitBlt(00001250,00000000,00000033,00000047,0000002d,00001238,00000000,00000033,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001250,0000001b,00000000,0000002c,00000033,00001238,0000001b,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001238,0000002c,0000002d,0000001c,00000034,00001238,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001238,00000000,00000000,00000047,0000002d,00000314,000003fa,0000020f,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001238,00000000,0000002d,0000002c,00000033,00000314,000003fa,0000023c,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000003fa,0000020f,00000047,00000060,00001244,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000426,0000026f,00000047,0000002d,00001250,00000000,00000033,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000441,0000023c,0000002c,00000033,00001250,0000001b,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000018b7 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000018b7 ret=01004881 0009:Call gdi32.BitBlt(00001250,00000000,00000033,00000047,0000002d,00001238,00000000,00000033,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001250,0000001b,00000000,0000002c,00000033,00001238,0000001b,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001238,0000002c,0000002d,0000001c,00000034,00001238,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001238,00000000,00000000,00000047,0000002d,00000314,000003ce,000001e2,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001238,00000000,0000002d,0000002c,00000033,00000314,000003ce,0000020f,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000003ce,000001e2,00000047,00000060,00001244,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000003fa,00000242,00000047,0000002d,00001250,00000000,00000033,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000415,0000020f,0000002c,00000033,00001250,0000001b,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000018bf ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000018bf ret=01004881 0009:Call gdi32.BitBlt(00001250,00000000,00000034,00000047,0000002c,00001238,00000000,00000034,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001250,0000001b,00000000,0000002c,00000034,00001238,0000001b,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001238,0000002c,0000002c,0000001c,00000035,00001238,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001238,00000000,00000000,00000047,0000002c,00000314,000003a2,000001b6,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001238,00000000,0000002c,0000002c,00000034,00000314,000003a2,000001e2,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000003a2,000001b6,00000047,00000060,00001244,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000003ce,00000216,00000047,0000002c,00001250,00000000,00000034,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,000003e9,000001e2,0000002c,00000034,00001250,0000001b,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000018c7 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000018c7 ret=01004881 0009:Call gdi32.BitBlt(00001250,00000000,00000033,00000047,0000002d,00001238,00000000,00000033,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001250,0000001b,00000000,0000002c,00000033,00001238,0000001b,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001238,0000002c,0000002d,0000001c,00000034,00001238,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001238,00000000,00000000,00000047,0000002d,00000314,00000376,00000189,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001238,00000000,0000002d,0000002c,00000033,00000314,00000376,000001b6,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000376,00000189,00000047,00000060,00001244,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000003a2,000001e9,00000047,0000002d,00001250,00000000,00000033,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,000003bd,000001b6,0000002c,00000033,00001250,0000001b,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000018cf ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000018cf ret=01004881 0009:Call gdi32.BitBlt(00001250,00000000,00000033,00000047,0000002d,00001238,00000000,00000033,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001250,0000001b,00000000,0000002c,00000033,00001238,0000001b,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001238,0000002c,0000002d,0000001c,00000034,00001238,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001238,00000000,00000000,00000047,0000002d,00000314,0000034a,0000015c,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001238,00000000,0000002d,0000002c,00000033,00000314,0000034a,00000189,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,0000034a,0000015c,00000047,00000060,00001244,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000376,000001bc,00000047,0000002d,00001250,00000000,00000033,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000391,00000189,0000002c,00000033,00001250,0000001b,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000018d7 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000018d7 ret=01004881 0009:Call gdi32.BitBlt(00001250,00000000,00000033,00000047,0000002d,00001238,00000000,00000033,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001250,0000001b,00000000,0000002c,00000033,00001238,0000001b,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001238,0000002c,0000002d,0000001c,00000034,00001238,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001238,00000000,00000000,00000047,0000002d,00000314,0000031e,0000012f,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001238,00000000,0000002d,0000002c,00000033,00000314,0000031e,0000015c,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,0000031e,0000012f,00000047,00000060,00001244,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,0000034a,0000018f,00000047,0000002d,00001250,00000000,00000033,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000365,0000015c,0000002c,00000033,00001250,0000001b,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000018df ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000018df ret=01004881 0009:Call gdi32.BitBlt(00001250,00000000,00000033,00000047,0000002d,00001238,00000000,00000033,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001250,0000001b,00000000,0000002c,00000033,00001238,0000001b,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001238,0000002c,0000002d,0000001c,00000034,00001238,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001238,00000000,00000000,00000047,0000002d,00000314,000002f2,00000102,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001238,00000000,0000002d,0000002c,00000033,00000314,000002f2,0000012f,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000002f2,00000102,00000047,00000060,00001244,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,0000031e,00000162,00000047,0000002d,00001250,00000000,00000033,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000339,0000012f,0000002c,00000033,00001250,0000001b,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000018e7 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000018e7 ret=01004881 0009:Call gdi32.BitBlt(00001250,00000000,00000033,00000047,0000002d,00001238,00000000,00000033,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001250,0000001b,00000000,0000002c,00000033,00001238,0000001b,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001238,0000002c,0000002d,0000001c,00000034,00001238,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001238,00000000,00000000,00000047,0000002d,00000314,000002c6,000000d5,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001238,00000000,0000002d,0000002c,00000033,00000314,000002c6,00000102,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000002c6,000000d5,00000047,00000060,00001244,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000002f2,00000135,00000047,0000002d,00001250,00000000,00000033,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000030d,00000102,0000002c,00000033,00001250,0000001b,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000018ef ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000018ef ret=01004881 0009:Call gdi32.BitBlt(00001250,00000000,00000033,00000047,0000002d,00001238,00000000,00000033,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001250,0000001b,00000000,0000002c,00000033,00001238,0000001b,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001238,0000002c,0000002d,0000001c,00000034,00001238,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001238,00000000,00000000,00000047,0000002d,00000314,0000029a,000000a8,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001238,00000000,0000002d,0000002c,00000033,00000314,0000029a,000000d5,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,0000029a,000000a8,00000047,00000060,00001244,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000002c6,00000108,00000047,0000002d,00001250,00000000,00000033,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,000002e1,000000d5,0000002c,00000033,00001250,0000001b,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000018f7 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000018f7 ret=01004881 0009:Call gdi32.BitBlt(00001250,00000000,00000033,00000047,0000002d,00001238,00000000,00000033,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001250,0000001b,00000000,0000002c,00000033,00001238,0000001b,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001238,0000002c,0000002d,0000001c,00000034,00001238,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001238,00000000,00000000,00000047,0000002d,00000314,0000026e,0000007b,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001238,00000000,0000002d,0000002c,00000033,00000314,0000026e,000000a8,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,0000026e,0000007b,00000047,00000060,00001244,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,0000029a,000000db,00000047,0000002d,00001250,00000000,00000033,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,000002b5,000000a8,0000002c,00000033,00001250,0000001b,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000018ff ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000018ff ret=01004881 0009:Call gdi32.BitBlt(00001250,00000000,00000033,00000047,0000002d,00001238,00000000,00000033,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001250,0000001b,00000000,0000002c,00000033,00001238,0000001b,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001238,0000002c,0000002d,0000001c,00000034,00001238,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001238,00000000,00000000,00000047,0000002d,00000314,00000242,0000004e,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001238,00000000,0000002d,0000002c,00000033,00000314,00000242,0000007b,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000242,0000004e,00000047,00000060,00001244,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,0000026e,000000ae,00000047,0000002d,00001250,00000000,00000033,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000289,0000007b,0000002c,00000033,00001250,0000001b,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00001907 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00001907 ret=01004881 0009:Call gdi32.BitBlt(00001250,00000000,00000038,00000047,00000028,00001238,00000000,00000038,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001250,00000020,00000000,00000027,00000038,00001238,00000020,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001238,00000027,00000028,00000021,00000039,00001238,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001238,00000000,00000000,00000047,00000028,00000314,0000021b,00000026,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001238,00000000,00000028,00000027,00000038,00000314,0000021b,0000004e,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,0000021b,00000026,00000047,00000060,00001244,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000242,00000086,00000047,00000028,00001250,00000000,00000038,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000262,0000004e,00000027,00000038,00001250,00000020,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call gdi32.SelectObject(00001238,0000006c) ret=01005316 0009:Ret gdi32.SelectObject() retval=0000125c ret=01005316 0009:Call gdi32.SelectObject(00001244,0000006c) ret=01005324 0009:Ret gdi32.SelectObject() retval=00001260 ret=01005324 0009:Call gdi32.SelectObject(00001250,0000006c) ret=01005332 0009:Ret gdi32.SelectObject() retval=00001264 ret=01005332 0009:Call gdi32.DeleteObject(0000125c) ret=01005340 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005340 0009:Call gdi32.DeleteObject(00001260) ret=01005348 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005348 0009:Call gdi32.DeleteObject(00001264) ret=01005350 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005350 0009:Call gdi32.DeleteDC(00001238) ret=0100535e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100535e 0009:Call gdi32.DeleteDC(00001244) ret=01005366 0009:Ret gdi32.DeleteDC() retval=00000001 ret=01005366 0009:Call gdi32.DeleteDC(00001250) ret=0100536e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100536e 0009:Call user32.ReleaseDC(00010030,00000314) ret=0100537c 0009:Ret user32.ReleaseDC() retval=00000001 ret=0100537c 0009:Call user32.InvalidateRect(00010030,0033f62c,00000000) ret=0100538a 0009:Ret user32.InvalidateRect() retval=00000001 ret=0100538a 0009:Call KERNEL32.GetModuleHandleW(00000000) ret=01005c37 0009:Ret KERNEL32.GetModuleHandleW() retval=01000000 ret=01005c37 0009:Call winmm.PlaySoundW(0000007c,01000000,00040007) ret=01005c40 0009:Call ntdll.RtlAllocateHeap(00110000,00000008,0000001c) ret=7e7356bc 0009:Ret ntdll.RtlAllocateHeap() retval=0014bf80 ret=7e7356bc 0009:Call KERNEL32.ResetEvent(00000040) ret=7e735513 0009:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e735513 0009:Call KERNEL32.SetEvent(00000038) ret=7e735520 0009:Ret KERNEL32.SetEvent() retval=00000001 ret=7e735520 0009:Call msacm32.drv.wodMessage(0000ffff,0000000c,0014bf20,00000000,00000000) ret=7e728e1f 0009:Call winmm.waveOutReset(00008001) ret=7e0c0180 0009:Call winealsa.drv.wodMessage(00000000,0000000c,7e72ab2b,00000000,00000000) ret=7e728e1f 0009:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1b2580 0009:Ret KERNEL32.CreateEventW() retval=00000070 ret=7e1b2580 0009:Call KERNEL32.WaitForSingleObject(00000070,ffffffff) ret=7e1b2635 0021:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bd,0014bf20,0014d3a0,00000000) ret=7e1c4643 0021:Call KERNEL32.IsBadReadPtr(0014bf20,0000002c) ret=7e0bdbc9 0021:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 0021:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bd,008ceaa4,0014d3a0,00000000) ret=7e0bdf33 0021:Call KERNEL32.SetEvent(00000068) ret=7e7341f6 0021:Ret KERNEL32.SetEvent() retval=00000001 ret=7e7341f6 0021:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 0021:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 0021:Call KERNEL32.SetEvent(00000070) ret=7e1c4f3d 0021:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c4f3d 0020:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e73429b 0020:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 0020:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 0020:Call msacm32.drv.wodMessage(0000ffff,0000000c,0014bf20,00000000,00000000) ret=7e728e1f 0020:Call winmm.waveOutReset(00008001) ret=7e0c0180 0020:Call winealsa.drv.wodMessage(00000000,0000000c,7e72ab2b,00000000,00000000) ret=7e728e1f 0020:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1b2580 0020:Ret KERNEL32.CreateEventW() retval=00000084 ret=7e1b2580 0020:Call KERNEL32.WaitForSingleObject(00000084,ffffffff) ret=7e1b2635 0021:Call KERNEL32.SetEvent(00000084) ret=7e1c4f3d 0021:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c4f3d 0020:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1b2635 0020:Call KERNEL32.CloseHandle(00000084) ret=7e1b2640 0020:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1b2640 0020:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0020:Ret winmm.waveOutReset() retval=00000000 ret=7e0c0180 0020:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0020:Call msacm32.drv.wodMessage(0000ffff,00000008,0014bf20,0014d3a0,00000020) ret=7e728e1f 0020:Call winmm.waveOutUnprepareHeader(00008001,0014d3a0,00000020) ret=7e0c00b6 0020:Call winealsa.drv.wodMessage(00000000,00000008,7e72ab2b,0014d3a0,00000020) ret=7e728e1f 0020:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 0020:Ret winmm.waveOutUnprepareHeader() retval=00000000 ret=7e0c00b6 0020:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0020:Call msacm32.drv.wodMessage(0000ffff,00000008,0014bf20,0014d3c0,00000020) ret=7e728e1f 0020:Call winmm.waveOutUnprepareHeader(00008001,0014d3c0,00000020) ret=7e0c00b6 0020:Call winealsa.drv.wodMessage(00000000,00000008,7e72ab2b,0014d3c0,00000020) ret=7e728e1f 0020:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 0020:Ret winmm.waveOutUnprepareHeader() retval=00000000 ret=7e0c00b6 0020:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0020:Call KERNEL32.CloseHandle(00000068) ret=7e7349fd 0020:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e7349fd 0020:Call ntdll.RtlFreeHeap(00110000,00000000,0014d3a0) ret=7e734a23 0020:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e734a23 0020:Call ntdll.RtlFreeHeap(00110000,00000000,00148cb8) ret=7e734a49 0020:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e734a49 0020:Call msacm32.drv.wodMessage(0000ffff,00000006,0014bf20,00000000,00000000) ret=7e728e1f 0020:Call winmm.waveOutClose(00008001) ret=7e0c01a5 0020:Call winealsa.drv.wodMessage(00000000,00000006,7e72ab2b,00000000,00000000) ret=7e728e1f 0020:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1b2580 0020:Ret KERNEL32.CreateEventW() retval=00000068 ret=7e1b2580 0020:Call KERNEL32.WaitForSingleObject(00000068,ffffffff) ret=7e1b2635 0021:Call KERNEL32.SetEvent(00000068) ret=7e1c4ea1 0021:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c4ea1 0021:Call KERNEL32.ExitThread(00000000) ret=7e1c4eb0 0021:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) 0021:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0021:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) 0021:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0021:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) 0021:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0021:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) 0021:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) retval=1 0021:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) 0021:Call KERNEL32.TlsGetValue(00000000) ret=7e3f4071 0021:Ret KERNEL32.TlsGetValue() retval=00000000 ret=7e3f4071 0021:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0021:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) 0021:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0020:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1b2635 0020:Call KERNEL32.CloseHandle(00000068) ret=7e1b2640 0020:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1b2640 0020:Call ntdll.RtlFreeHeap(00110000,00000000,0014c7d0) ret=7e1b24dc 0020:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e1b24dc 0020:Call ntdll.RtlDeleteCriticalSection(0013cefc) ret=7e1b24fb 0020:Ret ntdll.RtlDeleteCriticalSection() retval=00000000 ret=7e1b24fb 0020:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bc,0014bf20,00000000,00000000) ret=7e1c4643 0020:Call KERNEL32.IsBadReadPtr(0014bf20,0000002c) ret=7e0bdbc9 0020:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 0020:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bc,008ceaa4,00000000,00000000) ret=7e0bdf33 0020:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 0020:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 0020:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0020:Call ntdll.RtlFreeHeap(00110000,00000000,0014bf58) ret=7e72ae0b 0020:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e72ae0b 0020:Ret winmm.waveOutClose() retval=00000000 ret=7e0c01a5 0020:Call ntdll.RtlFreeHeap(00110000,00000000,0014bf20) ret=7e0c01f7 0020:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e0c01f7 0020:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0020:Call ntdll.RtlFreeHeap(00110000,00000000,0014bef8) ret=7e72ae0b 0020:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e72ae0b 0009:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1b2635 0009:Call KERNEL32.CloseHandle(00000070) ret=7e1b2640 0009:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1b2640 0009:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0009:Ret winmm.waveOutReset() retval=00000000 ret=7e0c0180 0009:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0009:Call KERNEL32.WaitForSingleObject(00000040,ffffffff) ret=7e73555a 0020:Call ntdll.RtlFreeHeap(00110000,00000000,00148c28) ret=7e731f79 0020:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e731f79 0020:Call KERNEL32.SetEvent(00000040) ret=7e7343a0 0009:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e73555a 0020:Ret KERNEL32.SetEvent() retval=00000001 ret=7e7343a0 0020:Call KERNEL32.CloseHandle(00000064) ret=7e734340 0009:Call KERNEL32.ResetEvent(00000038) ret=7e735572 0009:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e735572 0009:Call KERNEL32.CreateThread(00000000,00000000,7e7348a0,0014bf80,00000000,0033f5a8) ret=7e73560c 0020:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e734340 0020:Call ntdll.RtlFreeHeap(00110000,00000000,00148bb0) ret=7e734360 0020:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e734360 0020:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) 0020:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0020:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) 0020:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0020:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) 0020:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0020:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) 0020:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) retval=1 0020:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) 0020:Call KERNEL32.TlsGetValue(00000000) ret=7e3f4071 0020:Ret KERNEL32.TlsGetValue() retval=00000000 ret=7e3f4071 0020:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0020:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) 0020:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0022:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) 0022:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0022:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) 0022:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0022:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) 0022:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) retval=1 0022:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) 0022:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0022:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) 0022:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0022:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) 0022:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0022:Starting thread proc 0x7e7348a0 (arg=0x14bf80) 0022:Call KERNEL32.FindResourceW(01000000,0000007c,7e741bde L"WAVE") ret=7e734ca3 0022:Ret KERNEL32.FindResourceW() retval=01014c40 ret=7e734ca3 0022:Call KERNEL32.LoadResource(01000000,01014c40) ret=7e734cb9 0022:Ret KERNEL32.LoadResource() retval=0104d668 ret=7e734cb9 0022:Call KERNEL32.LockResource(0104d668) ret=7e734cce 0022:Ret KERNEL32.LockResource() retval=0104d668 ret=7e734cce 0022:Call KERNEL32.FreeResource(0104d668) ret=7e734ce9 0022:Ret KERNEL32.FreeResource() retval=00000000 ret=7e734ce9 0022:Call ntdll.RtlAllocateHeap(00110000,00000008,0000005c) ret=7e733960 0022:Ret ntdll.RtlAllocateHeap() retval=00148c28 ret=7e733960 0022:Call KERNEL32.GetFileSize(ffffffff,00000000) ret=7e733ab9 0022:Ret KERNEL32.GetFileSize() retval=ffffffff ret=7e733ab9 0022:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7e733cf0 0022:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e733cf0 0022:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7e734e1c 0022:Ret ntdll.RtlAllocateHeap() retval=00148cb8 ret=7e734e1c 0022:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e734f1f 0022:Ret KERNEL32.CreateEventW() retval=00000068 ret=7e734f1f 0022:Call ntdll.RtlAllocateHeap(00110000,00000008,0000001c) ret=7e72abbe 0022:Ret ntdll.RtlAllocateHeap() retval=0014bef8 ret=7e72abbe 0022:Call msacm32.drv.wodMessage(0000ffff,00000005,007ce918,007ce970,00030000) ret=7e728e1f 0022:Call ntdll.RtlAllocateHeap(00110000,00000000,0000002c) ret=7e0bfd8c 0022:Ret ntdll.RtlAllocateHeap() retval=0014bf20 ret=7e0bfd8c 0022:Call winmm.waveOutGetNumDevs() ret=7e0bfdb5 0022:Ret winmm.waveOutGetNumDevs() retval=00000002 ret=7e0bfdb5 0022:Call winmm.waveOutOpen(0014bf28,00000000,00148cb8,7e0bde60,0014bf20,00030008) ret=7e0c0313 0022:Call ntdll.RtlAllocateHeap(00110000,00000008,0000001c) ret=7e72abbe 0022:Ret ntdll.RtlAllocateHeap() retval=0014bf58 ret=7e72abbe 0022:Call winealsa.drv.wodMessage(00000000,00000005,007ce5b8,007ce610,00030008) ret=7e728e1f 0022:Call ntdll.RtlAllocateHeap(00110000,00000008,00000068) ret=7e1c6c82 0022:Ret ntdll.RtlAllocateHeap() retval=00148b18 ret=7e1c6c82 0022:Call ntdll.RtlAllocateHeap(00110000,00000008,00000300) ret=7e1b2459 0022:Ret ntdll.RtlAllocateHeap() retval=0014c7d0 ret=7e1b2459 0022:Call KERNEL32.InitializeCriticalSection(0013cefc) ret=7e1b2469 0022:Ret KERNEL32.InitializeCriticalSection() retval=00000001 ret=7e1b2469 0022:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1c73ab 0022:Ret KERNEL32.CreateEventW() retval=00000070 ret=7e1c73ab 0022:Call KERNEL32.CreateThread(00000000,00000000,7e1c5570,00000000,00000000,0013cedc) ret=7e1c73ef 0009:Ret KERNEL32.CreateThread() retval=00000064 ret=7e73560c 0009:Call KERNEL32.SetThreadPriority(00000064,0000000f) ret=7e73562d 0009:Ret KERNEL32.SetThreadPriority() retval=00000001 ret=7e73562d 0009:Ret winmm.PlaySoundW() retval=00000001 ret=01005c40 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,0000000c) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c5748 ret=0100a7d2 0009:Call user32.GetClientRect(00010030,0033f61c) ret=01005145 0009:Ret user32.GetClientRect() retval=00000001 ret=01005145 0009:Call user32.GetDC(00010030) ret=010051ad 0009:Ret user32.GetDC() retval=00000314 ret=010051ad 0009:Call gdi32.CreateCompatibleDC(00000314) ret=010051bc 0009:Ret gdi32.CreateCompatibleDC() retval=000012c4 ret=010051bc 0009:Call gdi32.CreateCompatibleDC(00000314) ret=010051ca 0009:Ret gdi32.CreateCompatibleDC() retval=000012d0 ret=010051ca 0009:Call gdi32.CreateCompatibleDC(00000314) ret=010051d8 0009:Ret gdi32.CreateCompatibleDC() retval=000012dc ret=010051d8 0009:Call gdi32.CreateCompatibleBitmap(00000314,00000047,00000060) ret=010051f8 0009:Ret gdi32.CreateCompatibleBitmap() retval=000012e8 ret=010051f8 0009:Call gdi32.CreateCompatibleBitmap(00000314,00000047,00000060) ret=01005212 0009:Ret gdi32.CreateCompatibleBitmap() retval=000012ec ret=01005212 0009:Call gdi32.CreateCompatibleBitmap(00000314,00000047,00000060) ret=0100522c 0009:Ret gdi32.CreateCompatibleBitmap() retval=000012f0 ret=0100522c 0009:Call gdi32.SelectObject(000012c4,000012e8) ret=01005246 0009:Ret gdi32.SelectObject() retval=0000006c ret=01005246 0009:Call gdi32.SelectObject(000012d0,000012ec) ret=0100525a 0009:Ret gdi32.SelectObject() retval=0000006c ret=0100525a 0009:Call gdi32.SelectObject(000012dc,000012f0) ret=0100526e 0009:Ret gdi32.SelectObject() retval=0000006c ret=0100526e 0009:Call user32.LoadBitmapW(01000000,0033f5b4 L"CARD44") ret=010028ff 0023:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) 0023:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0023:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) 0023:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0023:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) 0023:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) retval=1 0023:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) 0023:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0023:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) 0023:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0023:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) 0023:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0023:Starting thread proc 0x7e1c5570 (arg=(nil)) 0023:Call KERNEL32.SetEvent(00000070) ret=7e1c55aa 0023:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c55aa 0022:Ret KERNEL32.CreateThread() retval=00000084 ret=7e1c73ef 0022:Call KERNEL32.SetThreadPriority(00000084,0000000f) ret=7e1c7413 0022:Ret KERNEL32.SetThreadPriority() retval=00000001 ret=7e1c7413 0022:Call KERNEL32.WaitForSingleObject(00000070,ffffffff) ret=7e1c742f 0022:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1c742f 0022:Call KERNEL32.CloseHandle(00000070) ret=7e1c7443 0022:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1c7443 0022:Call ntdll.RtlFreeHeap(00110000,00000000,00148b18) ret=7e1c7479 0022:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e1c7479 0022:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bb,0014bf20,00000000,00000000) ret=7e1c4643 0022:Call KERNEL32.IsBadReadPtr(0014bf20,0000002c) ret=7e0bdbc9 0022:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 0022:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bb,007ceaa4,00000000,00000000) ret=7e0bdf33 0022:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 0022:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 0022:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0022:Ret winmm.waveOutOpen() retval=00000000 ret=7e0c0313 0022:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0022:Call ntdll.RtlAllocateHeap(00110000,00000000,000039ac) ret=7e73520d 0022:Ret ntdll.RtlAllocateHeap() retval=0014d3a0 ret=7e73520d 0022:Call msacm32.drv.wodMessage(0000ffff,00000007,0014bf20,0014d3a0,00000020) ret=7e728e1f 0022:Call winmm.waveOutPrepareHeader(00008001,0014d3a0,00000020) ret=7e0c09d8 0022:Call winealsa.drv.wodMessage(00000000,00000007,7e72ab2b,0014d3a0,00000020) ret=7e728e1f 0022:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 0022:Ret winmm.waveOutPrepareHeader() retval=00000000 ret=7e0c09d8 0022:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0022:Call msacm32.drv.wodMessage(0000ffff,00000007,0014bf20,0014d3c0,00000020) ret=7e728e1f 0022:Call winmm.waveOutPrepareHeader(00008001,0014d3c0,00000020) ret=7e0c09d8 0022:Call winealsa.drv.wodMessage(00000000,00000007,7e72ab2b,0014d3c0,00000020) ret=7e728e1f 0022:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 0022:Ret winmm.waveOutPrepareHeader() retval=00000000 ret=7e0c09d8 0022:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0022:Call KERNEL32.WaitForSingleObject(00000038,00000000) ret=7e735343 0022:Ret KERNEL32.WaitForSingleObject() retval=00000102 ret=7e735343 0022:Call msacm32.drv.wodMessage(0000ffff,00000009,0014bf20,0014d3a0,00000020) ret=7e728e1f 0022:Call winmm.waveOutWrite(00008001,0014d3a0,00000020) ret=7e0c09b5 0022:Call winealsa.drv.wodMessage(00000000,00000009,7e72ab2b,0014d3a0,00000020) ret=7e728e1f 0022:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0022:Ret winmm.waveOutWrite() retval=00000000 ret=7e0c09b5 0022:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0022:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 0022:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 0022:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 0022:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 0022:Call KERNEL32.WaitForSingleObject(00000068,ffffffff) ret=7e73429b 0009:Ret user32.LoadBitmapW() retval=00001300 ret=010028ff 0009:Call gdi32.CreateCompatibleDC(000012d0) ret=01002909 0009:Ret gdi32.CreateCompatibleDC() retval=00001314 ret=01002909 0009:Call gdi32.SelectObject(00001314,00001300) ret=01002917 0009:Ret gdi32.SelectObject() retval=0000006c ret=01002917 0009:Call gdi32.BitBlt(000012d0,00000000,00000000,00000047,00000060,00001314,00000000,00000000,00cc0020) ret=01002938 0009:Ret gdi32.BitBlt() retval=00000001 ret=01002938 0009:Call gdi32.SelectObject(00001314,0000006c) ret=0100293e 0009:Ret gdi32.SelectObject() retval=00001300 ret=0100293e 0009:Call gdi32.DeleteObject(00001300) ret=01002947 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01002947 0009:Call gdi32.DeleteDC(00001314) ret=0100294e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100294e 0009:Call gdi32.SetPixel(000012d0,00000000,00000000,00008000) ret=01002969 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002969 0009:Call gdi32.SetPixel(000012d0,00000001,00000000,00008000) ret=01002976 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002976 0009:Call gdi32.SetPixel(000012d0,00000000,00000001,00008000) ret=01002982 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002982 0009:Call gdi32.SetPixel(000012d0,00000046,00000000,00008000) ret=0100298f 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100298f 0009:Call gdi32.SetPixel(000012d0,00000045,00000000,00008000) ret=0100299c 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100299c 0009:Call gdi32.SetPixel(000012d0,00000046,00000001,00008000) ret=010029ab 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ab 0009:Call gdi32.SetPixel(000012d0,00000000,0000005f,00008000) ret=010029bf 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029bf 0009:Call gdi32.SetPixel(000012d0,00000001,0000005f,00008000) ret=010029d0 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029d0 0009:Call gdi32.SetPixel(000012d0,00000000,0000005e,00008000) ret=010029de 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029de 0009:Call gdi32.SetPixel(000012d0,00000046,0000005f,00008000) ret=010029ef 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ef 0009:Call gdi32.SetPixel(000012d0,00000045,0000005f,00008000) ret=01002a00 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a00 0009:Call gdi32.SetPixel(000012d0,00000046,0000005e,00008000) ret=01002a11 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a11 0009:Call user32.LoadBitmapW(01000000,010012c8 L"CARDBACK") ret=010028ff 0009:Ret user32.LoadBitmapW() retval=0000132c ret=010028ff 0009:Call gdi32.CreateCompatibleDC(000012c4) ret=01002909 0009:Ret gdi32.CreateCompatibleDC() retval=00001340 ret=01002909 0009:Call gdi32.SelectObject(00001340,0000132c) ret=01002917 0009:Ret gdi32.SelectObject() retval=0000006c ret=01002917 0009:Call gdi32.BitBlt(000012c4,00000000,00000000,00000047,00000060,00001340,00000000,00000000,00cc0020) ret=01002938 0009:Ret gdi32.BitBlt() retval=00000001 ret=01002938 0009:Call gdi32.SelectObject(00001340,0000006c) ret=0100293e 0009:Ret gdi32.SelectObject() retval=0000132c ret=0100293e 0009:Call gdi32.DeleteObject(0000132c) ret=01002947 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01002947 0009:Call gdi32.DeleteDC(00001340) ret=0100294e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100294e 0009:Call gdi32.SetPixel(000012c4,00000000,00000000,00008000) ret=01002969 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002969 0009:Call gdi32.SetPixel(000012c4,00000001,00000000,00008000) ret=01002976 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002976 0009:Call gdi32.SetPixel(000012c4,00000000,00000001,00008000) ret=01002982 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002982 0009:Call gdi32.SetPixel(000012c4,00000046,00000000,00008000) ret=0100298f 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100298f 0009:Call gdi32.SetPixel(000012c4,00000045,00000000,00008000) ret=0100299c 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100299c 0009:Call gdi32.SetPixel(000012c4,00000046,00000001,00008000) ret=010029ab 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ab 0009:Call gdi32.SetPixel(000012c4,00000000,0000005f,00008000) ret=010029bf 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029bf 0009:Call gdi32.SetPixel(000012c4,00000001,0000005f,00008000) ret=010029d0 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029d0 0009:Call gdi32.SetPixel(000012c4,00000000,0000005e,00008000) ret=010029de 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029de 0009:Call gdi32.SetPixel(000012c4,00000046,0000005f,00008000) ret=010029ef 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ef 0009:Call gdi32.SetPixel(000012c4,00000045,0000005f,00008000) ret=01002a00 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a00 0009:Call gdi32.SetPixel(000012c4,00000046,0000005e,00008000) ret=01002a11 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a11 0009:Call winmm.timeGetTime() ret=010047d1 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00001928 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00001928 ret=010047d1 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00001928 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00001928 ret=01004881 0009:Call gdi32.BitBlt(000012c4,00000000,00000000,00000048,00000061,000012c4,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00000314,00000441,00000258,00000047,00000060,000012d0,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=0000192f ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=0000192f ret=01004881 0009:Call gdi32.BitBlt(000012dc,00000000,00000039,00000047,00000027,000012c4,00000000,00000039,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000012dc,0000002a,00000000,0000001d,00000039,000012c4,0000002a,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000012c4,0000001d,00000027,0000002b,0000003a,000012c4,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(000012c4,00000000,00000000,00000047,00000027,00000314,00000424,00000231,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000012c4,00000000,00000027,0000001d,00000039,00000314,00000424,00000258,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000424,00000231,00000047,00000060,000012d0,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000441,00000291,00000047,00000027,000012dc,00000000,00000039,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000046b,00000258,0000001d,00000039,000012dc,0000002a,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00001937 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00001937 ret=01004881 0009:Call gdi32.BitBlt(000012dc,00000000,00000033,00000047,0000002d,000012c4,00000000,00000033,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000012dc,00000024,00000000,00000023,00000033,000012c4,00000024,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000012c4,00000023,0000002d,00000025,00000034,000012c4,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(000012c4,00000000,00000000,00000047,0000002d,00000314,00000401,00000204,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000012c4,00000000,0000002d,00000023,00000033,00000314,00000401,00000231,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000401,00000204,00000047,00000060,000012d0,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000424,00000264,00000047,0000002d,000012dc,00000000,00000033,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000448,00000231,00000023,00000033,000012dc,00000024,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=0000193f ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=0000193f ret=01004881 0009:Call gdi32.BitBlt(000012dc,00000000,00000033,00000047,0000002d,000012c4,00000000,00000033,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000012dc,00000025,00000000,00000022,00000033,000012c4,00000025,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000012c4,00000022,0000002d,00000026,00000034,000012c4,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(000012c4,00000000,00000000,00000047,0000002d,00000314,000003df,000001d7,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000012c4,00000000,0000002d,00000022,00000033,00000314,000003df,00000204,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000003df,000001d7,00000047,00000060,000012d0,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000401,00000237,00000047,0000002d,000012dc,00000000,00000033,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000426,00000204,00000022,00000033,000012dc,00000025,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00001947 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00001947 ret=01004881 0009:Call gdi32.BitBlt(000012dc,00000000,00000033,00000047,0000002d,000012c4,00000000,00000033,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000012dc,00000025,00000000,00000022,00000033,000012c4,00000025,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000012c4,00000022,0000002d,00000026,00000034,000012c4,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(000012c4,00000000,00000000,00000047,0000002d,00000314,000003bd,000001aa,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000012c4,00000000,0000002d,00000022,00000033,00000314,000003bd,000001d7,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000003bd,000001aa,00000047,00000060,000012d0,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000003df,0000020a,00000047,0000002d,000012dc,00000000,00000033,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000404,000001d7,00000022,00000033,000012dc,00000025,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=0000194f ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=0000194f ret=01004881 0009:Call gdi32.BitBlt(000012dc,00000000,00000033,00000047,0000002d,000012c4,00000000,00000033,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000012dc,00000025,00000000,00000022,00000033,000012c4,00000025,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000012c4,00000022,0000002d,00000026,00000034,000012c4,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(000012c4,00000000,00000000,00000047,0000002d,00000314,0000039b,0000017d,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000012c4,00000000,0000002d,00000022,00000033,00000314,0000039b,000001aa,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,0000039b,0000017d,00000047,00000060,000012d0,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000003bd,000001dd,00000047,0000002d,000012dc,00000000,00000033,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,000003e2,000001aa,00000022,00000033,000012dc,00000025,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00001957 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00001957 ret=01004881 0009:Call gdi32.BitBlt(000012dc,00000000,00000033,00000047,0000002d,000012c4,00000000,00000033,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000012dc,00000024,00000000,00000023,00000033,000012c4,00000024,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000012c4,00000023,0000002d,00000025,00000034,000012c4,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(000012c4,00000000,00000000,00000047,0000002d,00000314,00000378,00000150,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000012c4,00000000,0000002d,00000023,00000033,00000314,00000378,0000017d,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000378,00000150,00000047,00000060,000012d0,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,0000039b,000001b0,00000047,0000002d,000012dc,00000000,00000033,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,000003bf,0000017d,00000023,00000033,000012dc,00000024,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=0000195f ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=0000195f ret=01004881 0009:Call gdi32.BitBlt(000012dc,00000000,00000033,00000047,0000002d,000012c4,00000000,00000033,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000012dc,00000025,00000000,00000022,00000033,000012c4,00000025,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000012c4,00000022,0000002d,00000026,00000034,000012c4,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(000012c4,00000000,00000000,00000047,0000002d,00000314,00000356,00000123,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000012c4,00000000,0000002d,00000022,00000033,00000314,00000356,00000150,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000356,00000123,00000047,00000060,000012d0,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000378,00000183,00000047,0000002d,000012dc,00000000,00000033,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000039d,00000150,00000022,00000033,000012dc,00000025,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00001967 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00001967 ret=01004881 0009:Call gdi32.BitBlt(000012dc,00000000,00000033,00000047,0000002d,000012c4,00000000,00000033,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000012dc,00000025,00000000,00000022,00000033,000012c4,00000025,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000012c4,00000022,0000002d,00000026,00000034,000012c4,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(000012c4,00000000,00000000,00000047,0000002d,00000314,00000334,000000f6,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000012c4,00000000,0000002d,00000022,00000033,00000314,00000334,00000123,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000334,000000f6,00000047,00000060,000012d0,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000356,00000156,00000047,0000002d,000012dc,00000000,00000033,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000037b,00000123,00000022,00000033,000012dc,00000025,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=0000196f ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=0000196f ret=01004881 0009:Call gdi32.BitBlt(000012dc,00000000,00000033,00000047,0000002d,000012c4,00000000,00000033,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000012dc,00000025,00000000,00000022,00000033,000012c4,00000025,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000012c4,00000022,0000002d,00000026,00000034,000012c4,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(000012c4,00000000,00000000,00000047,0000002d,00000314,00000312,000000c9,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000012c4,00000000,0000002d,00000022,00000033,00000314,00000312,000000f6,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000312,000000c9,00000047,00000060,000012d0,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000334,00000129,00000047,0000002d,000012dc,00000000,00000033,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000359,000000f6,00000022,00000033,000012dc,00000025,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00001977 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00001977 ret=01004881 0009:Call gdi32.BitBlt(000012dc,00000000,00000034,00000047,0000002c,000012c4,00000000,00000034,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000012dc,00000024,00000000,00000023,00000034,000012c4,00000024,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000012c4,00000023,0000002c,00000025,00000035,000012c4,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(000012c4,00000000,00000000,00000047,0000002c,00000314,000002ef,0000009d,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000012c4,00000000,0000002c,00000023,00000034,00000314,000002ef,000000c9,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000002ef,0000009d,00000047,00000060,000012d0,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000312,000000fd,00000047,0000002c,000012dc,00000000,00000034,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000336,000000c9,00000023,00000034,000012dc,00000024,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=0000197f ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=0000197f ret=01004881 0009:Call gdi32.BitBlt(000012dc,00000000,00000033,00000047,0000002d,000012c4,00000000,00000033,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000012dc,00000025,00000000,00000022,00000033,000012c4,00000025,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000012c4,00000022,0000002d,00000026,00000034,000012c4,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(000012c4,00000000,00000000,00000047,0000002d,00000314,000002cd,00000070,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000012c4,00000000,0000002d,00000022,00000033,00000314,000002cd,0000009d,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000002cd,00000070,00000047,00000060,000012d0,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000002ef,000000d0,00000047,0000002d,000012dc,00000000,00000033,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000314,0000009d,00000022,00000033,000012dc,00000025,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00001987 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00001987 ret=01004881 0009:Call gdi32.BitBlt(000012dc,00000000,00000033,00000047,0000002d,000012c4,00000000,00000033,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000012dc,00000025,00000000,00000022,00000033,000012c4,00000025,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000012c4,00000022,0000002d,00000026,00000034,000012c4,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(000012c4,00000000,00000000,00000047,0000002d,00000314,000002ab,00000043,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000012c4,00000000,0000002d,00000022,00000033,00000314,000002ab,00000070,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000002ab,00000043,00000047,00000060,000012d0,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000002cd,000000a3,00000047,0000002d,000012dc,00000000,00000033,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,000002f2,00000070,00000022,00000033,000012dc,00000025,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=0000198f ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=0000198f ret=01004881 0009:Call gdi32.BitBlt(000012dc,00000000,00000043,00000047,0000001d,000012c4,00000000,00000043,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000012dc,00000031,00000000,00000016,00000043,000012c4,00000031,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000012c4,00000016,0000001d,00000032,00000044,000012c4,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(000012c4,00000000,00000000,00000047,0000001d,00000314,00000295,00000026,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000012c4,00000000,0000001d,00000016,00000043,00000314,00000295,00000043,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000295,00000026,00000047,00000060,000012d0,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000002ab,00000086,00000047,0000001d,000012dc,00000000,00000043,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,000002dc,00000043,00000016,00000043,000012dc,00000031,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call gdi32.SelectObject(000012c4,0000006c) ret=01005316 0009:Ret gdi32.SelectObject() retval=000012e8 ret=01005316 0009:Call gdi32.SelectObject(000012d0,0000006c) ret=01005324 0009:Ret gdi32.SelectObject() retval=000012ec ret=01005324 0009:Call gdi32.SelectObject(000012dc,0000006c) ret=01005332 0009:Ret gdi32.SelectObject() retval=000012f0 ret=01005332 0009:Call gdi32.DeleteObject(000012e8) ret=01005340 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005340 0009:Call gdi32.DeleteObject(000012ec) ret=01005348 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005348 0009:Call gdi32.DeleteObject(000012f0) ret=01005350 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005350 0009:Call gdi32.DeleteDC(000012c4) ret=0100535e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100535e 0009:Call gdi32.DeleteDC(000012d0) ret=01005366 0009:Ret gdi32.DeleteDC() retval=00000001 ret=01005366 0009:Call gdi32.DeleteDC(000012dc) ret=0100536e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100536e 0009:Call user32.ReleaseDC(00010030,00000314) ret=0100537c 0009:Ret user32.ReleaseDC() retval=00000001 ret=0100537c 0009:Call user32.InvalidateRect(00010030,0033f62c,00000000) ret=0100538a 0009:Ret user32.InvalidateRect() retval=00000001 ret=0100538a 0009:Call KERNEL32.GetModuleHandleW(00000000) ret=01005c37 0009:Ret KERNEL32.GetModuleHandleW() retval=01000000 ret=01005c37 0009:Call winmm.PlaySoundW(0000007c,01000000,00040007) ret=01005c40 0009:Call ntdll.RtlAllocateHeap(00110000,00000008,0000001c) ret=7e7356bc 0009:Ret ntdll.RtlAllocateHeap() retval=00148bb0 ret=7e7356bc 0009:Call KERNEL32.ResetEvent(00000040) ret=7e735513 0009:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e735513 0009:Call KERNEL32.SetEvent(00000038) ret=7e735520 0009:Ret KERNEL32.SetEvent() retval=00000001 ret=7e735520 0009:Call msacm32.drv.wodMessage(0000ffff,0000000c,0014bf20,00000000,00000000) ret=7e728e1f 0009:Call winmm.waveOutReset(00008001) ret=7e0c0180 0009:Call winealsa.drv.wodMessage(00000000,0000000c,7e72ab2b,00000000,00000000) ret=7e728e1f 0009:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1b2580 0009:Ret KERNEL32.CreateEventW() retval=00000070 ret=7e1b2580 0009:Call KERNEL32.WaitForSingleObject(00000070,ffffffff) ret=7e1b2635 0023:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bd,0014bf20,0014d3a0,00000000) ret=7e1c4643 0023:Call KERNEL32.IsBadReadPtr(0014bf20,0000002c) ret=7e0bdbc9 0023:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 0023:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bd,007ceaa4,0014d3a0,00000000) ret=7e0bdf33 0023:Call KERNEL32.SetEvent(00000068) ret=7e7341f6 0023:Ret KERNEL32.SetEvent() retval=00000001 ret=7e7341f6 0023:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 0023:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 0023:Call KERNEL32.SetEvent(00000070) ret=7e1c4f3d 0023:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c4f3d 0022:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e73429b 0022:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 0022:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 0022:Call msacm32.drv.wodMessage(0000ffff,0000000c,0014bf20,00000000,00000000) ret=7e728e1f 0022:Call winmm.waveOutReset(00008001) ret=7e0c0180 0022:Call winealsa.drv.wodMessage(00000000,0000000c,7e72ab2b,00000000,00000000) ret=7e728e1f 0022:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1b2580 0022:Ret KERNEL32.CreateEventW() retval=00000088 ret=7e1b2580 0022:Call KERNEL32.WaitForSingleObject(00000088,ffffffff) ret=7e1b2635 0023:Call KERNEL32.SetEvent(00000088) ret=7e1c4f3d 0023:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c4f3d 0022:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1b2635 0022:Call KERNEL32.CloseHandle(00000088) ret=7e1b2640 0022:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1b2640 0022:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0022:Ret winmm.waveOutReset() retval=00000000 ret=7e0c0180 0022:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0022:Call msacm32.drv.wodMessage(0000ffff,00000008,0014bf20,0014d3a0,00000020) ret=7e728e1f 0022:Call winmm.waveOutUnprepareHeader(00008001,0014d3a0,00000020) ret=7e0c00b6 0022:Call winealsa.drv.wodMessage(00000000,00000008,7e72ab2b,0014d3a0,00000020) ret=7e728e1f 0022:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 0022:Ret winmm.waveOutUnprepareHeader() retval=00000000 ret=7e0c00b6 0022:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0022:Call msacm32.drv.wodMessage(0000ffff,00000008,0014bf20,0014d3c0,00000020) ret=7e728e1f 0022:Call winmm.waveOutUnprepareHeader(00008001,0014d3c0,00000020) ret=7e0c00b6 0022:Call winealsa.drv.wodMessage(00000000,00000008,7e72ab2b,0014d3c0,00000020) ret=7e728e1f 0022:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 0022:Ret winmm.waveOutUnprepareHeader() retval=00000000 ret=7e0c00b6 0022:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0022:Call KERNEL32.CloseHandle(00000068) ret=7e7349fd 0022:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e7349fd 0022:Call ntdll.RtlFreeHeap(00110000,00000000,0014d3a0) ret=7e734a23 0022:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e734a23 0022:Call ntdll.RtlFreeHeap(00110000,00000000,00148cb8) ret=7e734a49 0022:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e734a49 0022:Call msacm32.drv.wodMessage(0000ffff,00000006,0014bf20,00000000,00000000) ret=7e728e1f 0022:Call winmm.waveOutClose(00008001) ret=7e0c01a5 0022:Call winealsa.drv.wodMessage(00000000,00000006,7e72ab2b,00000000,00000000) ret=7e728e1f 0022:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1b2580 0022:Ret KERNEL32.CreateEventW() retval=00000068 ret=7e1b2580 0022:Call KERNEL32.WaitForSingleObject(00000068,ffffffff) ret=7e1b2635 0023:Call KERNEL32.SetEvent(00000068) ret=7e1c4ea1 0023:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c4ea1 0023:Call KERNEL32.ExitThread(00000000) ret=7e1c4eb0 0023:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) 0023:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0023:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) 0023:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0023:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) 0023:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0023:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) 0023:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) retval=1 0023:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) 0023:Call KERNEL32.TlsGetValue(00000000) ret=7e3f4071 0023:Ret KERNEL32.TlsGetValue() retval=00000000 ret=7e3f4071 0023:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0023:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) 0023:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0022:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1b2635 0022:Call KERNEL32.CloseHandle(00000068) ret=7e1b2640 0022:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1b2640 0022:Call ntdll.RtlFreeHeap(00110000,00000000,0014c7d0) ret=7e1b24dc 0022:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e1b24dc 0022:Call ntdll.RtlDeleteCriticalSection(0013cefc) ret=7e1b24fb 0022:Ret ntdll.RtlDeleteCriticalSection() retval=00000000 ret=7e1b24fb 0022:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bc,0014bf20,00000000,00000000) ret=7e1c4643 0022:Call KERNEL32.IsBadReadPtr(0014bf20,0000002c) ret=7e0bdbc9 0022:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 0022:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bc,007ceaa4,00000000,00000000) ret=7e0bdf33 0022:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 0022:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 0022:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0022:Call ntdll.RtlFreeHeap(00110000,00000000,0014bf58) ret=7e72ae0b 0022:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e72ae0b 0022:Ret winmm.waveOutClose() retval=00000000 ret=7e0c01a5 0022:Call ntdll.RtlFreeHeap(00110000,00000000,0014bf20) ret=7e0c01f7 0022:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e0c01f7 0022:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0022:Call ntdll.RtlFreeHeap(00110000,00000000,0014bef8) ret=7e72ae0b 0022:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e72ae0b 0009:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1b2635 0009:Call KERNEL32.CloseHandle(00000070) ret=7e1b2640 0009:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1b2640 0009:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0009:Ret winmm.waveOutReset() retval=00000000 ret=7e0c0180 0009:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0009:Call KERNEL32.WaitForSingleObject(00000040,ffffffff) ret=7e73555a 0022:Call ntdll.RtlFreeHeap(00110000,00000000,00148c28) ret=7e731f79 0022:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e731f79 0022:Call KERNEL32.SetEvent(00000040) ret=7e7343a0 0009:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e73555a 0022:Ret KERNEL32.SetEvent() retval=00000001 ret=7e7343a0 0022:Call KERNEL32.CloseHandle(00000064) ret=7e734340 0009:Call KERNEL32.ResetEvent(00000038) ret=7e735572 0009:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e735572 0009:Call KERNEL32.CreateThread(00000000,00000000,7e7348a0,00148bb0,00000000,0033f5a8) ret=7e73560c 0022:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e734340 0022:Call ntdll.RtlFreeHeap(00110000,00000000,0014bf80) ret=7e734360 0022:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e734360 0022:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) 0022:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0022:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) 0022:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0022:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) 0022:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0022:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) 0022:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) retval=1 0022:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) 0022:Call KERNEL32.TlsGetValue(00000000) ret=7e3f4071 0022:Ret KERNEL32.TlsGetValue() retval=00000000 ret=7e3f4071 0022:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0022:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) 0022:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0024:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) 0024:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0024:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) 0024:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0024:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) 0024:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) retval=1 0024:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) 0024:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0024:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) 0024:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0024:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) 0024:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0024:Starting thread proc 0x7e7348a0 (arg=0x148bb0) 0024:Call KERNEL32.FindResourceW(01000000,0000007c,7e741bde L"WAVE") ret=7e734ca3 0024:Ret KERNEL32.FindResourceW() retval=01014c40 ret=7e734ca3 0024:Call KERNEL32.LoadResource(01000000,01014c40) ret=7e734cb9 0024:Ret KERNEL32.LoadResource() retval=0104d668 ret=7e734cb9 0024:Call KERNEL32.LockResource(0104d668) ret=7e734cce 0024:Ret KERNEL32.LockResource() retval=0104d668 ret=7e734cce 0024:Call KERNEL32.FreeResource(0104d668) ret=7e734ce9 0024:Ret KERNEL32.FreeResource() retval=00000000 ret=7e734ce9 0024:Call ntdll.RtlAllocateHeap(00110000,00000008,0000005c) ret=7e733960 0024:Ret ntdll.RtlAllocateHeap() retval=00148c28 ret=7e733960 0024:Call KERNEL32.GetFileSize(ffffffff,00000000) ret=7e733ab9 0024:Ret KERNEL32.GetFileSize() retval=ffffffff ret=7e733ab9 0024:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7e733cf0 0024:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e733cf0 0024:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7e734e1c 0024:Ret ntdll.RtlAllocateHeap() retval=00148cb8 ret=7e734e1c 0024:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e734f1f 0024:Ret KERNEL32.CreateEventW() retval=00000068 ret=7e734f1f 0024:Call ntdll.RtlAllocateHeap(00110000,00000008,0000001c) ret=7e72abbe 0024:Ret ntdll.RtlAllocateHeap() retval=0014bef8 ret=7e72abbe 0024:Call msacm32.drv.wodMessage(0000ffff,00000005,008ce918,008ce970,00030000) ret=7e728e1f 0024:Call ntdll.RtlAllocateHeap(00110000,00000000,0000002c) ret=7e0bfd8c 0024:Ret ntdll.RtlAllocateHeap() retval=0014bf20 ret=7e0bfd8c 0024:Call winmm.waveOutGetNumDevs() ret=7e0bfdb5 0024:Ret winmm.waveOutGetNumDevs() retval=00000002 ret=7e0bfdb5 0024:Call winmm.waveOutOpen(0014bf28,00000000,00148cb8,7e0bde60,0014bf20,00030008) ret=7e0c0313 0024:Call ntdll.RtlAllocateHeap(00110000,00000008,0000001c) ret=7e72abbe 0024:Ret ntdll.RtlAllocateHeap() retval=0014bf58 ret=7e72abbe 0024:Call winealsa.drv.wodMessage(00000000,00000005,008ce5b8,008ce610,00030008) ret=7e728e1f 0024:Call ntdll.RtlAllocateHeap(00110000,00000008,00000068) ret=7e1c6c82 0024:Ret ntdll.RtlAllocateHeap() retval=00148b18 ret=7e1c6c82 0024:Call ntdll.RtlAllocateHeap(00110000,00000008,00000300) ret=7e1b2459 0024:Ret ntdll.RtlAllocateHeap() retval=0014c7d0 ret=7e1b2459 0024:Call KERNEL32.InitializeCriticalSection(0013cefc) ret=7e1b2469 0024:Ret KERNEL32.InitializeCriticalSection() retval=00000001 ret=7e1b2469 0024:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1c73ab 0024:Ret KERNEL32.CreateEventW() retval=00000070 ret=7e1c73ab 0024:Call KERNEL32.CreateThread(00000000,00000000,7e1c5570,00000000,00000000,0013cedc) ret=7e1c73ef 0009:Ret KERNEL32.CreateThread() retval=00000064 ret=7e73560c 0009:Call KERNEL32.SetThreadPriority(00000064,0000000f) ret=7e73562d 0009:Ret KERNEL32.SetThreadPriority() retval=00000001 ret=7e73562d 0009:Ret winmm.PlaySoundW() retval=00000001 ret=01005c40 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,0000000c) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c5760 ret=0100a7d2 0009:Call user32.GetClientRect(00010030,0033f61c) ret=01005145 0009:Ret user32.GetClientRect() retval=00000001 ret=01005145 0009:Call user32.GetDC(00010030) ret=010051ad 0009:Ret user32.GetDC() retval=00000314 ret=010051ad 0009:Call gdi32.CreateCompatibleDC(00000314) ret=010051bc 0009:Ret gdi32.CreateCompatibleDC() retval=00001350 ret=010051bc 0009:Call gdi32.CreateCompatibleDC(00000314) ret=010051ca 0009:Ret gdi32.CreateCompatibleDC() retval=0000135c ret=010051ca 0009:Call gdi32.CreateCompatibleDC(00000314) ret=010051d8 0009:Ret gdi32.CreateCompatibleDC() retval=00001368 ret=010051d8 0009:Call gdi32.CreateCompatibleBitmap(00000314,00000047,00000060) ret=010051f8 0009:Ret gdi32.CreateCompatibleBitmap() retval=00001374 ret=010051f8 0009:Call gdi32.CreateCompatibleBitmap(00000314,00000047,00000060) ret=01005212 0009:Ret gdi32.CreateCompatibleBitmap() retval=00001378 ret=01005212 0009:Call gdi32.CreateCompatibleBitmap(00000314,00000047,00000060) ret=0100522c 0009:Ret gdi32.CreateCompatibleBitmap() retval=0000137c ret=0100522c 0009:Call gdi32.SelectObject(00001350,00001374) ret=01005246 0009:Ret gdi32.SelectObject() retval=0000006c ret=01005246 0009:Call gdi32.SelectObject(0000135c,00001378) ret=0100525a 0009:Ret gdi32.SelectObject() retval=0000006c ret=0100525a 0009:Call gdi32.SelectObject(00001368,0000137c) ret=0100526e 0009:Ret gdi32.SelectObject() retval=0000006c ret=0100526e 0009:Call user32.LoadBitmapW(01000000,0033f5b4 L"CARD40") ret=010028ff 0025:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) 0025:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0025:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) 0025:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0025:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) 0025:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) retval=1 0025:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) 0025:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0025:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) 0025:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0025:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) 0025:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0025:Starting thread proc 0x7e1c5570 (arg=(nil)) 0025:Call KERNEL32.SetEvent(00000070) ret=7e1c55aa 0025:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c55aa 0024:Ret KERNEL32.CreateThread() retval=00000088 ret=7e1c73ef 0024:Call KERNEL32.SetThreadPriority(00000088,0000000f) ret=7e1c7413 0024:Ret KERNEL32.SetThreadPriority() retval=00000001 ret=7e1c7413 0024:Call KERNEL32.WaitForSingleObject(00000070,ffffffff) ret=7e1c742f 0024:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1c742f 0024:Call KERNEL32.CloseHandle(00000070) ret=7e1c7443 0024:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1c7443 0024:Call ntdll.RtlFreeHeap(00110000,00000000,00148b18) ret=7e1c7479 0024:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e1c7479 0024:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bb,0014bf20,00000000,00000000) ret=7e1c4643 0024:Call KERNEL32.IsBadReadPtr(0014bf20,0000002c) ret=7e0bdbc9 0024:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 0024:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bb,008ceaa4,00000000,00000000) ret=7e0bdf33 0024:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 0024:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 0024:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0024:Ret winmm.waveOutOpen() retval=00000000 ret=7e0c0313 0024:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0024:Call ntdll.RtlAllocateHeap(00110000,00000000,000039ac) ret=7e73520d 0024:Ret ntdll.RtlAllocateHeap() retval=0014d3a0 ret=7e73520d 0024:Call msacm32.drv.wodMessage(0000ffff,00000007,0014bf20,0014d3a0,00000020) ret=7e728e1f 0024:Call winmm.waveOutPrepareHeader(00008001,0014d3a0,00000020) ret=7e0c09d8 0024:Call winealsa.drv.wodMessage(00000000,00000007,7e72ab2b,0014d3a0,00000020) ret=7e728e1f 0024:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 0024:Ret winmm.waveOutPrepareHeader() retval=00000000 ret=7e0c09d8 0024:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0024:Call msacm32.drv.wodMessage(0000ffff,00000007,0014bf20,0014d3c0,00000020) ret=7e728e1f 0024:Call winmm.waveOutPrepareHeader(00008001,0014d3c0,00000020) ret=7e0c09d8 0024:Call winealsa.drv.wodMessage(00000000,00000007,7e72ab2b,0014d3c0,00000020) ret=7e728e1f 0024:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 0024:Ret winmm.waveOutPrepareHeader() retval=00000000 ret=7e0c09d8 0024:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0024:Call KERNEL32.WaitForSingleObject(00000038,00000000) ret=7e735343 0024:Ret KERNEL32.WaitForSingleObject() retval=00000102 ret=7e735343 0024:Call msacm32.drv.wodMessage(0000ffff,00000009,0014bf20,0014d3a0,00000020) ret=7e728e1f 0024:Call winmm.waveOutWrite(00008001,0014d3a0,00000020) ret=7e0c09b5 0024:Call winealsa.drv.wodMessage(00000000,00000009,7e72ab2b,0014d3a0,00000020) ret=7e728e1f 0024:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0024:Ret winmm.waveOutWrite() retval=00000000 ret=7e0c09b5 0024:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0024:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 0024:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 0024:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 0024:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 0024:Call KERNEL32.WaitForSingleObject(00000068,ffffffff) ret=7e73429b 0009:Ret user32.LoadBitmapW() retval=0000138c ret=010028ff 0009:Call gdi32.CreateCompatibleDC(0000135c) ret=01002909 0009:Ret gdi32.CreateCompatibleDC() retval=000013a0 ret=01002909 0009:Call gdi32.SelectObject(000013a0,0000138c) ret=01002917 0009:Ret gdi32.SelectObject() retval=0000006c ret=01002917 0009:Call gdi32.BitBlt(0000135c,00000000,00000000,00000047,00000060,000013a0,00000000,00000000,00cc0020) ret=01002938 0009:Ret gdi32.BitBlt() retval=00000001 ret=01002938 0009:Call gdi32.SelectObject(000013a0,0000006c) ret=0100293e 0009:Ret gdi32.SelectObject() retval=0000138c ret=0100293e 0009:Call gdi32.DeleteObject(0000138c) ret=01002947 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01002947 0009:Call gdi32.DeleteDC(000013a0) ret=0100294e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100294e 0009:Call gdi32.SetPixel(0000135c,00000000,00000000,00008000) ret=01002969 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002969 0009:Call gdi32.SetPixel(0000135c,00000001,00000000,00008000) ret=01002976 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002976 0009:Call gdi32.SetPixel(0000135c,00000000,00000001,00008000) ret=01002982 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002982 0009:Call gdi32.SetPixel(0000135c,00000046,00000000,00008000) ret=0100298f 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100298f 0009:Call gdi32.SetPixel(0000135c,00000045,00000000,00008000) ret=0100299c 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100299c 0009:Call gdi32.SetPixel(0000135c,00000046,00000001,00008000) ret=010029ab 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ab 0009:Call gdi32.SetPixel(0000135c,00000000,0000005f,00008000) ret=010029bf 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029bf 0009:Call gdi32.SetPixel(0000135c,00000001,0000005f,00008000) ret=010029d0 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029d0 0009:Call gdi32.SetPixel(0000135c,00000000,0000005e,00008000) ret=010029de 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029de 0009:Call gdi32.SetPixel(0000135c,00000046,0000005f,00008000) ret=010029ef 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ef 0009:Call gdi32.SetPixel(0000135c,00000045,0000005f,00008000) ret=01002a00 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a00 0009:Call gdi32.SetPixel(0000135c,00000046,0000005e,00008000) ret=01002a11 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a11 0009:Call user32.LoadBitmapW(01000000,010012c8 L"CARDBACK") ret=010028ff 0009:Ret user32.LoadBitmapW() retval=000013b8 ret=010028ff 0009:Call gdi32.CreateCompatibleDC(00001350) ret=01002909 0009:Ret gdi32.CreateCompatibleDC() retval=000013cc ret=01002909 0009:Call gdi32.SelectObject(000013cc,000013b8) ret=01002917 0009:Ret gdi32.SelectObject() retval=0000006c ret=01002917 0009:Call gdi32.BitBlt(00001350,00000000,00000000,00000047,00000060,000013cc,00000000,00000000,00cc0020) ret=01002938 0009:Ret gdi32.BitBlt() retval=00000001 ret=01002938 0009:Call gdi32.SelectObject(000013cc,0000006c) ret=0100293e 0009:Ret gdi32.SelectObject() retval=000013b8 ret=0100293e 0009:Call gdi32.DeleteObject(000013b8) ret=01002947 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01002947 0009:Call gdi32.DeleteDC(000013cc) ret=0100294e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100294e 0009:Call gdi32.SetPixel(00001350,00000000,00000000,00008000) ret=01002969 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002969 0009:Call gdi32.SetPixel(00001350,00000001,00000000,00008000) ret=01002976 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002976 0009:Call gdi32.SetPixel(00001350,00000000,00000001,00008000) ret=01002982 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002982 0009:Call gdi32.SetPixel(00001350,00000046,00000000,00008000) ret=0100298f 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100298f 0009:Call gdi32.SetPixel(00001350,00000045,00000000,00008000) ret=0100299c 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100299c 0009:Call gdi32.SetPixel(00001350,00000046,00000001,00008000) ret=010029ab 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ab 0009:Call gdi32.SetPixel(00001350,00000000,0000005f,00008000) ret=010029bf 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029bf 0009:Call gdi32.SetPixel(00001350,00000001,0000005f,00008000) ret=010029d0 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029d0 0009:Call gdi32.SetPixel(00001350,00000000,0000005e,00008000) ret=010029de 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029de 0009:Call gdi32.SetPixel(00001350,00000046,0000005f,00008000) ret=010029ef 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ef 0009:Call gdi32.SetPixel(00001350,00000045,0000005f,00008000) ret=01002a00 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a00 0009:Call gdi32.SetPixel(00001350,00000046,0000005e,00008000) ret=01002a11 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a11 0009:Call winmm.timeGetTime() ret=010047d1 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000019af ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000019af ret=010047d1 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000019af ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000019af ret=01004881 0009:Call gdi32.BitBlt(00001350,00000000,00000000,00000048,00000061,00001350,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00000314,00000441,00000258,00000047,00000060,0000135c,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000019b3 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000019b3 ret=01004881 0009:Call gdi32.BitBlt(00001368,00000000,0000004a,00000047,00000016,00001350,00000000,0000004a,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001368,0000003b,00000000,0000000c,0000004a,00001350,0000003b,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001350,0000000c,00000016,0000003c,0000004b,00001350,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001350,00000000,00000000,00000047,00000016,00000314,00000435,00000242,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001350,00000000,00000016,0000000c,0000004a,00000314,00000435,00000258,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000435,00000242,00000047,00000060,0000135c,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000441,000002a2,00000047,00000016,00001368,00000000,0000004a,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000047c,00000258,0000000c,0000004a,00001368,0000003b,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000019bb ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000019bb ret=01004881 0009:Call gdi32.BitBlt(00001368,00000000,00000033,00000047,0000002d,00001350,00000000,00000033,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001368,0000002f,00000000,00000018,00000033,00001350,0000002f,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001350,00000018,0000002d,00000030,00000034,00001350,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001350,00000000,00000000,00000047,0000002d,00000314,0000041d,00000215,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001350,00000000,0000002d,00000018,00000033,00000314,0000041d,00000242,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,0000041d,00000215,00000047,00000060,0000135c,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000435,00000275,00000047,0000002d,00001368,00000000,00000033,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000464,00000242,00000018,00000033,00001368,0000002f,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000019c3 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000019c3 ret=01004881 0009:Call gdi32.BitBlt(00001368,00000000,00000033,00000047,0000002d,00001350,00000000,00000033,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001368,0000002e,00000000,00000019,00000033,00001350,0000002e,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001350,00000019,0000002d,0000002f,00000034,00001350,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001350,00000000,00000000,00000047,0000002d,00000314,00000404,000001e8,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001350,00000000,0000002d,00000019,00000033,00000314,00000404,00000215,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000404,000001e8,00000047,00000060,0000135c,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,0000041d,00000248,00000047,0000002d,00001368,00000000,00000033,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000044b,00000215,00000019,00000033,00001368,0000002e,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000019cb ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000019cb ret=01004881 0009:Call gdi32.BitBlt(00001368,00000000,00000033,00000047,0000002d,00001350,00000000,00000033,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001368,0000002f,00000000,00000018,00000033,00001350,0000002f,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001350,00000018,0000002d,00000030,00000034,00001350,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001350,00000000,00000000,00000047,0000002d,00000314,000003ec,000001bb,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001350,00000000,0000002d,00000018,00000033,00000314,000003ec,000001e8,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000003ec,000001bb,00000047,00000060,0000135c,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000404,0000021b,00000047,0000002d,00001368,00000000,00000033,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000433,000001e8,00000018,00000033,00001368,0000002f,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000019d3 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000019d3 ret=01004881 0009:Call gdi32.BitBlt(00001368,00000000,00000033,00000047,0000002d,00001350,00000000,00000033,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001368,0000002e,00000000,00000019,00000033,00001350,0000002e,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001350,00000019,0000002d,0000002f,00000034,00001350,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001350,00000000,00000000,00000047,0000002d,00000314,000003d3,0000018e,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001350,00000000,0000002d,00000019,00000033,00000314,000003d3,000001bb,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000003d3,0000018e,00000047,00000060,0000135c,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000003ec,000001ee,00000047,0000002d,00001368,00000000,00000033,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000041a,000001bb,00000019,00000033,00001368,0000002e,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000019db ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000019db ret=01004881 0009:Call gdi32.BitBlt(00001368,00000000,00000033,00000047,0000002d,00001350,00000000,00000033,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001368,0000002f,00000000,00000018,00000033,00001350,0000002f,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001350,00000018,0000002d,00000030,00000034,00001350,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001350,00000000,00000000,00000047,0000002d,00000314,000003bb,00000161,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001350,00000000,0000002d,00000018,00000033,00000314,000003bb,0000018e,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000003bb,00000161,00000047,00000060,0000135c,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000003d3,000001c1,00000047,0000002d,00001368,00000000,00000033,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000402,0000018e,00000018,00000033,00001368,0000002f,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000019e3 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000019e3 ret=01004881 0009:Call gdi32.BitBlt(00001368,00000000,00000033,00000047,0000002d,00001350,00000000,00000033,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001368,0000002e,00000000,00000019,00000033,00001350,0000002e,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001350,00000019,0000002d,0000002f,00000034,00001350,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001350,00000000,00000000,00000047,0000002d,00000314,000003a2,00000134,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001350,00000000,0000002d,00000019,00000033,00000314,000003a2,00000161,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000003a2,00000134,00000047,00000060,0000135c,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000003bb,00000194,00000047,0000002d,00001368,00000000,00000033,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,000003e9,00000161,00000019,00000033,00001368,0000002e,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000019eb ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000019eb ret=01004881 0009:Call gdi32.BitBlt(00001368,00000000,00000033,00000047,0000002d,00001350,00000000,00000033,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001368,0000002f,00000000,00000018,00000033,00001350,0000002f,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001350,00000018,0000002d,00000030,00000034,00001350,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001350,00000000,00000000,00000047,0000002d,00000314,0000038a,00000107,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001350,00000000,0000002d,00000018,00000033,00000314,0000038a,00000134,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,0000038a,00000107,00000047,00000060,0000135c,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000003a2,00000167,00000047,0000002d,00001368,00000000,00000033,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,000003d1,00000134,00000018,00000033,00001368,0000002f,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000019f3 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000019f3 ret=01004881 0009:Call gdi32.BitBlt(00001368,00000000,00000033,00000047,0000002d,00001350,00000000,00000033,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001368,0000002e,00000000,00000019,00000033,00001350,0000002e,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001350,00000019,0000002d,0000002f,00000034,00001350,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001350,00000000,00000000,00000047,0000002d,00000314,00000371,000000da,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001350,00000000,0000002d,00000019,00000033,00000314,00000371,00000107,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000371,000000da,00000047,00000060,0000135c,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,0000038a,0000013a,00000047,0000002d,00001368,00000000,00000033,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,000003b8,00000107,00000019,00000033,00001368,0000002e,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000019fb ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000019fb ret=01004881 0009:Call gdi32.BitBlt(00001368,00000000,00000033,00000047,0000002d,00001350,00000000,00000033,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001368,0000002f,00000000,00000018,00000033,00001350,0000002f,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001350,00000018,0000002d,00000030,00000034,00001350,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001350,00000000,00000000,00000047,0000002d,00000314,00000359,000000ad,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001350,00000000,0000002d,00000018,00000033,00000314,00000359,000000da,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000359,000000ad,00000047,00000060,0000135c,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000371,0000010d,00000047,0000002d,00001368,00000000,00000033,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,000003a0,000000da,00000018,00000033,00001368,0000002f,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00001a03 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00001a03 ret=01004881 0009:Call gdi32.BitBlt(00001368,00000000,00000033,00000047,0000002d,00001350,00000000,00000033,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001368,0000002e,00000000,00000019,00000033,00001350,0000002e,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001350,00000019,0000002d,0000002f,00000034,00001350,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001350,00000000,00000000,00000047,0000002d,00000314,00000340,00000080,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001350,00000000,0000002d,00000019,00000033,00000314,00000340,000000ad,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000340,00000080,00000047,00000060,0000135c,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000359,000000e0,00000047,0000002d,00001368,00000000,00000033,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000387,000000ad,00000019,00000033,00001368,0000002e,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0019:Ret user32.GetMessageW() retval=00000001 ret=7ec5ec4b 0019:Call user32.DispatchMessageW(0033f93c) ret=7ec5ec28 0019:Call window proc 0x7ec60b80 (hwnd=0x10026,msg=WM_TIMER,wp=00000001,lp=00000000) 0019:Ret window proc 0x7ec60b80 (hwnd=0x10026,msg=WM_TIMER,wp=00000001,lp=00000000) retval=00000000 0019:Ret user32.DispatchMessageW() retval=00000000 ret=7ec5ec28 0019:Call user32.GetMessageW(0033f93c,00000000,00000000,00000000) ret=7ec5ec4b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00001a0b ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00001a0b ret=01004881 0009:Call gdi32.BitBlt(00001368,00000000,00000033,00000047,0000002d,00001350,00000000,00000033,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001368,0000002f,00000000,00000018,00000033,00001350,0000002f,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001350,00000018,0000002d,00000030,00000034,00001350,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001350,00000000,00000000,00000047,0000002d,00000314,00000328,00000053,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001350,00000000,0000002d,00000018,00000033,00000314,00000328,00000080,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000328,00000053,00000047,00000060,0000135c,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000340,000000b3,00000047,0000002d,00001368,00000000,00000033,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000036f,00000080,00000018,00000033,00001368,0000002f,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00001a13 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00001a13 ret=01004881 0009:Call gdi32.BitBlt(00001368,00000000,00000034,00000047,0000002c,00001350,00000000,00000034,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001368,0000002f,00000000,00000018,00000034,00001350,0000002f,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001350,00000018,0000002c,00000030,00000035,00001350,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001350,00000000,00000000,00000047,0000002c,00000314,00000310,00000027,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001350,00000000,0000002c,00000018,00000034,00000314,00000310,00000053,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000310,00000027,00000047,00000060,0000135c,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000328,00000087,00000047,0000002c,00001368,00000000,00000034,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000357,00000053,00000018,00000034,00001368,0000002f,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00001a1b ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00001a1b ret=01004881 0009:Call gdi32.BitBlt(00001368,00000000,0000005f,00000047,00000001,00001350,00000000,0000005f,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001368,00000046,00000000,00000001,0000005f,00001350,00000046,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001350,00000001,00000001,00000047,00000060,00001350,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001350,00000000,00000000,00000047,00000001,00000314,0000030f,00000026,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001350,00000000,00000001,00000001,0000005f,00000314,0000030f,00000027,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,0000030f,00000026,00000047,00000060,0000135c,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000310,00000086,00000047,00000001,00001368,00000000,0000005f,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000356,00000027,00000001,0000005f,00001368,00000046,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call gdi32.SelectObject(00001350,0000006c) ret=01005316 0009:Ret gdi32.SelectObject() retval=00001374 ret=01005316 0009:Call gdi32.SelectObject(0000135c,0000006c) ret=01005324 0009:Ret gdi32.SelectObject() retval=00001378 ret=01005324 0009:Call gdi32.SelectObject(00001368,0000006c) ret=01005332 0009:Ret gdi32.SelectObject() retval=0000137c ret=01005332 0009:Call gdi32.DeleteObject(00001374) ret=01005340 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005340 0009:Call gdi32.DeleteObject(00001378) ret=01005348 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005348 0009:Call gdi32.DeleteObject(0000137c) ret=01005350 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005350 0009:Call gdi32.DeleteDC(00001350) ret=0100535e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100535e 0009:Call gdi32.DeleteDC(0000135c) ret=01005366 0009:Ret gdi32.DeleteDC() retval=00000001 ret=01005366 0009:Call gdi32.DeleteDC(00001368) ret=0100536e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100536e 0009:Call user32.ReleaseDC(00010030,00000314) ret=0100537c 0009:Ret user32.ReleaseDC() retval=00000001 ret=0100537c 0009:Call user32.InvalidateRect(00010030,0033f62c,00000000) ret=0100538a 0009:Ret user32.InvalidateRect() retval=00000001 ret=0100538a 0009:Call KERNEL32.GetModuleHandleW(00000000) ret=01005c37 0009:Ret KERNEL32.GetModuleHandleW() retval=01000000 ret=01005c37 0009:Call winmm.PlaySoundW(0000007c,01000000,00040007) ret=01005c40 0009:Call ntdll.RtlAllocateHeap(00110000,00000008,0000001c) ret=7e7356bc 0009:Ret ntdll.RtlAllocateHeap() retval=0014bf80 ret=7e7356bc 0009:Call KERNEL32.ResetEvent(00000040) ret=7e735513 0009:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e735513 0009:Call KERNEL32.SetEvent(00000038) ret=7e735520 0009:Ret KERNEL32.SetEvent() retval=00000001 ret=7e735520 0009:Call msacm32.drv.wodMessage(0000ffff,0000000c,0014bf20,00000000,00000000) ret=7e728e1f 0009:Call winmm.waveOutReset(00008001) ret=7e0c0180 0009:Call winealsa.drv.wodMessage(00000000,0000000c,7e72ab2b,00000000,00000000) ret=7e728e1f 0009:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1b2580 0009:Ret KERNEL32.CreateEventW() retval=00000070 ret=7e1b2580 0009:Call KERNEL32.WaitForSingleObject(00000070,ffffffff) ret=7e1b2635 0025:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bd,0014bf20,0014d3a0,00000000) ret=7e1c4643 0025:Call KERNEL32.IsBadReadPtr(0014bf20,0000002c) ret=7e0bdbc9 0025:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 0025:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bd,008ceaa4,0014d3a0,00000000) ret=7e0bdf33 0025:Call KERNEL32.SetEvent(00000068) ret=7e7341f6 0025:Ret KERNEL32.SetEvent() retval=00000001 ret=7e7341f6 0025:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 0025:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 0025:Call KERNEL32.SetEvent(00000070) ret=7e1c4f3d 0025:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c4f3d 0024:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e73429b 0024:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 0024:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 0024:Call msacm32.drv.wodMessage(0000ffff,0000000c,0014bf20,00000000,00000000) ret=7e728e1f 0024:Call winmm.waveOutReset(00008001) ret=7e0c0180 0024:Call winealsa.drv.wodMessage(00000000,0000000c,7e72ab2b,00000000,00000000) ret=7e728e1f 0024:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1b2580 0024:Ret KERNEL32.CreateEventW() retval=0000008c ret=7e1b2580 0024:Call KERNEL32.WaitForSingleObject(0000008c,ffffffff) ret=7e1b2635 0025:Call KERNEL32.SetEvent(0000008c) ret=7e1c4f3d 0025:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c4f3d 0024:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1b2635 0024:Call KERNEL32.CloseHandle(0000008c) ret=7e1b2640 0024:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1b2640 0024:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0024:Ret winmm.waveOutReset() retval=00000000 ret=7e0c0180 0024:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0024:Call msacm32.drv.wodMessage(0000ffff,00000008,0014bf20,0014d3a0,00000020) ret=7e728e1f 0024:Call winmm.waveOutUnprepareHeader(00008001,0014d3a0,00000020) ret=7e0c00b6 0024:Call winealsa.drv.wodMessage(00000000,00000008,7e72ab2b,0014d3a0,00000020) ret=7e728e1f 0024:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 0024:Ret winmm.waveOutUnprepareHeader() retval=00000000 ret=7e0c00b6 0024:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0024:Call msacm32.drv.wodMessage(0000ffff,00000008,0014bf20,0014d3c0,00000020) ret=7e728e1f 0024:Call winmm.waveOutUnprepareHeader(00008001,0014d3c0,00000020) ret=7e0c00b6 0024:Call winealsa.drv.wodMessage(00000000,00000008,7e72ab2b,0014d3c0,00000020) ret=7e728e1f 0024:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 0024:Ret winmm.waveOutUnprepareHeader() retval=00000000 ret=7e0c00b6 0024:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0024:Call KERNEL32.CloseHandle(00000068) ret=7e7349fd 0024:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e7349fd 0024:Call ntdll.RtlFreeHeap(00110000,00000000,0014d3a0) ret=7e734a23 0024:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e734a23 0024:Call ntdll.RtlFreeHeap(00110000,00000000,00148cb8) ret=7e734a49 0024:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e734a49 0024:Call msacm32.drv.wodMessage(0000ffff,00000006,0014bf20,00000000,00000000) ret=7e728e1f 0024:Call winmm.waveOutClose(00008001) ret=7e0c01a5 0024:Call winealsa.drv.wodMessage(00000000,00000006,7e72ab2b,00000000,00000000) ret=7e728e1f 0024:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1b2580 0024:Ret KERNEL32.CreateEventW() retval=00000068 ret=7e1b2580 0024:Call KERNEL32.WaitForSingleObject(00000068,ffffffff) ret=7e1b2635 0025:Call KERNEL32.SetEvent(00000068) ret=7e1c4ea1 0025:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c4ea1 0025:Call KERNEL32.ExitThread(00000000) ret=7e1c4eb0 0025:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) 0025:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0025:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) 0025:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0025:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) 0025:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0025:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) 0025:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) retval=1 0025:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) 0025:Call KERNEL32.TlsGetValue(00000000) ret=7e3f4071 0025:Ret KERNEL32.TlsGetValue() retval=00000000 ret=7e3f4071 0025:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0025:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) 0025:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0024:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1b2635 0024:Call KERNEL32.CloseHandle(00000068) ret=7e1b2640 0024:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1b2640 0024:Call ntdll.RtlFreeHeap(00110000,00000000,0014c7d0) ret=7e1b24dc 0024:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e1b24dc 0024:Call ntdll.RtlDeleteCriticalSection(0013cefc) ret=7e1b24fb 0024:Ret ntdll.RtlDeleteCriticalSection() retval=00000000 ret=7e1b24fb 0024:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bc,0014bf20,00000000,00000000) ret=7e1c4643 0024:Call KERNEL32.IsBadReadPtr(0014bf20,0000002c) ret=7e0bdbc9 0024:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 0024:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bc,008ceaa4,00000000,00000000) ret=7e0bdf33 0024:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 0024:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 0024:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0024:Call ntdll.RtlFreeHeap(00110000,00000000,0014bf58) ret=7e72ae0b 0024:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e72ae0b 0024:Ret winmm.waveOutClose() retval=00000000 ret=7e0c01a5 0024:Call ntdll.RtlFreeHeap(00110000,00000000,0014bf20) ret=7e0c01f7 0024:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e0c01f7 0024:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0024:Call ntdll.RtlFreeHeap(00110000,00000000,0014bef8) ret=7e72ae0b 0024:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e72ae0b 0009:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1b2635 0009:Call KERNEL32.CloseHandle(00000070) ret=7e1b2640 0009:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1b2640 0009:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0009:Ret winmm.waveOutReset() retval=00000000 ret=7e0c0180 0009:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0009:Call KERNEL32.WaitForSingleObject(00000040,ffffffff) ret=7e73555a 0024:Call ntdll.RtlFreeHeap(00110000,00000000,00148c28) ret=7e731f79 0024:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e731f79 0024:Call KERNEL32.SetEvent(00000040) ret=7e7343a0 0024:Ret KERNEL32.SetEvent() retval=00000001 ret=7e7343a0 0024:Call KERNEL32.CloseHandle(00000064) ret=7e734340 0024:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e734340 0024:Call ntdll.RtlFreeHeap(00110000,00000000,00148bb0) ret=7e734360 0024:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e734360 0024:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) 0024:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0024:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) 0024:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0024:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) 0024:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0024:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) 0024:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) retval=1 0024:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) 0024:Call KERNEL32.TlsGetValue(00000000) ret=7e3f4071 0024:Ret KERNEL32.TlsGetValue() retval=00000000 ret=7e3f4071 0024:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0024:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) 0024:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0009:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e73555a 0009:Call KERNEL32.ResetEvent(00000038) ret=7e735572 0009:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e735572 0009:Call KERNEL32.CreateThread(00000000,00000000,7e7348a0,0014bf80,00000000,0033f5a8) ret=7e73560c 0026:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) 0026:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0026:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) 0026:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0026:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) 0026:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) retval=1 0026:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) 0026:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0026:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) 0026:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0026:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) 0026:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0026:Starting thread proc 0x7e7348a0 (arg=0x14bf80) 0026:Call KERNEL32.FindResourceW(01000000,0000007c,7e741bde L"WAVE") ret=7e734ca3 0026:Ret KERNEL32.FindResourceW() retval=01014c40 ret=7e734ca3 0026:Call KERNEL32.LoadResource(01000000,01014c40) ret=7e734cb9 0026:Ret KERNEL32.LoadResource() retval=0104d668 ret=7e734cb9 0026:Call KERNEL32.LockResource(0104d668) ret=7e734cce 0026:Ret KERNEL32.LockResource() retval=0104d668 ret=7e734cce 0026:Call KERNEL32.FreeResource(0104d668) ret=7e734ce9 0026:Ret KERNEL32.FreeResource() retval=00000000 ret=7e734ce9 0026:Call ntdll.RtlAllocateHeap(00110000,00000008,0000005c) ret=7e733960 0026:Ret ntdll.RtlAllocateHeap() retval=00148c28 ret=7e733960 0026:Call KERNEL32.GetFileSize(ffffffff,00000000) ret=7e733ab9 0026:Ret KERNEL32.GetFileSize() retval=ffffffff ret=7e733ab9 0026:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7e733cf0 0026:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e733cf0 0026:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7e734e1c 0026:Ret ntdll.RtlAllocateHeap() retval=00148cb8 ret=7e734e1c 0026:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e734f1f 0026:Ret KERNEL32.CreateEventW() retval=00000068 ret=7e734f1f 0026:Call ntdll.RtlAllocateHeap(00110000,00000008,0000001c) ret=7e72abbe 0026:Ret ntdll.RtlAllocateHeap() retval=0014bef8 ret=7e72abbe 0026:Call msacm32.drv.wodMessage(0000ffff,00000005,007ce918,007ce970,00030000) ret=7e728e1f 0026:Call ntdll.RtlAllocateHeap(00110000,00000000,0000002c) ret=7e0bfd8c 0026:Ret ntdll.RtlAllocateHeap() retval=0014bf20 ret=7e0bfd8c 0026:Call winmm.waveOutGetNumDevs() ret=7e0bfdb5 0026:Ret winmm.waveOutGetNumDevs() retval=00000002 ret=7e0bfdb5 0026:Call winmm.waveOutOpen(0014bf28,00000000,00148cb8,7e0bde60,0014bf20,00030008) ret=7e0c0313 0026:Call ntdll.RtlAllocateHeap(00110000,00000008,0000001c) ret=7e72abbe 0026:Ret ntdll.RtlAllocateHeap() retval=0014bf58 ret=7e72abbe 0026:Call winealsa.drv.wodMessage(00000000,00000005,007ce5b8,007ce610,00030008) ret=7e728e1f 0026:Call ntdll.RtlAllocateHeap(00110000,00000008,00000068) ret=7e1c6c82 0026:Ret ntdll.RtlAllocateHeap() retval=00148b18 ret=7e1c6c82 0026:Call ntdll.RtlAllocateHeap(00110000,00000008,00000300) ret=7e1b2459 0026:Ret ntdll.RtlAllocateHeap() retval=0014c7d0 ret=7e1b2459 0026:Call KERNEL32.InitializeCriticalSection(0013cefc) ret=7e1b2469 0026:Ret KERNEL32.InitializeCriticalSection() retval=00000001 ret=7e1b2469 0026:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1c73ab 0026:Ret KERNEL32.CreateEventW() retval=00000070 ret=7e1c73ab 0026:Call KERNEL32.CreateThread(00000000,00000000,7e1c5570,00000000,00000000,0013cedc) ret=7e1c73ef 0009:Ret KERNEL32.CreateThread() retval=00000064 ret=7e73560c 0009:Call KERNEL32.SetThreadPriority(00000064,0000000f) ret=7e73562d 0009:Ret KERNEL32.SetThreadPriority() retval=00000001 ret=7e73562d 0009:Ret winmm.PlaySoundW() retval=00000001 ret=01005c40 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,0000000c) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c5778 ret=0100a7d2 0009:Call user32.GetClientRect(00010030,0033f61c) ret=01005145 0009:Ret user32.GetClientRect() retval=00000001 ret=01005145 0009:Call user32.GetDC(00010030) ret=010051ad 0009:Ret user32.GetDC() retval=00000314 ret=010051ad 0009:Call gdi32.CreateCompatibleDC(00000314) ret=010051bc 0009:Ret gdi32.CreateCompatibleDC() retval=000013dc ret=010051bc 0009:Call gdi32.CreateCompatibleDC(00000314) ret=010051ca 0009:Ret gdi32.CreateCompatibleDC() retval=000013e8 ret=010051ca 0009:Call gdi32.CreateCompatibleDC(00000314) ret=010051d8 0009:Ret gdi32.CreateCompatibleDC() retval=000013f4 ret=010051d8 0009:Call gdi32.CreateCompatibleBitmap(00000314,00000047,00000060) ret=010051f8 0009:Ret gdi32.CreateCompatibleBitmap() retval=00001400 ret=010051f8 0009:Call gdi32.CreateCompatibleBitmap(00000314,00000047,00000060) ret=01005212 0009:Ret gdi32.CreateCompatibleBitmap() retval=00001404 ret=01005212 0009:Call gdi32.CreateCompatibleBitmap(00000314,00000047,00000060) ret=0100522c 0009:Ret gdi32.CreateCompatibleBitmap() retval=00001408 ret=0100522c 0009:Call gdi32.SelectObject(000013dc,00001400) ret=01005246 0009:Ret gdi32.SelectObject() retval=0000006c ret=01005246 0009:Call gdi32.SelectObject(000013e8,00001404) ret=0100525a 0009:Ret gdi32.SelectObject() retval=0000006c ret=0100525a 0009:Call gdi32.SelectObject(000013f4,00001408) ret=0100526e 0009:Ret gdi32.SelectObject() retval=0000006c ret=0100526e 0009:Call user32.LoadBitmapW(01000000,0033f5b4 L"CARD43") ret=010028ff 0027:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) 0027:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0027:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) 0027:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0027:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) 0027:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) retval=1 0027:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) 0027:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0027:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) 0027:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0027:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) 0027:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0027:Starting thread proc 0x7e1c5570 (arg=(nil)) 0027:Call KERNEL32.SetEvent(00000070) ret=7e1c55aa 0027:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c55aa 0026:Ret KERNEL32.CreateThread() retval=0000008c ret=7e1c73ef 0026:Call KERNEL32.SetThreadPriority(0000008c,0000000f) ret=7e1c7413 0026:Ret KERNEL32.SetThreadPriority() retval=00000001 ret=7e1c7413 0026:Call KERNEL32.WaitForSingleObject(00000070,ffffffff) ret=7e1c742f 0026:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1c742f 0026:Call KERNEL32.CloseHandle(00000070) ret=7e1c7443 0026:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1c7443 0026:Call ntdll.RtlFreeHeap(00110000,00000000,00148b18) ret=7e1c7479 0026:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e1c7479 0026:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bb,0014bf20,00000000,00000000) ret=7e1c4643 0026:Call KERNEL32.IsBadReadPtr(0014bf20,0000002c) ret=7e0bdbc9 0026:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 0026:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bb,007ceaa4,00000000,00000000) ret=7e0bdf33 0026:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 0026:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 0026:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0026:Ret winmm.waveOutOpen() retval=00000000 ret=7e0c0313 0026:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0026:Call ntdll.RtlAllocateHeap(00110000,00000000,000039ac) ret=7e73520d 0026:Ret ntdll.RtlAllocateHeap() retval=0014d3a0 ret=7e73520d 0026:Call msacm32.drv.wodMessage(0000ffff,00000007,0014bf20,0014d3a0,00000020) ret=7e728e1f 0026:Call winmm.waveOutPrepareHeader(00008001,0014d3a0,00000020) ret=7e0c09d8 0026:Call winealsa.drv.wodMessage(00000000,00000007,7e72ab2b,0014d3a0,00000020) ret=7e728e1f 0026:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 0026:Ret winmm.waveOutPrepareHeader() retval=00000000 ret=7e0c09d8 0026:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0026:Call msacm32.drv.wodMessage(0000ffff,00000007,0014bf20,0014d3c0,00000020) ret=7e728e1f 0026:Call winmm.waveOutPrepareHeader(00008001,0014d3c0,00000020) ret=7e0c09d8 0026:Call winealsa.drv.wodMessage(00000000,00000007,7e72ab2b,0014d3c0,00000020) ret=7e728e1f 0026:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 0026:Ret winmm.waveOutPrepareHeader() retval=00000000 ret=7e0c09d8 0026:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0026:Call KERNEL32.WaitForSingleObject(00000038,00000000) ret=7e735343 0026:Ret KERNEL32.WaitForSingleObject() retval=00000102 ret=7e735343 0026:Call msacm32.drv.wodMessage(0000ffff,00000009,0014bf20,0014d3a0,00000020) ret=7e728e1f 0026:Call winmm.waveOutWrite(00008001,0014d3a0,00000020) ret=7e0c09b5 0026:Call winealsa.drv.wodMessage(00000000,00000009,7e72ab2b,0014d3a0,00000020) ret=7e728e1f 0026:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0026:Ret winmm.waveOutWrite() retval=00000000 ret=7e0c09b5 0026:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0026:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 0026:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 0026:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 0026:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 0026:Call KERNEL32.WaitForSingleObject(00000068,ffffffff) ret=7e73429b 0009:Ret user32.LoadBitmapW() retval=00001418 ret=010028ff 0009:Call gdi32.CreateCompatibleDC(000013e8) ret=01002909 0009:Ret gdi32.CreateCompatibleDC() retval=0000142c ret=01002909 0009:Call gdi32.SelectObject(0000142c,00001418) ret=01002917 0009:Ret gdi32.SelectObject() retval=0000006c ret=01002917 0009:Call gdi32.BitBlt(000013e8,00000000,00000000,00000047,00000060,0000142c,00000000,00000000,00cc0020) ret=01002938 0009:Ret gdi32.BitBlt() retval=00000001 ret=01002938 0009:Call gdi32.SelectObject(0000142c,0000006c) ret=0100293e 0009:Ret gdi32.SelectObject() retval=00001418 ret=0100293e 0009:Call gdi32.DeleteObject(00001418) ret=01002947 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01002947 0009:Call gdi32.DeleteDC(0000142c) ret=0100294e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100294e 0009:Call gdi32.SetPixel(000013e8,00000000,00000000,00008000) ret=01002969 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002969 0009:Call gdi32.SetPixel(000013e8,00000001,00000000,00008000) ret=01002976 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002976 0009:Call gdi32.SetPixel(000013e8,00000000,00000001,00008000) ret=01002982 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002982 0009:Call gdi32.SetPixel(000013e8,00000046,00000000,00008000) ret=0100298f 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100298f 0009:Call gdi32.SetPixel(000013e8,00000045,00000000,00008000) ret=0100299c 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100299c 0009:Call gdi32.SetPixel(000013e8,00000046,00000001,00008000) ret=010029ab 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ab 0009:Call gdi32.SetPixel(000013e8,00000000,0000005f,00008000) ret=010029bf 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029bf 0009:Call gdi32.SetPixel(000013e8,00000001,0000005f,00008000) ret=010029d0 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029d0 0009:Call gdi32.SetPixel(000013e8,00000000,0000005e,00008000) ret=010029de 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029de 0009:Call gdi32.SetPixel(000013e8,00000046,0000005f,00008000) ret=010029ef 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ef 0009:Call gdi32.SetPixel(000013e8,00000045,0000005f,00008000) ret=01002a00 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a00 0009:Call gdi32.SetPixel(000013e8,00000046,0000005e,00008000) ret=01002a11 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a11 0009:Call user32.LoadBitmapW(01000000,010012c8 L"CARDBACK") ret=010028ff 0009:Ret user32.LoadBitmapW() retval=00001444 ret=010028ff 0009:Call gdi32.CreateCompatibleDC(000013dc) ret=01002909 0009:Ret gdi32.CreateCompatibleDC() retval=00001458 ret=01002909 0009:Call gdi32.SelectObject(00001458,00001444) ret=01002917 0009:Ret gdi32.SelectObject() retval=0000006c ret=01002917 0009:Call gdi32.BitBlt(000013dc,00000000,00000000,00000047,00000060,00001458,00000000,00000000,00cc0020) ret=01002938 0009:Ret gdi32.BitBlt() retval=00000001 ret=01002938 0009:Call gdi32.SelectObject(00001458,0000006c) ret=0100293e 0009:Ret gdi32.SelectObject() retval=00001444 ret=0100293e 0009:Call gdi32.DeleteObject(00001444) ret=01002947 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01002947 0009:Call gdi32.DeleteDC(00001458) ret=0100294e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100294e 0009:Call gdi32.SetPixel(000013dc,00000000,00000000,00008000) ret=01002969 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002969 0009:Call gdi32.SetPixel(000013dc,00000001,00000000,00008000) ret=01002976 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002976 0009:Call gdi32.SetPixel(000013dc,00000000,00000001,00008000) ret=01002982 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002982 0009:Call gdi32.SetPixel(000013dc,00000046,00000000,00008000) ret=0100298f 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100298f 0009:Call gdi32.SetPixel(000013dc,00000045,00000000,00008000) ret=0100299c 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100299c 0009:Call gdi32.SetPixel(000013dc,00000046,00000001,00008000) ret=010029ab 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ab 0009:Call gdi32.SetPixel(000013dc,00000000,0000005f,00008000) ret=010029bf 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029bf 0009:Call gdi32.SetPixel(000013dc,00000001,0000005f,00008000) ret=010029d0 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029d0 0009:Call gdi32.SetPixel(000013dc,00000000,0000005e,00008000) ret=010029de 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029de 0009:Call gdi32.SetPixel(000013dc,00000046,0000005f,00008000) ret=010029ef 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ef 0009:Call gdi32.SetPixel(000013dc,00000045,0000005f,00008000) ret=01002a00 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a00 0009:Call gdi32.SetPixel(000013dc,00000046,0000005e,00008000) ret=01002a11 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a11 0009:Call winmm.timeGetTime() ret=010047d1 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00001a39 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00001a39 ret=010047d1 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00001a39 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00001a39 ret=01004881 0009:Call gdi32.BitBlt(000013dc,00000000,00000000,00000048,00000061,000013dc,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00000314,00000441,00000258,00000047,00000060,000013e8,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00001a3f ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00001a3f ret=01004881 0009:Call gdi32.BitBlt(000013f4,00000000,0000003f,00000047,00000021,000013dc,00000000,0000003f,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000013f4,0000003c,00000000,0000000b,0000003f,000013dc,0000003c,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000013dc,0000000b,00000021,0000003d,00000040,000013dc,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(000013dc,00000000,00000000,00000047,00000021,00000314,00000436,00000237,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000013dc,00000000,00000021,0000000b,0000003f,00000314,00000436,00000258,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000436,00000237,00000047,00000060,000013e8,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000441,00000297,00000047,00000021,000013f4,00000000,0000003f,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000047d,00000258,0000000b,0000003f,000013f4,0000003c,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00001a47 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00001a47 ret=01004881 0009:Call gdi32.BitBlt(000013f4,00000000,00000033,00000047,0000002d,000013dc,00000000,00000033,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000013f4,00000039,00000000,0000000e,00000033,000013dc,00000039,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000013dc,0000000e,0000002d,0000003a,00000034,000013dc,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(000013dc,00000000,00000000,00000047,0000002d,00000314,00000428,0000020a,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000013dc,00000000,0000002d,0000000e,00000033,00000314,00000428,00000237,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000428,0000020a,00000047,00000060,000013e8,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000436,0000026a,00000047,0000002d,000013f4,00000000,00000033,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000046f,00000237,0000000e,00000033,000013f4,00000039,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00001a4f ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00001a4f ret=01004881 0009:Call gdi32.BitBlt(000013f4,00000000,00000033,00000047,0000002d,000013dc,00000000,00000033,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000013f4,00000038,00000000,0000000f,00000033,000013dc,00000038,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000013dc,0000000f,0000002d,00000039,00000034,000013dc,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(000013dc,00000000,00000000,00000047,0000002d,00000314,00000419,000001dd,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000013dc,00000000,0000002d,0000000f,00000033,00000314,00000419,0000020a,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000419,000001dd,00000047,00000060,000013e8,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000428,0000023d,00000047,0000002d,000013f4,00000000,00000033,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000460,0000020a,0000000f,00000033,000013f4,00000038,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00001a57 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00001a57 ret=01004881 0009:Call gdi32.BitBlt(000013f4,00000000,00000033,00000047,0000002d,000013dc,00000000,00000033,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000013f4,00000038,00000000,0000000f,00000033,000013dc,00000038,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000013dc,0000000f,0000002d,00000039,00000034,000013dc,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(000013dc,00000000,00000000,00000047,0000002d,00000314,0000040a,000001b0,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000013dc,00000000,0000002d,0000000f,00000033,00000314,0000040a,000001dd,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,0000040a,000001b0,00000047,00000060,000013e8,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000419,00000210,00000047,0000002d,000013f4,00000000,00000033,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000451,000001dd,0000000f,00000033,000013f4,00000038,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00001a5f ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00001a5f ret=01004881 0009:Call gdi32.BitBlt(000013f4,00000000,00000033,00000047,0000002d,000013dc,00000000,00000033,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000013f4,00000039,00000000,0000000e,00000033,000013dc,00000039,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000013dc,0000000e,0000002d,0000003a,00000034,000013dc,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(000013dc,00000000,00000000,00000047,0000002d,00000314,000003fc,00000183,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000013dc,00000000,0000002d,0000000e,00000033,00000314,000003fc,000001b0,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000003fc,00000183,00000047,00000060,000013e8,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,0000040a,000001e3,00000047,0000002d,000013f4,00000000,00000033,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000443,000001b0,0000000e,00000033,000013f4,00000039,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00001a67 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00001a67 ret=01004881 0009:Call gdi32.BitBlt(000013f4,00000000,00000033,00000047,0000002d,000013dc,00000000,00000033,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000013f4,00000038,00000000,0000000f,00000033,000013dc,00000038,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000013dc,0000000f,0000002d,00000039,00000034,000013dc,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(000013dc,00000000,00000000,00000047,0000002d,00000314,000003ed,00000156,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000013dc,00000000,0000002d,0000000f,00000033,00000314,000003ed,00000183,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000003ed,00000156,00000047,00000060,000013e8,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000003fc,000001b6,00000047,0000002d,000013f4,00000000,00000033,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000434,00000183,0000000f,00000033,000013f4,00000038,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00001a6f ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00001a6f ret=01004881 0009:Call gdi32.BitBlt(000013f4,00000000,00000033,00000047,0000002d,000013dc,00000000,00000033,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000013f4,00000038,00000000,0000000f,00000033,000013dc,00000038,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000013dc,0000000f,0000002d,00000039,00000034,000013dc,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(000013dc,00000000,00000000,00000047,0000002d,00000314,000003de,00000129,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000013dc,00000000,0000002d,0000000f,00000033,00000314,000003de,00000156,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000003de,00000129,00000047,00000060,000013e8,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000003ed,00000189,00000047,0000002d,000013f4,00000000,00000033,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000425,00000156,0000000f,00000033,000013f4,00000038,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00001a77 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00001a77 ret=01004881 0009:Call gdi32.BitBlt(000013f4,00000000,00000033,00000047,0000002d,000013dc,00000000,00000033,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000013f4,00000038,00000000,0000000f,00000033,000013dc,00000038,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000013dc,0000000f,0000002d,00000039,00000034,000013dc,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(000013dc,00000000,00000000,00000047,0000002d,00000314,000003cf,000000fc,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000013dc,00000000,0000002d,0000000f,00000033,00000314,000003cf,00000129,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000003cf,000000fc,00000047,00000060,000013e8,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000003de,0000015c,00000047,0000002d,000013f4,00000000,00000033,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000416,00000129,0000000f,00000033,000013f4,00000038,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00001a7f ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00001a7f ret=01004881 0009:Call gdi32.BitBlt(000013f4,00000000,00000033,00000047,0000002d,000013dc,00000000,00000033,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000013f4,00000039,00000000,0000000e,00000033,000013dc,00000039,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000013dc,0000000e,0000002d,0000003a,00000034,000013dc,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(000013dc,00000000,00000000,00000047,0000002d,00000314,000003c1,000000cf,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000013dc,00000000,0000002d,0000000e,00000033,00000314,000003c1,000000fc,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000003c1,000000cf,00000047,00000060,000013e8,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000003cf,0000012f,00000047,0000002d,000013f4,00000000,00000033,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000408,000000fc,0000000e,00000033,000013f4,00000039,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00001a87 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00001a87 ret=01004881 0009:Call gdi32.BitBlt(000013f4,00000000,00000033,00000047,0000002d,000013dc,00000000,00000033,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000013f4,00000038,00000000,0000000f,00000033,000013dc,00000038,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000013dc,0000000f,0000002d,00000039,00000034,000013dc,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(000013dc,00000000,00000000,00000047,0000002d,00000314,000003b2,000000a2,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000013dc,00000000,0000002d,0000000f,00000033,00000314,000003b2,000000cf,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000003b2,000000a2,00000047,00000060,000013e8,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000003c1,00000102,00000047,0000002d,000013f4,00000000,00000033,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,000003f9,000000cf,0000000f,00000033,000013f4,00000038,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00001a8f ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00001a8f ret=01004881 0009:Call gdi32.BitBlt(000013f4,00000000,00000033,00000047,0000002d,000013dc,00000000,00000033,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000013f4,00000038,00000000,0000000f,00000033,000013dc,00000038,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000013dc,0000000f,0000002d,00000039,00000034,000013dc,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(000013dc,00000000,00000000,00000047,0000002d,00000314,000003a3,00000075,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000013dc,00000000,0000002d,0000000f,00000033,00000314,000003a3,000000a2,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000003a3,00000075,00000047,00000060,000013e8,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000003b2,000000d5,00000047,0000002d,000013f4,00000000,00000033,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,000003ea,000000a2,0000000f,00000033,000013f4,00000038,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00001a97 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00001a97 ret=01004881 0009:Call gdi32.BitBlt(000013f4,00000000,00000033,00000047,0000002d,000013dc,00000000,00000033,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000013f4,00000039,00000000,0000000e,00000033,000013dc,00000039,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000013dc,0000000e,0000002d,0000003a,00000034,000013dc,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(000013dc,00000000,00000000,00000047,0000002d,00000314,00000395,00000048,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000013dc,00000000,0000002d,0000000e,00000033,00000314,00000395,00000075,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000395,00000048,00000047,00000060,000013e8,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000003a3,000000a8,00000047,0000002d,000013f4,00000000,00000033,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,000003dc,00000075,0000000e,00000033,000013f4,00000039,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00001a9f ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00001a9f ret=01004881 0009:Call gdi32.BitBlt(000013f4,00000000,0000003e,00000047,00000022,000013dc,00000000,0000003e,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000013f4,0000003b,00000000,0000000c,0000003e,000013dc,0000003b,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000013dc,0000000c,00000022,0000003c,0000003f,000013dc,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(000013dc,00000000,00000000,00000047,00000022,00000314,00000389,00000026,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000013dc,00000000,00000022,0000000c,0000003e,00000314,00000389,00000048,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000389,00000026,00000047,00000060,000013e8,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000395,00000086,00000047,00000022,000013f4,00000000,0000003e,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,000003d0,00000048,0000000c,0000003e,000013f4,0000003b,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call gdi32.SelectObject(000013dc,0000006c) ret=01005316 0009:Ret gdi32.SelectObject() retval=00001400 ret=01005316 0009:Call gdi32.SelectObject(000013e8,0000006c) ret=01005324 0009:Ret gdi32.SelectObject() retval=00001404 ret=01005324 0009:Call gdi32.SelectObject(000013f4,0000006c) ret=01005332 0009:Ret gdi32.SelectObject() retval=00001408 ret=01005332 0009:Call gdi32.DeleteObject(00001400) ret=01005340 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005340 0009:Call gdi32.DeleteObject(00001404) ret=01005348 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005348 0009:Call gdi32.DeleteObject(00001408) ret=01005350 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005350 0009:Call gdi32.DeleteDC(000013dc) ret=0100535e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100535e 0009:Call gdi32.DeleteDC(000013e8) ret=01005366 0009:Ret gdi32.DeleteDC() retval=00000001 ret=01005366 0009:Call gdi32.DeleteDC(000013f4) ret=0100536e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100536e 0009:Call user32.ReleaseDC(00010030,00000314) ret=0100537c 0009:Ret user32.ReleaseDC() retval=00000001 ret=0100537c 0009:Call user32.InvalidateRect(00010030,0033f62c,00000000) ret=0100538a 0009:Ret user32.InvalidateRect() retval=00000001 ret=0100538a 0009:Call KERNEL32.GetModuleHandleW(00000000) ret=01005c37 0009:Ret KERNEL32.GetModuleHandleW() retval=01000000 ret=01005c37 0009:Call winmm.PlaySoundW(0000007c,01000000,00040007) ret=01005c40 0009:Call ntdll.RtlAllocateHeap(00110000,00000008,0000001c) ret=7e7356bc 0009:Ret ntdll.RtlAllocateHeap() retval=00148bb0 ret=7e7356bc 0009:Call KERNEL32.ResetEvent(00000040) ret=7e735513 0009:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e735513 0009:Call KERNEL32.SetEvent(00000038) ret=7e735520 0009:Ret KERNEL32.SetEvent() retval=00000001 ret=7e735520 0009:Call msacm32.drv.wodMessage(0000ffff,0000000c,0014bf20,00000000,00000000) ret=7e728e1f 0009:Call winmm.waveOutReset(00008001) ret=7e0c0180 0009:Call winealsa.drv.wodMessage(00000000,0000000c,7e72ab2b,00000000,00000000) ret=7e728e1f 0009:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1b2580 0009:Ret KERNEL32.CreateEventW() retval=00000070 ret=7e1b2580 0027:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bd,0014bf20,0014d3a0,00000000) ret=7e1c4643 0027:Call KERNEL32.IsBadReadPtr(0014bf20,0000002c) ret=7e0bdbc9 0027:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 0027:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bd,007ceaa4,0014d3a0,00000000) ret=7e0bdf33 0027:Call KERNEL32.SetEvent(00000068) ret=7e7341f6 0027:Ret KERNEL32.SetEvent() retval=00000001 ret=7e7341f6 0027:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 0027:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 0027:Call KERNEL32.SetEvent(00000070) ret=7e1c4f3d 0027:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c4f3d 0026:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e73429b 0026:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 0026:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 0026:Call msacm32.drv.wodMessage(0000ffff,0000000c,0014bf20,00000000,00000000) ret=7e728e1f 0026:Call winmm.waveOutReset(00008001) ret=7e0c0180 0026:Call winealsa.drv.wodMessage(00000000,0000000c,7e72ab2b,00000000,00000000) ret=7e728e1f 0026:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1b2580 0026:Ret KERNEL32.CreateEventW() retval=00000090 ret=7e1b2580 0027:Call KERNEL32.SetEvent(00000090) ret=7e1c4f3d 0027:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c4f3d 0026:Call KERNEL32.WaitForSingleObject(00000090,ffffffff) ret=7e1b2635 0026:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1b2635 0026:Call KERNEL32.CloseHandle(00000090) ret=7e1b2640 0026:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1b2640 0026:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0026:Ret winmm.waveOutReset() retval=00000000 ret=7e0c0180 0026:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0026:Call msacm32.drv.wodMessage(0000ffff,00000008,0014bf20,0014d3a0,00000020) ret=7e728e1f 0026:Call winmm.waveOutUnprepareHeader(00008001,0014d3a0,00000020) ret=7e0c00b6 0026:Call winealsa.drv.wodMessage(00000000,00000008,7e72ab2b,0014d3a0,00000020) ret=7e728e1f 0026:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 0026:Ret winmm.waveOutUnprepareHeader() retval=00000000 ret=7e0c00b6 0026:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0026:Call msacm32.drv.wodMessage(0000ffff,00000008,0014bf20,0014d3c0,00000020) ret=7e728e1f 0026:Call winmm.waveOutUnprepareHeader(00008001,0014d3c0,00000020) ret=7e0c00b6 0026:Call winealsa.drv.wodMessage(00000000,00000008,7e72ab2b,0014d3c0,00000020) ret=7e728e1f 0026:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 0026:Ret winmm.waveOutUnprepareHeader() retval=00000000 ret=7e0c00b6 0026:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0026:Call KERNEL32.CloseHandle(00000068) ret=7e7349fd 0026:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e7349fd 0026:Call ntdll.RtlFreeHeap(00110000,00000000,0014d3a0) ret=7e734a23 0026:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e734a23 0026:Call ntdll.RtlFreeHeap(00110000,00000000,00148cb8) ret=7e734a49 0026:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e734a49 0026:Call msacm32.drv.wodMessage(0000ffff,00000006,0014bf20,00000000,00000000) ret=7e728e1f 0026:Call winmm.waveOutClose(00008001) ret=7e0c01a5 0026:Call winealsa.drv.wodMessage(00000000,00000006,7e72ab2b,00000000,00000000) ret=7e728e1f 0026:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1b2580 0026:Ret KERNEL32.CreateEventW() retval=00000068 ret=7e1b2580 0027:Call KERNEL32.SetEvent(00000068) ret=7e1c4ea1 0027:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c4ea1 0027:Call KERNEL32.ExitThread(00000000) ret=7e1c4eb0 0027:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) 0027:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0027:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) 0027:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0027:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) 0027:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0027:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) 0027:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) retval=1 0027:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) 0027:Call KERNEL32.TlsGetValue(00000000) ret=7e3f4071 0027:Ret KERNEL32.TlsGetValue() retval=00000000 ret=7e3f4071 0027:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0027:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) 0027:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0026:Call KERNEL32.WaitForSingleObject(00000068,ffffffff) ret=7e1b2635 0026:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1b2635 0026:Call KERNEL32.CloseHandle(00000068) ret=7e1b2640 0009:Call KERNEL32.WaitForSingleObject(00000070,ffffffff) ret=7e1b2635 0026:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1b2640 0026:Call ntdll.RtlFreeHeap(00110000,00000000,0014c7d0) ret=7e1b24dc 0026:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e1b24dc 0026:Call ntdll.RtlDeleteCriticalSection(0013cefc) ret=7e1b24fb 0026:Ret ntdll.RtlDeleteCriticalSection() retval=00000000 ret=7e1b24fb 0026:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bc,0014bf20,00000000,00000000) ret=7e1c4643 0026:Call KERNEL32.IsBadReadPtr(0014bf20,0000002c) ret=7e0bdbc9 0026:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 0026:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bc,007ceaa4,00000000,00000000) ret=7e0bdf33 0026:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 0026:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 0026:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0026:Call ntdll.RtlFreeHeap(00110000,00000000,0014bf58) ret=7e72ae0b 0026:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e72ae0b 0026:Ret winmm.waveOutClose() retval=00000000 ret=7e0c01a5 0026:Call ntdll.RtlFreeHeap(00110000,00000000,0014bf20) ret=7e0c01f7 0026:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e0c01f7 0026:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0026:Call ntdll.RtlFreeHeap(00110000,00000000,0014bef8) ret=7e72ae0b 0026:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e72ae0b 0009:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1b2635 0009:Call KERNEL32.CloseHandle(00000070) ret=7e1b2640 0009:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1b2640 0009:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0009:Ret winmm.waveOutReset() retval=00000000 ret=7e0c0180 0009:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0009:Call KERNEL32.WaitForSingleObject(00000040,ffffffff) ret=7e73555a 0026:Call ntdll.RtlFreeHeap(00110000,00000000,00148c28) ret=7e731f79 0026:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e731f79 0026:Call KERNEL32.SetEvent(00000040) ret=7e7343a0 0009:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e73555a 0026:Ret KERNEL32.SetEvent() retval=00000001 ret=7e7343a0 0026:Call KERNEL32.CloseHandle(00000064) ret=7e734340 0009:Call KERNEL32.ResetEvent(00000038) ret=7e735572 0009:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e735572 0009:Call KERNEL32.CreateThread(00000000,00000000,7e7348a0,00148bb0,00000000,0033f5a8) ret=7e73560c 0026:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e734340 0026:Call ntdll.RtlFreeHeap(00110000,00000000,0014bf80) ret=7e734360 0026:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e734360 0026:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) 0026:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0026:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) 0026:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0026:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) 0026:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0026:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) 0026:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) retval=1 0026:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) 0026:Call KERNEL32.TlsGetValue(00000000) ret=7e3f4071 0026:Ret KERNEL32.TlsGetValue() retval=00000000 ret=7e3f4071 0026:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0026:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) 0026:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0028:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) 0028:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0028:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) 0028:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0028:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) 0028:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) retval=1 0028:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) 0028:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0028:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) 0028:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0028:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) 0028:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0028:Starting thread proc 0x7e7348a0 (arg=0x148bb0) 0028:Call KERNEL32.FindResourceW(01000000,0000007c,7e741bde L"WAVE") ret=7e734ca3 0028:Ret KERNEL32.FindResourceW() retval=01014c40 ret=7e734ca3 0028:Call KERNEL32.LoadResource(01000000,01014c40) ret=7e734cb9 0028:Ret KERNEL32.LoadResource() retval=0104d668 ret=7e734cb9 0028:Call KERNEL32.LockResource(0104d668) ret=7e734cce 0028:Ret KERNEL32.LockResource() retval=0104d668 ret=7e734cce 0028:Call KERNEL32.FreeResource(0104d668) ret=7e734ce9 0028:Ret KERNEL32.FreeResource() retval=00000000 ret=7e734ce9 0028:Call ntdll.RtlAllocateHeap(00110000,00000008,0000005c) ret=7e733960 0028:Ret ntdll.RtlAllocateHeap() retval=00148c28 ret=7e733960 0028:Call KERNEL32.GetFileSize(ffffffff,00000000) ret=7e733ab9 0028:Ret KERNEL32.GetFileSize() retval=ffffffff ret=7e733ab9 0028:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7e733cf0 0028:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e733cf0 0028:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7e734e1c 0028:Ret ntdll.RtlAllocateHeap() retval=00148cb8 ret=7e734e1c 0028:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e734f1f 0028:Ret KERNEL32.CreateEventW() retval=00000068 ret=7e734f1f 0028:Call ntdll.RtlAllocateHeap(00110000,00000008,0000001c) ret=7e72abbe 0028:Ret ntdll.RtlAllocateHeap() retval=0014bef8 ret=7e72abbe 0028:Call msacm32.drv.wodMessage(0000ffff,00000005,008ce918,008ce970,00030000) ret=7e728e1f 0028:Call ntdll.RtlAllocateHeap(00110000,00000000,0000002c) ret=7e0bfd8c 0028:Ret ntdll.RtlAllocateHeap() retval=0014bf20 ret=7e0bfd8c 0028:Call winmm.waveOutGetNumDevs() ret=7e0bfdb5 0028:Ret winmm.waveOutGetNumDevs() retval=00000002 ret=7e0bfdb5 0028:Call winmm.waveOutOpen(0014bf28,00000000,00148cb8,7e0bde60,0014bf20,00030008) ret=7e0c0313 0028:Call ntdll.RtlAllocateHeap(00110000,00000008,0000001c) ret=7e72abbe 0028:Ret ntdll.RtlAllocateHeap() retval=0014bf58 ret=7e72abbe 0028:Call winealsa.drv.wodMessage(00000000,00000005,008ce5b8,008ce610,00030008) ret=7e728e1f 0028:Call ntdll.RtlAllocateHeap(00110000,00000008,00000068) ret=7e1c6c82 0028:Ret ntdll.RtlAllocateHeap() retval=00148b18 ret=7e1c6c82 0028:Call ntdll.RtlAllocateHeap(00110000,00000008,00000300) ret=7e1b2459 0028:Ret ntdll.RtlAllocateHeap() retval=0014c7d0 ret=7e1b2459 0028:Call KERNEL32.InitializeCriticalSection(0013cefc) ret=7e1b2469 0028:Ret KERNEL32.InitializeCriticalSection() retval=00000001 ret=7e1b2469 0028:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1c73ab 0028:Ret KERNEL32.CreateEventW() retval=00000070 ret=7e1c73ab 0028:Call KERNEL32.CreateThread(00000000,00000000,7e1c5570,00000000,00000000,0013cedc) ret=7e1c73ef 0009:Ret KERNEL32.CreateThread() retval=00000064 ret=7e73560c 0009:Call KERNEL32.SetThreadPriority(00000064,0000000f) ret=7e73562d 0009:Ret KERNEL32.SetThreadPriority() retval=00000001 ret=7e73562d 0009:Ret winmm.PlaySoundW() retval=00000001 ret=01005c40 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,0000000c) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c5790 ret=0100a7d2 0009:Call user32.GetClientRect(00010030,0033f61c) ret=01005145 0009:Ret user32.GetClientRect() retval=00000001 ret=01005145 0009:Call user32.GetDC(00010030) ret=010051ad 0009:Ret user32.GetDC() retval=00000314 ret=010051ad 0009:Call gdi32.CreateCompatibleDC(00000314) ret=010051bc 0009:Ret gdi32.CreateCompatibleDC() retval=00001468 ret=010051bc 0009:Call gdi32.CreateCompatibleDC(00000314) ret=010051ca 0009:Ret gdi32.CreateCompatibleDC() retval=00001474 ret=010051ca 0009:Call gdi32.CreateCompatibleDC(00000314) ret=010051d8 0009:Ret gdi32.CreateCompatibleDC() retval=00001480 ret=010051d8 0009:Call gdi32.CreateCompatibleBitmap(00000314,00000047,00000060) ret=010051f8 0009:Ret gdi32.CreateCompatibleBitmap() retval=0000148c ret=010051f8 0009:Call gdi32.CreateCompatibleBitmap(00000314,00000047,00000060) ret=01005212 0009:Ret gdi32.CreateCompatibleBitmap() retval=00001490 ret=01005212 0009:Call gdi32.CreateCompatibleBitmap(00000314,00000047,00000060) ret=0100522c 0009:Ret gdi32.CreateCompatibleBitmap() retval=00001494 ret=0100522c 0009:Call gdi32.SelectObject(00001468,0000148c) ret=01005246 0009:Ret gdi32.SelectObject() retval=0000006c ret=01005246 0009:Call gdi32.SelectObject(00001474,00001490) ret=0100525a 0009:Ret gdi32.SelectObject() retval=0000006c ret=0100525a 0009:Call gdi32.SelectObject(00001480,00001494) ret=0100526e 0009:Ret gdi32.SelectObject() retval=0000006c ret=0100526e 0009:Call user32.LoadBitmapW(01000000,0033f5b4 L"CARD46") ret=010028ff 0029:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) 0029:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0029:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) 0029:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0029:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) 0029:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) retval=1 0029:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) 0029:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0029:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) 0029:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0029:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) 0029:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0029:Starting thread proc 0x7e1c5570 (arg=(nil)) 0029:Call KERNEL32.SetEvent(00000070) ret=7e1c55aa 0029:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c55aa 0028:Ret KERNEL32.CreateThread() retval=00000090 ret=7e1c73ef 0028:Call KERNEL32.SetThreadPriority(00000090,0000000f) ret=7e1c7413 0028:Ret KERNEL32.SetThreadPriority() retval=00000001 ret=7e1c7413 0028:Call KERNEL32.WaitForSingleObject(00000070,ffffffff) ret=7e1c742f 0028:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1c742f 0028:Call KERNEL32.CloseHandle(00000070) ret=7e1c7443 0028:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1c7443 0028:Call ntdll.RtlFreeHeap(00110000,00000000,00148b18) ret=7e1c7479 0028:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e1c7479 0028:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bb,0014bf20,00000000,00000000) ret=7e1c4643 0028:Call KERNEL32.IsBadReadPtr(0014bf20,0000002c) ret=7e0bdbc9 0028:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 0028:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bb,008ceaa4,00000000,00000000) ret=7e0bdf33 0028:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 0028:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 0028:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0028:Ret winmm.waveOutOpen() retval=00000000 ret=7e0c0313 0028:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0028:Call ntdll.RtlAllocateHeap(00110000,00000000,000039ac) ret=7e73520d 0028:Ret ntdll.RtlAllocateHeap() retval=0014d3a0 ret=7e73520d 0028:Call msacm32.drv.wodMessage(0000ffff,00000007,0014bf20,0014d3a0,00000020) ret=7e728e1f 0028:Call winmm.waveOutPrepareHeader(00008001,0014d3a0,00000020) ret=7e0c09d8 0028:Call winealsa.drv.wodMessage(00000000,00000007,7e72ab2b,0014d3a0,00000020) ret=7e728e1f 0028:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 0028:Ret winmm.waveOutPrepareHeader() retval=00000000 ret=7e0c09d8 0028:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0028:Call msacm32.drv.wodMessage(0000ffff,00000007,0014bf20,0014d3c0,00000020) ret=7e728e1f 0028:Call winmm.waveOutPrepareHeader(00008001,0014d3c0,00000020) ret=7e0c09d8 0028:Call winealsa.drv.wodMessage(00000000,00000007,7e72ab2b,0014d3c0,00000020) ret=7e728e1f 0028:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 0028:Ret winmm.waveOutPrepareHeader() retval=00000000 ret=7e0c09d8 0028:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0028:Call KERNEL32.WaitForSingleObject(00000038,00000000) ret=7e735343 0028:Ret KERNEL32.WaitForSingleObject() retval=00000102 ret=7e735343 0028:Call msacm32.drv.wodMessage(0000ffff,00000009,0014bf20,0014d3a0,00000020) ret=7e728e1f 0028:Call winmm.waveOutWrite(00008001,0014d3a0,00000020) ret=7e0c09b5 0028:Call winealsa.drv.wodMessage(00000000,00000009,7e72ab2b,0014d3a0,00000020) ret=7e728e1f 0028:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0028:Ret winmm.waveOutWrite() retval=00000000 ret=7e0c09b5 0028:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0028:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 0028:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 0028:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 0028:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 0028:Call KERNEL32.WaitForSingleObject(00000068,ffffffff) ret=7e73429b 0009:Ret user32.LoadBitmapW() retval=000014a4 ret=010028ff 0009:Call gdi32.CreateCompatibleDC(00001474) ret=01002909 0009:Ret gdi32.CreateCompatibleDC() retval=000014b8 ret=01002909 0009:Call gdi32.SelectObject(000014b8,000014a4) ret=01002917 0009:Ret gdi32.SelectObject() retval=0000006c ret=01002917 0009:Call gdi32.BitBlt(00001474,00000000,00000000,00000047,00000060,000014b8,00000000,00000000,00cc0020) ret=01002938 0009:Ret gdi32.BitBlt() retval=00000001 ret=01002938 0009:Call gdi32.SelectObject(000014b8,0000006c) ret=0100293e 0009:Ret gdi32.SelectObject() retval=000014a4 ret=0100293e 0009:Call gdi32.DeleteObject(000014a4) ret=01002947 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01002947 0009:Call gdi32.DeleteDC(000014b8) ret=0100294e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100294e 0009:Call gdi32.SetPixel(00001474,00000000,00000000,00008000) ret=01002969 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002969 0009:Call gdi32.SetPixel(00001474,00000001,00000000,00008000) ret=01002976 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002976 0009:Call gdi32.SetPixel(00001474,00000000,00000001,00008000) ret=01002982 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002982 0009:Call gdi32.SetPixel(00001474,00000046,00000000,00008000) ret=0100298f 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100298f 0009:Call gdi32.SetPixel(00001474,00000045,00000000,00008000) ret=0100299c 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100299c 0009:Call gdi32.SetPixel(00001474,00000046,00000001,00008000) ret=010029ab 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ab 0009:Call gdi32.SetPixel(00001474,00000000,0000005f,00008000) ret=010029bf 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029bf 0009:Call gdi32.SetPixel(00001474,00000001,0000005f,00008000) ret=010029d0 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029d0 0009:Call gdi32.SetPixel(00001474,00000000,0000005e,00008000) ret=010029de 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029de 0009:Call gdi32.SetPixel(00001474,00000046,0000005f,00008000) ret=010029ef 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ef 0009:Call gdi32.SetPixel(00001474,00000045,0000005f,00008000) ret=01002a00 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a00 0009:Call gdi32.SetPixel(00001474,00000046,0000005e,00008000) ret=01002a11 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a11 0009:Call user32.LoadBitmapW(01000000,010012c8 L"CARDBACK") ret=010028ff 0009:Ret user32.LoadBitmapW() retval=000014d0 ret=010028ff 0009:Call gdi32.CreateCompatibleDC(00001468) ret=01002909 0009:Ret gdi32.CreateCompatibleDC() retval=000014e4 ret=01002909 0009:Call gdi32.SelectObject(000014e4,000014d0) ret=01002917 0009:Ret gdi32.SelectObject() retval=0000006c ret=01002917 0009:Call gdi32.BitBlt(00001468,00000000,00000000,00000047,00000060,000014e4,00000000,00000000,00cc0020) ret=01002938 0009:Ret gdi32.BitBlt() retval=00000001 ret=01002938 0009:Call gdi32.SelectObject(000014e4,0000006c) ret=0100293e 0009:Ret gdi32.SelectObject() retval=000014d0 ret=0100293e 0009:Call gdi32.DeleteObject(000014d0) ret=01002947 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01002947 0009:Call gdi32.DeleteDC(000014e4) ret=0100294e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100294e 0009:Call gdi32.SetPixel(00001468,00000000,00000000,00008000) ret=01002969 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002969 0009:Call gdi32.SetPixel(00001468,00000001,00000000,00008000) ret=01002976 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002976 0009:Call gdi32.SetPixel(00001468,00000000,00000001,00008000) ret=01002982 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002982 0009:Call gdi32.SetPixel(00001468,00000046,00000000,00008000) ret=0100298f 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100298f 0009:Call gdi32.SetPixel(00001468,00000045,00000000,00008000) ret=0100299c 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100299c 0009:Call gdi32.SetPixel(00001468,00000046,00000001,00008000) ret=010029ab 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ab 0009:Call gdi32.SetPixel(00001468,00000000,0000005f,00008000) ret=010029bf 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029bf 0009:Call gdi32.SetPixel(00001468,00000001,0000005f,00008000) ret=010029d0 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029d0 0009:Call gdi32.SetPixel(00001468,00000000,0000005e,00008000) ret=010029de 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029de 0009:Call gdi32.SetPixel(00001468,00000046,0000005f,00008000) ret=010029ef 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ef 0009:Call gdi32.SetPixel(00001468,00000045,0000005f,00008000) ret=01002a00 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a00 0009:Call gdi32.SetPixel(00001468,00000046,0000005e,00008000) ret=01002a11 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a11 0009:Call winmm.timeGetTime() ret=010047d1 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00001abb ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00001abb ret=010047d1 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00001abb ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00001abb ret=01004881 0009:Call gdi32.BitBlt(00001468,00000000,00000000,00000048,00000061,00001468,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00000314,00000441,00000258,00000047,00000060,00001474,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00001ac3 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00001ac3 ret=01004881 0009:Call gdi32.BitBlt(00001480,00000000,00000034,00000047,0000002c,00001468,00000000,00000034,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001480,00000043,00000000,00000004,00000034,00001468,00000043,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001468,00000004,0000002c,00000044,00000035,00001468,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001468,00000000,00000000,00000047,0000002c,00000314,0000043d,0000022c,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001468,00000000,0000002c,00000004,00000034,00000314,0000043d,00000258,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,0000043d,0000022c,00000047,00000060,00001474,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000441,0000028c,00000047,0000002c,00001480,00000000,00000034,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000484,00000258,00000004,00000034,00001480,00000043,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00001acb ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00001acb ret=01004881 0009:Call gdi32.BitBlt(00001480,00000000,00000033,00000047,0000002d,00001468,00000000,00000033,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001480,00000042,00000000,00000005,00000033,00001468,00000042,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001468,00000005,0000002d,00000043,00000034,00001468,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001468,00000000,00000000,00000047,0000002d,00000314,00000438,000001ff,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001468,00000000,0000002d,00000005,00000033,00000314,00000438,0000022c,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000438,000001ff,00000047,00000060,00001474,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,0000043d,0000025f,00000047,0000002d,00001480,00000000,00000033,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000047f,0000022c,00000005,00000033,00001480,00000042,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00001ad3 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00001ad3 ret=01004881 0009:Call gdi32.BitBlt(00001480,00000000,00000033,00000047,0000002d,00001468,00000000,00000033,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001480,00000042,00000000,00000005,00000033,00001468,00000042,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001468,00000005,0000002d,00000043,00000034,00001468,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001468,00000000,00000000,00000047,0000002d,00000314,00000433,000001d2,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001468,00000000,0000002d,00000005,00000033,00000314,00000433,000001ff,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000433,000001d2,00000047,00000060,00001474,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000438,00000232,00000047,0000002d,00001480,00000000,00000033,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000047a,000001ff,00000005,00000033,00001480,00000042,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00001adb ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00001adb ret=01004881 0009:Call gdi32.BitBlt(00001480,00000000,00000033,00000047,0000002d,00001468,00000000,00000033,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001480,00000042,00000000,00000005,00000033,00001468,00000042,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001468,00000005,0000002d,00000043,00000034,00001468,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001468,00000000,00000000,00000047,0000002d,00000314,0000042e,000001a5,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001468,00000000,0000002d,00000005,00000033,00000314,0000042e,000001d2,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,0000042e,000001a5,00000047,00000060,00001474,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000433,00000205,00000047,0000002d,00001480,00000000,00000033,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000475,000001d2,00000005,00000033,00001480,00000042,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00001ae3 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00001ae3 ret=01004881 0009:Call gdi32.BitBlt(00001480,00000000,00000033,00000047,0000002d,00001468,00000000,00000033,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001480,00000042,00000000,00000005,00000033,00001468,00000042,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001468,00000005,0000002d,00000043,00000034,00001468,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001468,00000000,00000000,00000047,0000002d,00000314,00000429,00000178,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001468,00000000,0000002d,00000005,00000033,00000314,00000429,000001a5,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000429,00000178,00000047,00000060,00001474,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,0000042e,000001d8,00000047,0000002d,00001480,00000000,00000033,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000470,000001a5,00000005,00000033,00001480,00000042,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00001aeb ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00001aeb ret=01004881 0009:Call gdi32.BitBlt(00001480,00000000,00000033,00000047,0000002d,00001468,00000000,00000033,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001480,00000042,00000000,00000005,00000033,00001468,00000042,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001468,00000005,0000002d,00000043,00000034,00001468,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001468,00000000,00000000,00000047,0000002d,00000314,00000424,0000014b,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001468,00000000,0000002d,00000005,00000033,00000314,00000424,00000178,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000424,0000014b,00000047,00000060,00001474,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000429,000001ab,00000047,0000002d,00001480,00000000,00000033,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000046b,00000178,00000005,00000033,00001480,00000042,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00001af3 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00001af3 ret=01004881 0009:Call gdi32.BitBlt(00001480,00000000,00000033,00000047,0000002d,00001468,00000000,00000033,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001480,00000042,00000000,00000005,00000033,00001468,00000042,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001468,00000005,0000002d,00000043,00000034,00001468,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001468,00000000,00000000,00000047,0000002d,00000314,0000041f,0000011e,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001468,00000000,0000002d,00000005,00000033,00000314,0000041f,0000014b,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,0000041f,0000011e,00000047,00000060,00001474,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000424,0000017e,00000047,0000002d,00001480,00000000,00000033,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000466,0000014b,00000005,00000033,00001480,00000042,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00001afb ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00001afb ret=01004881 0009:Call gdi32.BitBlt(00001480,00000000,00000033,00000047,0000002d,00001468,00000000,00000033,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001480,00000042,00000000,00000005,00000033,00001468,00000042,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001468,00000005,0000002d,00000043,00000034,00001468,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001468,00000000,00000000,00000047,0000002d,00000314,0000041a,000000f1,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001468,00000000,0000002d,00000005,00000033,00000314,0000041a,0000011e,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,0000041a,000000f1,00000047,00000060,00001474,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,0000041f,00000151,00000047,0000002d,00001480,00000000,00000033,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000461,0000011e,00000005,00000033,00001480,00000042,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00001b03 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00001b03 ret=01004881 0009:Call gdi32.BitBlt(00001480,00000000,00000033,00000047,0000002d,00001468,00000000,00000033,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001480,00000042,00000000,00000005,00000033,00001468,00000042,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001468,00000005,0000002d,00000043,00000034,00001468,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001468,00000000,00000000,00000047,0000002d,00000314,00000415,000000c4,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001468,00000000,0000002d,00000005,00000033,00000314,00000415,000000f1,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000415,000000c4,00000047,00000060,00001474,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,0000041a,00000124,00000047,0000002d,00001480,00000000,00000033,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000045c,000000f1,00000005,00000033,00001480,00000042,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00001b0b ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00001b0b ret=01004881 0009:Call gdi32.BitBlt(00001480,00000000,00000033,00000047,0000002d,00001468,00000000,00000033,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001480,00000042,00000000,00000005,00000033,00001468,00000042,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001468,00000005,0000002d,00000043,00000034,00001468,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001468,00000000,00000000,00000047,0000002d,00000314,00000410,00000097,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001468,00000000,0000002d,00000005,00000033,00000314,00000410,000000c4,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000410,00000097,00000047,00000060,00001474,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000415,000000f7,00000047,0000002d,00001480,00000000,00000033,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000457,000000c4,00000005,00000033,00001480,00000042,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00001b13 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00001b13 ret=01004881 0009:Call gdi32.BitBlt(00001480,00000000,00000033,00000047,0000002d,00001468,00000000,00000033,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001480,00000042,00000000,00000005,00000033,00001468,00000042,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001468,00000005,0000002d,00000043,00000034,00001468,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001468,00000000,00000000,00000047,0000002d,00000314,0000040b,0000006a,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001468,00000000,0000002d,00000005,00000033,00000314,0000040b,00000097,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,0000040b,0000006a,00000047,00000060,00001474,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000410,000000ca,00000047,0000002d,00001480,00000000,00000033,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000452,00000097,00000005,00000033,00001480,00000042,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00001b1b ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00001b1b ret=01004881 0009:Call gdi32.BitBlt(00001480,00000000,00000033,00000047,0000002d,00001468,00000000,00000033,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001480,00000042,00000000,00000005,00000033,00001468,00000042,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001468,00000005,0000002d,00000043,00000034,00001468,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001468,00000000,00000000,00000047,0000002d,00000314,00000406,0000003d,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001468,00000000,0000002d,00000005,00000033,00000314,00000406,0000006a,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000406,0000003d,00000047,00000060,00001474,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,0000040b,0000009d,00000047,0000002d,00001480,00000000,00000033,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000044d,0000006a,00000005,00000033,00001480,00000042,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00001b23 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00001b23 ret=01004881 0009:Call gdi32.BitBlt(00001480,00000000,00000049,00000047,00000017,00001468,00000000,00000049,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001480,00000044,00000000,00000003,00000049,00001468,00000044,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001468,00000003,00000017,00000045,0000004a,00001468,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001468,00000000,00000000,00000047,00000017,00000314,00000403,00000026,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001468,00000000,00000017,00000003,00000049,00000314,00000403,0000003d,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000403,00000026,00000047,00000060,00001474,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000406,00000086,00000047,00000017,00001480,00000000,00000049,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000044a,0000003d,00000003,00000049,00001480,00000044,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call gdi32.SelectObject(00001468,0000006c) ret=01005316 0009:Ret gdi32.SelectObject() retval=0000148c ret=01005316 0009:Call gdi32.SelectObject(00001474,0000006c) ret=01005324 0009:Ret gdi32.SelectObject() retval=00001490 ret=01005324 0009:Call gdi32.SelectObject(00001480,0000006c) ret=01005332 0009:Ret gdi32.SelectObject() retval=00001494 ret=01005332 0009:Call gdi32.DeleteObject(0000148c) ret=01005340 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005340 0009:Call gdi32.DeleteObject(00001490) ret=01005348 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005348 0009:Call gdi32.DeleteObject(00001494) ret=01005350 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005350 0009:Call gdi32.DeleteDC(00001468) ret=0100535e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100535e 0009:Call gdi32.DeleteDC(00001474) ret=01005366 0009:Ret gdi32.DeleteDC() retval=00000001 ret=01005366 0009:Call gdi32.DeleteDC(00001480) ret=0100536e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100536e 0009:Call user32.ReleaseDC(00010030,00000314) ret=0100537c 0009:Ret user32.ReleaseDC() retval=00000001 ret=0100537c 0009:Call user32.InvalidateRect(00010030,0033f62c,00000000) ret=0100538a 0009:Ret user32.InvalidateRect() retval=00000001 ret=0100538a 0009:Call KERNEL32.GetModuleHandleW(00000000) ret=01005c37 0009:Ret KERNEL32.GetModuleHandleW() retval=01000000 ret=01005c37 0009:Call winmm.PlaySoundW(0000007c,01000000,00040007) ret=01005c40 0009:Call ntdll.RtlAllocateHeap(00110000,00000008,0000001c) ret=7e7356bc 0009:Ret ntdll.RtlAllocateHeap() retval=0014bf80 ret=7e7356bc 0009:Call KERNEL32.ResetEvent(00000040) ret=7e735513 0009:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e735513 0009:Call KERNEL32.SetEvent(00000038) ret=7e735520 0009:Ret KERNEL32.SetEvent() retval=00000001 ret=7e735520 0009:Call msacm32.drv.wodMessage(0000ffff,0000000c,0014bf20,00000000,00000000) ret=7e728e1f 0009:Call winmm.waveOutReset(00008001) ret=7e0c0180 0009:Call winealsa.drv.wodMessage(00000000,0000000c,7e72ab2b,00000000,00000000) ret=7e728e1f 0009:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1b2580 0009:Ret KERNEL32.CreateEventW() retval=00000070 ret=7e1b2580 0029:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bd,0014bf20,0014d3a0,00000000) ret=7e1c4643 0029:Call KERNEL32.IsBadReadPtr(0014bf20,0000002c) ret=7e0bdbc9 0029:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 0029:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bd,008ceaa4,0014d3a0,00000000) ret=7e0bdf33 0029:Call KERNEL32.SetEvent(00000068) ret=7e7341f6 0029:Ret KERNEL32.SetEvent() retval=00000001 ret=7e7341f6 0029:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 0029:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 0029:Call KERNEL32.SetEvent(00000070) ret=7e1c4f3d 0029:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c4f3d 0028:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e73429b 0028:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 0028:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 0028:Call msacm32.drv.wodMessage(0000ffff,0000000c,0014bf20,00000000,00000000) ret=7e728e1f 0028:Call winmm.waveOutReset(00008001) ret=7e0c0180 0028:Call winealsa.drv.wodMessage(00000000,0000000c,7e72ab2b,00000000,00000000) ret=7e728e1f 0028:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1b2580 0028:Ret KERNEL32.CreateEventW() retval=00000094 ret=7e1b2580 0029:Call KERNEL32.SetEvent(00000094) ret=7e1c4f3d 0029:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c4f3d 0028:Call KERNEL32.WaitForSingleObject(00000094,ffffffff) ret=7e1b2635 0028:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1b2635 0028:Call KERNEL32.CloseHandle(00000094) ret=7e1b2640 0028:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1b2640 0028:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0028:Ret winmm.waveOutReset() retval=00000000 ret=7e0c0180 0028:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0028:Call msacm32.drv.wodMessage(0000ffff,00000008,0014bf20,0014d3a0,00000020) ret=7e728e1f 0028:Call winmm.waveOutUnprepareHeader(00008001,0014d3a0,00000020) ret=7e0c00b6 0028:Call winealsa.drv.wodMessage(00000000,00000008,7e72ab2b,0014d3a0,00000020) ret=7e728e1f 0028:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 0028:Ret winmm.waveOutUnprepareHeader() retval=00000000 ret=7e0c00b6 0028:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0028:Call msacm32.drv.wodMessage(0000ffff,00000008,0014bf20,0014d3c0,00000020) ret=7e728e1f 0028:Call winmm.waveOutUnprepareHeader(00008001,0014d3c0,00000020) ret=7e0c00b6 0028:Call winealsa.drv.wodMessage(00000000,00000008,7e72ab2b,0014d3c0,00000020) ret=7e728e1f 0028:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 0028:Ret winmm.waveOutUnprepareHeader() retval=00000000 ret=7e0c00b6 0028:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0028:Call KERNEL32.CloseHandle(00000068) ret=7e7349fd 0028:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e7349fd 0028:Call ntdll.RtlFreeHeap(00110000,00000000,0014d3a0) ret=7e734a23 0028:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e734a23 0028:Call ntdll.RtlFreeHeap(00110000,00000000,00148cb8) ret=7e734a49 0028:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e734a49 0028:Call msacm32.drv.wodMessage(0000ffff,00000006,0014bf20,00000000,00000000) ret=7e728e1f 0028:Call winmm.waveOutClose(00008001) ret=7e0c01a5 0028:Call winealsa.drv.wodMessage(00000000,00000006,7e72ab2b,00000000,00000000) ret=7e728e1f 0028:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1b2580 0028:Ret KERNEL32.CreateEventW() retval=00000068 ret=7e1b2580 0029:Call KERNEL32.SetEvent(00000068) ret=7e1c4ea1 0029:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c4ea1 0029:Call KERNEL32.ExitThread(00000000) ret=7e1c4eb0 0029:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) 0029:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0029:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) 0029:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0029:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) 0029:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0029:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) 0029:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) retval=1 0029:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) 0029:Call KERNEL32.TlsGetValue(00000000) ret=7e3f4071 0029:Ret KERNEL32.TlsGetValue() retval=00000000 ret=7e3f4071 0029:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0029:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) 0029:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0028:Call KERNEL32.WaitForSingleObject(00000068,ffffffff) ret=7e1b2635 0028:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1b2635 0028:Call KERNEL32.CloseHandle(00000068) ret=7e1b2640 0009:Call KERNEL32.WaitForSingleObject(00000070,ffffffff) ret=7e1b2635 0028:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1b2640 0028:Call ntdll.RtlFreeHeap(00110000,00000000,0014c7d0) ret=7e1b24dc 0028:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e1b24dc 0028:Call ntdll.RtlDeleteCriticalSection(0013cefc) ret=7e1b24fb 0028:Ret ntdll.RtlDeleteCriticalSection() retval=00000000 ret=7e1b24fb 0028:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bc,0014bf20,00000000,00000000) ret=7e1c4643 0028:Call KERNEL32.IsBadReadPtr(0014bf20,0000002c) ret=7e0bdbc9 0028:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 0028:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bc,008ceaa4,00000000,00000000) ret=7e0bdf33 0028:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 0028:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 0028:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0028:Call ntdll.RtlFreeHeap(00110000,00000000,0014bf58) ret=7e72ae0b 0028:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e72ae0b 0028:Ret winmm.waveOutClose() retval=00000000 ret=7e0c01a5 0028:Call ntdll.RtlFreeHeap(00110000,00000000,0014bf20) ret=7e0c01f7 0028:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e0c01f7 0028:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0028:Call ntdll.RtlFreeHeap(00110000,00000000,0014bef8) ret=7e72ae0b 0028:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e72ae0b 0009:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1b2635 0009:Call KERNEL32.CloseHandle(00000070) ret=7e1b2640 0009:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1b2640 0009:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0009:Ret winmm.waveOutReset() retval=00000000 ret=7e0c0180 0009:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0009:Call KERNEL32.WaitForSingleObject(00000040,ffffffff) ret=7e73555a 0028:Call ntdll.RtlFreeHeap(00110000,00000000,00148c28) ret=7e731f79 0028:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e731f79 0028:Call KERNEL32.SetEvent(00000040) ret=7e7343a0 0009:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e73555a 0028:Ret KERNEL32.SetEvent() retval=00000001 ret=7e7343a0 0028:Call KERNEL32.CloseHandle(00000064) ret=7e734340 0009:Call KERNEL32.ResetEvent(00000038) ret=7e735572 0009:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e735572 0009:Call KERNEL32.CreateThread(00000000,00000000,7e7348a0,0014bf80,00000000,0033f5a8) ret=7e73560c 0028:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e734340 0028:Call ntdll.RtlFreeHeap(00110000,00000000,00148bb0) ret=7e734360 0028:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e734360 0028:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) 0028:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0028:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) 0028:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0028:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) 0028:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0028:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) 0028:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) retval=1 0028:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) 0028:Call KERNEL32.TlsGetValue(00000000) ret=7e3f4071 0028:Ret KERNEL32.TlsGetValue() retval=00000000 ret=7e3f4071 0028:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0028:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) 0028:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 002a:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) 002a:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 002a:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) 002a:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 002a:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) 002a:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) retval=1 002a:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) 002a:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 002a:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) 002a:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 002a:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) 002a:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 002a:Starting thread proc 0x7e7348a0 (arg=0x14bf80) 002a:Call KERNEL32.FindResourceW(01000000,0000007c,7e741bde L"WAVE") ret=7e734ca3 002a:Ret KERNEL32.FindResourceW() retval=01014c40 ret=7e734ca3 002a:Call KERNEL32.LoadResource(01000000,01014c40) ret=7e734cb9 002a:Ret KERNEL32.LoadResource() retval=0104d668 ret=7e734cb9 002a:Call KERNEL32.LockResource(0104d668) ret=7e734cce 002a:Ret KERNEL32.LockResource() retval=0104d668 ret=7e734cce 002a:Call KERNEL32.FreeResource(0104d668) ret=7e734ce9 002a:Ret KERNEL32.FreeResource() retval=00000000 ret=7e734ce9 002a:Call ntdll.RtlAllocateHeap(00110000,00000008,0000005c) ret=7e733960 002a:Ret ntdll.RtlAllocateHeap() retval=00148c28 ret=7e733960 002a:Call KERNEL32.GetFileSize(ffffffff,00000000) ret=7e733ab9 002a:Ret KERNEL32.GetFileSize() retval=ffffffff ret=7e733ab9 002a:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7e733cf0 002a:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e733cf0 002a:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7e734e1c 002a:Ret ntdll.RtlAllocateHeap() retval=00148cb8 ret=7e734e1c 002a:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e734f1f 002a:Ret KERNEL32.CreateEventW() retval=00000068 ret=7e734f1f 002a:Call ntdll.RtlAllocateHeap(00110000,00000008,0000001c) ret=7e72abbe 002a:Ret ntdll.RtlAllocateHeap() retval=0014bef8 ret=7e72abbe 002a:Call msacm32.drv.wodMessage(0000ffff,00000005,007ce918,007ce970,00030000) ret=7e728e1f 002a:Call ntdll.RtlAllocateHeap(00110000,00000000,0000002c) ret=7e0bfd8c 002a:Ret ntdll.RtlAllocateHeap() retval=0014bf20 ret=7e0bfd8c 002a:Call winmm.waveOutGetNumDevs() ret=7e0bfdb5 002a:Ret winmm.waveOutGetNumDevs() retval=00000002 ret=7e0bfdb5 002a:Call winmm.waveOutOpen(0014bf28,00000000,00148cb8,7e0bde60,0014bf20,00030008) ret=7e0c0313 002a:Call ntdll.RtlAllocateHeap(00110000,00000008,0000001c) ret=7e72abbe 002a:Ret ntdll.RtlAllocateHeap() retval=0014bf58 ret=7e72abbe 002a:Call winealsa.drv.wodMessage(00000000,00000005,007ce5b8,007ce610,00030008) ret=7e728e1f 002a:Call ntdll.RtlAllocateHeap(00110000,00000008,00000068) ret=7e1c6c82 002a:Ret ntdll.RtlAllocateHeap() retval=00148b18 ret=7e1c6c82 002a:Call ntdll.RtlAllocateHeap(00110000,00000008,00000300) ret=7e1b2459 002a:Ret ntdll.RtlAllocateHeap() retval=0014c7d0 ret=7e1b2459 002a:Call KERNEL32.InitializeCriticalSection(0013cefc) ret=7e1b2469 002a:Ret KERNEL32.InitializeCriticalSection() retval=00000001 ret=7e1b2469 002a:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1c73ab 002a:Ret KERNEL32.CreateEventW() retval=00000070 ret=7e1c73ab 002a:Call KERNEL32.CreateThread(00000000,00000000,7e1c5570,00000000,00000000,0013cedc) ret=7e1c73ef 0009:Ret KERNEL32.CreateThread() retval=00000064 ret=7e73560c 0009:Call KERNEL32.SetThreadPriority(00000064,0000000f) ret=7e73562d 0009:Ret KERNEL32.SetThreadPriority() retval=00000001 ret=7e73562d 0009:Ret winmm.PlaySoundW() retval=00000001 ret=01005c40 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,0000000c) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c57a8 ret=0100a7d2 0009:Call user32.GetClientRect(00010030,0033f61c) ret=01005145 0009:Ret user32.GetClientRect() retval=00000001 ret=01005145 0009:Call user32.GetDC(00010030) ret=010051ad 0009:Ret user32.GetDC() retval=00000314 ret=010051ad 0009:Call gdi32.CreateCompatibleDC(00000314) ret=010051bc 0009:Ret gdi32.CreateCompatibleDC() retval=000014f4 ret=010051bc 0009:Call gdi32.CreateCompatibleDC(00000314) ret=010051ca 0009:Ret gdi32.CreateCompatibleDC() retval=00001500 ret=010051ca 0009:Call gdi32.CreateCompatibleDC(00000314) ret=010051d8 0009:Ret gdi32.CreateCompatibleDC() retval=0000150c ret=010051d8 0009:Call gdi32.CreateCompatibleBitmap(00000314,00000047,00000060) ret=010051f8 0009:Ret gdi32.CreateCompatibleBitmap() retval=00001518 ret=010051f8 0009:Call gdi32.CreateCompatibleBitmap(00000314,00000047,00000060) ret=01005212 0009:Ret gdi32.CreateCompatibleBitmap() retval=0000151c ret=01005212 0009:Call gdi32.CreateCompatibleBitmap(00000314,00000047,00000060) ret=0100522c 0009:Ret gdi32.CreateCompatibleBitmap() retval=00001520 ret=0100522c 0009:Call gdi32.SelectObject(000014f4,00001518) ret=01005246 0009:Ret gdi32.SelectObject() retval=0000006c ret=01005246 0009:Call gdi32.SelectObject(00001500,0000151c) ret=0100525a 0009:Ret gdi32.SelectObject() retval=0000006c ret=0100525a 0009:Call gdi32.SelectObject(0000150c,00001520) ret=0100526e 0009:Ret gdi32.SelectObject() retval=0000006c ret=0100526e 0009:Call user32.LoadBitmapW(01000000,0033f5b4 L"CARD43") ret=010028ff 002b:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) 002b:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 002b:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) 002b:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 002b:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) 002b:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) retval=1 002b:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) 002b:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 002b:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) 002b:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 002b:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) 002b:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 002b:Starting thread proc 0x7e1c5570 (arg=(nil)) 002b:Call KERNEL32.SetEvent(00000070) ret=7e1c55aa 002b:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c55aa 002a:Ret KERNEL32.CreateThread() retval=00000094 ret=7e1c73ef 002a:Call KERNEL32.SetThreadPriority(00000094,0000000f) ret=7e1c7413 002a:Ret KERNEL32.SetThreadPriority() retval=00000001 ret=7e1c7413 002a:Call KERNEL32.WaitForSingleObject(00000070,ffffffff) ret=7e1c742f 002a:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1c742f 002a:Call KERNEL32.CloseHandle(00000070) ret=7e1c7443 002a:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1c7443 002a:Call ntdll.RtlFreeHeap(00110000,00000000,00148b18) ret=7e1c7479 002a:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e1c7479 002a:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bb,0014bf20,00000000,00000000) ret=7e1c4643 002a:Call KERNEL32.IsBadReadPtr(0014bf20,0000002c) ret=7e0bdbc9 002a:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 002a:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bb,007ceaa4,00000000,00000000) ret=7e0bdf33 002a:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 002a:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 002a:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 002a:Ret winmm.waveOutOpen() retval=00000000 ret=7e0c0313 002a:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 002a:Call ntdll.RtlAllocateHeap(00110000,00000000,000039ac) ret=7e73520d 002a:Ret ntdll.RtlAllocateHeap() retval=0014d3a0 ret=7e73520d 002a:Call msacm32.drv.wodMessage(0000ffff,00000007,0014bf20,0014d3a0,00000020) ret=7e728e1f 002a:Call winmm.waveOutPrepareHeader(00008001,0014d3a0,00000020) ret=7e0c09d8 002a:Call winealsa.drv.wodMessage(00000000,00000007,7e72ab2b,0014d3a0,00000020) ret=7e728e1f 002a:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 002a:Ret winmm.waveOutPrepareHeader() retval=00000000 ret=7e0c09d8 002a:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 002a:Call msacm32.drv.wodMessage(0000ffff,00000007,0014bf20,0014d3c0,00000020) ret=7e728e1f 002a:Call winmm.waveOutPrepareHeader(00008001,0014d3c0,00000020) ret=7e0c09d8 002a:Call winealsa.drv.wodMessage(00000000,00000007,7e72ab2b,0014d3c0,00000020) ret=7e728e1f 002a:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 002a:Ret winmm.waveOutPrepareHeader() retval=00000000 ret=7e0c09d8 002a:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 002a:Call KERNEL32.WaitForSingleObject(00000038,00000000) ret=7e735343 002a:Ret KERNEL32.WaitForSingleObject() retval=00000102 ret=7e735343 002a:Call msacm32.drv.wodMessage(0000ffff,00000009,0014bf20,0014d3a0,00000020) ret=7e728e1f 002a:Call winmm.waveOutWrite(00008001,0014d3a0,00000020) ret=7e0c09b5 002a:Call winealsa.drv.wodMessage(00000000,00000009,7e72ab2b,0014d3a0,00000020) ret=7e728e1f 002a:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 002a:Ret winmm.waveOutWrite() retval=00000000 ret=7e0c09b5 002a:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 002a:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 002a:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 002a:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 002a:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 002a:Call KERNEL32.WaitForSingleObject(00000068,ffffffff) ret=7e73429b 0009:Ret user32.LoadBitmapW() retval=00001530 ret=010028ff 0009:Call gdi32.CreateCompatibleDC(00001500) ret=01002909 0009:Ret gdi32.CreateCompatibleDC() retval=00001544 ret=01002909 0009:Call gdi32.SelectObject(00001544,00001530) ret=01002917 0009:Ret gdi32.SelectObject() retval=0000006c ret=01002917 0009:Call gdi32.BitBlt(00001500,00000000,00000000,00000047,00000060,00001544,00000000,00000000,00cc0020) ret=01002938 0009:Ret gdi32.BitBlt() retval=00000001 ret=01002938 0009:Call gdi32.SelectObject(00001544,0000006c) ret=0100293e 0009:Ret gdi32.SelectObject() retval=00001530 ret=0100293e 0009:Call gdi32.DeleteObject(00001530) ret=01002947 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01002947 0009:Call gdi32.DeleteDC(00001544) ret=0100294e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100294e 0009:Call gdi32.SetPixel(00001500,00000000,00000000,00008000) ret=01002969 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002969 0009:Call gdi32.SetPixel(00001500,00000001,00000000,00008000) ret=01002976 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002976 0009:Call gdi32.SetPixel(00001500,00000000,00000001,00008000) ret=01002982 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002982 0009:Call gdi32.SetPixel(00001500,00000046,00000000,00008000) ret=0100298f 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100298f 0009:Call gdi32.SetPixel(00001500,00000045,00000000,00008000) ret=0100299c 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100299c 0009:Call gdi32.SetPixel(00001500,00000046,00000001,00008000) ret=010029ab 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ab 0009:Call gdi32.SetPixel(00001500,00000000,0000005f,00008000) ret=010029bf 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029bf 0009:Call gdi32.SetPixel(00001500,00000001,0000005f,00008000) ret=010029d0 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029d0 0009:Call gdi32.SetPixel(00001500,00000000,0000005e,00008000) ret=010029de 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029de 0009:Call gdi32.SetPixel(00001500,00000046,0000005f,00008000) ret=010029ef 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ef 0009:Call gdi32.SetPixel(00001500,00000045,0000005f,00008000) ret=01002a00 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a00 0009:Call gdi32.SetPixel(00001500,00000046,0000005e,00008000) ret=01002a11 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a11 0009:Call gdi32.CreateCompatibleDC(000014f4) ret=0100272b 0009:Ret gdi32.CreateCompatibleDC() retval=00001550 ret=0100272b 0009:Call user32.LoadBitmapW(01000000,010012bc L"FELT") ret=0100273f 0009:Ret user32.LoadBitmapW() retval=00001568 ret=0100273f 0009:Call gdi32.SelectObject(00001550,00001568) ret=0100274c 0009:Ret gdi32.SelectObject() retval=0000006c ret=0100274c 0009:Call gdi32.BitBlt(000014f4,00000000,00000000,0000003f,00000040,00001550,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(000014f4,0000003f,00000000,00000008,00000040,00001550,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(000014f4,00000000,00000040,0000003f,00000020,00001550,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(000014f4,0000003f,00000040,00000008,00000020,00001550,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.SelectObject(00001550,0000006c) ret=0100287b 0009:Ret gdi32.SelectObject() retval=00001568 ret=0100287b 0009:Call gdi32.DeleteObject(00001568) ret=01002884 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01002884 0009:Call gdi32.DeleteDC(00001550) ret=0100288d 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100288d 0009:Call user32.LoadBitmapW(01000000,010012c8 L"CARDBACK") ret=010028ff 0009:Ret user32.LoadBitmapW() retval=00001588 ret=010028ff 0009:Call gdi32.CreateCompatibleDC(000014f4) ret=01002909 0009:Ret gdi32.CreateCompatibleDC() retval=0000159c ret=01002909 0009:Call gdi32.SelectObject(0000159c,00001588) ret=01002917 0009:Ret gdi32.SelectObject() retval=0000006c ret=01002917 0009:Call gdi32.BitBlt(000014f4,0000000c,00000000,00000047,00000060,0000159c,00000000,00000000,00cc0020) ret=01002938 0009:Ret gdi32.BitBlt() retval=00000001 ret=01002938 0009:Call gdi32.SelectObject(0000159c,0000006c) ret=0100293e 0009:Ret gdi32.SelectObject() retval=00001588 ret=0100293e 0009:Call gdi32.DeleteObject(00001588) ret=01002947 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01002947 0009:Call gdi32.DeleteDC(0000159c) ret=0100294e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100294e 0009:Call gdi32.SetPixel(000014f4,0000000c,00000000,00008000) ret=01002969 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002969 0009:Call gdi32.SetPixel(000014f4,0000000d,00000000,00008000) ret=01002976 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002976 0009:Call gdi32.SetPixel(000014f4,0000000c,00000001,00008000) ret=01002982 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002982 0009:Call gdi32.SetPixel(000014f4,00000052,00000000,00008000) ret=0100298f 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100298f 0009:Call gdi32.SetPixel(000014f4,00000051,00000000,00008000) ret=0100299c 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100299c 0009:Call gdi32.SetPixel(000014f4,00000052,00000001,00008000) ret=010029ab 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ab 0009:Call gdi32.SetPixel(000014f4,0000000c,0000005f,00008000) ret=010029bf 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029bf 0009:Call gdi32.SetPixel(000014f4,0000000d,0000005f,00008000) ret=010029d0 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029d0 0009:Call gdi32.SetPixel(000014f4,0000000c,0000005e,00008000) ret=010029de 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029de 0009:Call gdi32.SetPixel(000014f4,00000052,0000005f,00008000) ret=010029ef 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ef 0009:Call gdi32.SetPixel(000014f4,00000051,0000005f,00008000) ret=01002a00 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a00 0009:Call gdi32.SetPixel(000014f4,00000052,0000005e,00008000) ret=01002a11 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a11 0009:Call winmm.timeGetTime() ret=010047d1 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00001b3d ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00001b3d ret=010047d1 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00001b3e ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00001b3e ret=01004881 0009:Call gdi32.BitBlt(0000150c,00000000,0000005b,00000047,00000005,000014f4,00000000,0000005b,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000014f4,00000000,00000005,00000048,0000005c,000014f4,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(000014f4,00000000,00000000,00000047,00000005,00000314,00000441,00000253,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00000314,00000441,00000253,00000047,00000060,00001500,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000441,000002b3,00000047,00000005,0000150c,00000000,0000005b,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00001b43 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00001b43 ret=01004881 0009:Call gdi32.BitBlt(0000150c,00000000,00000044,00000047,0000001c,000014f4,00000000,00000044,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(0000150c,00000000,00000000,00000003,00000044,000014f4,00000000,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000014f4,00000000,0000001c,00000045,00000045,000014f4,00000003,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(000014f4,00000000,00000000,00000047,0000001c,00000314,00000444,00000237,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000014f4,00000044,0000001c,00000003,00000044,00000314,00000488,00000253,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000444,00000237,00000047,00000060,00001500,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000441,00000297,00000047,0000001c,0000150c,00000000,00000044,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000441,00000253,00000003,00000044,0000150c,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00001b4b ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00001b4b ret=01004881 0009:Call gdi32.BitBlt(0000150c,00000000,00000033,00000047,0000002d,000014f4,00000000,00000033,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(0000150c,00000000,00000000,00000005,00000033,000014f4,00000000,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000014f4,00000000,0000002d,00000043,00000034,000014f4,00000005,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(000014f4,00000000,00000000,00000047,0000002d,00000314,00000449,0000020a,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000014f4,00000042,0000002d,00000005,00000033,00000314,0000048b,00000237,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000449,0000020a,00000047,00000060,00001500,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000444,0000026a,00000047,0000002d,0000150c,00000000,00000033,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000444,00000237,00000005,00000033,0000150c,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00001b53 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00001b53 ret=01004881 0009:Call gdi32.BitBlt(0000150c,00000000,00000033,00000047,0000002d,000014f4,00000000,00000033,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(0000150c,00000000,00000000,00000005,00000033,000014f4,00000000,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000014f4,00000000,0000002d,00000043,00000034,000014f4,00000005,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(000014f4,00000000,00000000,00000047,0000002d,00000314,0000044e,000001dd,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000014f4,00000042,0000002d,00000005,00000033,00000314,00000490,0000020a,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,0000044e,000001dd,00000047,00000060,00001500,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000449,0000023d,00000047,0000002d,0000150c,00000000,00000033,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000449,0000020a,00000005,00000033,0000150c,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00001b5b ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00001b5b ret=01004881 0009:Call gdi32.BitBlt(0000150c,00000000,00000033,00000047,0000002d,000014f4,00000000,00000033,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(0000150c,00000000,00000000,00000004,00000033,000014f4,00000000,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000014f4,00000000,0000002d,00000044,00000034,000014f4,00000004,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(000014f4,00000000,00000000,00000047,0000002d,00000314,00000452,000001b0,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000014f4,00000043,0000002d,00000004,00000033,00000314,00000495,000001dd,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000452,000001b0,00000047,00000060,00001500,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,0000044e,00000210,00000047,0000002d,0000150c,00000000,00000033,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000044e,000001dd,00000004,00000033,0000150c,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00001b63 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00001b63 ret=01004881 0009:Call gdi32.BitBlt(0000150c,00000000,00000033,00000047,0000002d,000014f4,00000000,00000033,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(0000150c,00000000,00000000,00000005,00000033,000014f4,00000000,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000014f4,00000000,0000002d,00000043,00000034,000014f4,00000005,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(000014f4,00000000,00000000,00000047,0000002d,00000314,00000457,00000183,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000014f4,00000042,0000002d,00000005,00000033,00000314,00000499,000001b0,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000457,00000183,00000047,00000060,00001500,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000452,000001e3,00000047,0000002d,0000150c,00000000,00000033,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000452,000001b0,00000005,00000033,0000150c,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00001b6b ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00001b6b ret=01004881 0009:Call gdi32.BitBlt(0000150c,00000000,00000033,00000047,0000002d,000014f4,00000000,00000033,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(0000150c,00000000,00000000,00000005,00000033,000014f4,00000000,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000014f4,00000000,0000002d,00000043,00000034,000014f4,00000005,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(000014f4,00000000,00000000,00000047,0000002d,00000314,0000045c,00000156,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000014f4,00000042,0000002d,00000005,00000033,00000314,0000049e,00000183,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,0000045c,00000156,00000047,00000060,00001500,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000457,000001b6,00000047,0000002d,0000150c,00000000,00000033,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000457,00000183,00000005,00000033,0000150c,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00001b73 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00001b73 ret=01004881 0009:Call gdi32.BitBlt(0000150c,00000000,00000033,00000047,0000002d,000014f4,00000000,00000033,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(0000150c,00000000,00000000,00000005,00000033,000014f4,00000000,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000014f4,00000000,0000002d,00000043,00000034,000014f4,00000005,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(000014f4,00000000,00000000,00000047,0000002d,00000314,00000461,00000129,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000014f4,00000042,0000002d,00000005,00000033,00000314,000004a3,00000156,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000461,00000129,00000047,00000060,00001500,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,0000045c,00000189,00000047,0000002d,0000150c,00000000,00000033,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000045c,00000156,00000005,00000033,0000150c,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00001b7b ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00001b7b ret=01004881 0009:Call gdi32.BitBlt(0000150c,00000000,00000033,00000047,0000002d,000014f4,00000000,00000033,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(0000150c,00000000,00000000,00000005,00000033,000014f4,00000000,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000014f4,00000000,0000002d,00000043,00000034,000014f4,00000005,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(000014f4,00000000,00000000,00000047,0000002d,00000314,00000466,000000fc,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000014f4,00000042,0000002d,00000005,00000033,00000314,000004a8,00000129,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000466,000000fc,00000047,00000060,00001500,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000461,0000015c,00000047,0000002d,0000150c,00000000,00000033,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000461,00000129,00000005,00000033,0000150c,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00001b83 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00001b83 ret=01004881 0009:Call gdi32.BitBlt(0000150c,00000000,00000033,00000047,0000002d,000014f4,00000000,00000033,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(0000150c,00000000,00000000,00000004,00000033,000014f4,00000000,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000014f4,00000000,0000002d,00000044,00000034,000014f4,00000004,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(000014f4,00000000,00000000,00000047,0000002d,00000314,0000046a,000000cf,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000014f4,00000043,0000002d,00000004,00000033,00000314,000004ad,000000fc,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,0000046a,000000cf,00000047,00000060,00001500,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000466,0000012f,00000047,0000002d,0000150c,00000000,00000033,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000466,000000fc,00000004,00000033,0000150c,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00001b8b ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00001b8b ret=01004881 0009:Call gdi32.BitBlt(0000150c,00000000,00000033,00000047,0000002d,000014f4,00000000,00000033,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(0000150c,00000000,00000000,00000005,00000033,000014f4,00000000,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000014f4,00000000,0000002d,00000043,00000034,000014f4,00000005,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(000014f4,00000000,00000000,00000047,0000002d,00000314,0000046f,000000a2,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000014f4,00000042,0000002d,00000005,00000033,00000314,000004b1,000000cf,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,0000046f,000000a2,00000047,00000060,00001500,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,0000046a,00000102,00000047,0000002d,0000150c,00000000,00000033,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000046a,000000cf,00000005,00000033,0000150c,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00001b93 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00001b93 ret=01004881 0009:Call gdi32.BitBlt(0000150c,00000000,00000033,00000047,0000002d,000014f4,00000000,00000033,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(0000150c,00000000,00000000,00000005,00000033,000014f4,00000000,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000014f4,00000000,0000002d,00000043,00000034,000014f4,00000005,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(000014f4,00000000,00000000,00000047,0000002d,00000314,00000474,00000075,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000014f4,00000042,0000002d,00000005,00000033,00000314,000004b6,000000a2,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000474,00000075,00000047,00000060,00001500,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,0000046f,000000d5,00000047,0000002d,0000150c,00000000,00000033,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000046f,000000a2,00000005,00000033,0000150c,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00001b9b ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00001b9b ret=01004881 0009:Call gdi32.BitBlt(0000150c,00000000,00000033,00000047,0000002d,000014f4,00000000,00000033,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(0000150c,00000000,00000000,00000005,00000033,000014f4,00000000,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000014f4,00000000,0000002d,00000043,00000034,000014f4,00000005,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(000014f4,00000000,00000000,00000047,0000002d,00000314,00000479,00000048,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000014f4,00000042,0000002d,00000005,00000033,00000314,000004bb,00000075,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000479,00000048,00000047,00000060,00001500,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000474,000000a8,00000047,0000002d,0000150c,00000000,00000033,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000474,00000075,00000005,00000033,0000150c,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00001ba3 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00001ba3 ret=01004881 0009:Call gdi32.BitBlt(0000150c,00000000,0000003e,00000047,00000022,000014f4,00000000,0000003e,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(0000150c,00000000,00000000,00000004,0000003e,000014f4,00000000,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000014f4,00000000,00000022,00000044,0000003f,000014f4,00000004,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(000014f4,00000000,00000000,00000047,00000022,00000314,0000047d,00000026,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000014f4,00000043,00000022,00000004,0000003e,00000314,000004c0,00000048,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,0000047d,00000026,00000047,00000060,00001500,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000479,00000086,00000047,00000022,0000150c,00000000,0000003e,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000479,00000048,00000004,0000003e,0000150c,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call gdi32.SelectObject(000014f4,0000006c) ret=01005316 0009:Ret gdi32.SelectObject() retval=00001518 ret=01005316 0009:Call gdi32.SelectObject(00001500,0000006c) ret=01005324 0009:Ret gdi32.SelectObject() retval=0000151c ret=01005324 0009:Call gdi32.SelectObject(0000150c,0000006c) ret=01005332 0009:Ret gdi32.SelectObject() retval=00001520 ret=01005332 0009:Call gdi32.DeleteObject(00001518) ret=01005340 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005340 0009:Call gdi32.DeleteObject(0000151c) ret=01005348 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005348 0009:Call gdi32.DeleteObject(00001520) ret=01005350 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005350 0009:Call gdi32.DeleteDC(000014f4) ret=0100535e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100535e 0009:Call gdi32.DeleteDC(00001500) ret=01005366 0009:Ret gdi32.DeleteDC() retval=00000001 ret=01005366 0009:Call gdi32.DeleteDC(0000150c) ret=0100536e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100536e 0009:Call user32.ReleaseDC(00010030,00000314) ret=0100537c 0009:Ret user32.ReleaseDC() retval=00000001 ret=0100537c 0009:Call user32.InvalidateRect(00010030,0033f62c,00000000) ret=0100538a 0009:Ret user32.InvalidateRect() retval=00000001 ret=0100538a 0009:Call KERNEL32.GetModuleHandleW(00000000) ret=01005c37 0009:Ret KERNEL32.GetModuleHandleW() retval=01000000 ret=01005c37 0009:Call winmm.PlaySoundW(0000007c,01000000,00040007) ret=01005c40 0009:Call ntdll.RtlAllocateHeap(00110000,00000008,0000001c) ret=7e7356bc 0009:Ret ntdll.RtlAllocateHeap() retval=00148bb0 ret=7e7356bc 0009:Call KERNEL32.ResetEvent(00000040) ret=7e735513 0009:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e735513 0009:Call KERNEL32.SetEvent(00000038) ret=7e735520 0009:Ret KERNEL32.SetEvent() retval=00000001 ret=7e735520 0009:Call msacm32.drv.wodMessage(0000ffff,0000000c,0014bf20,00000000,00000000) ret=7e728e1f 0009:Call winmm.waveOutReset(00008001) ret=7e0c0180 0009:Call winealsa.drv.wodMessage(00000000,0000000c,7e72ab2b,00000000,00000000) ret=7e728e1f 0009:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1b2580 0009:Ret KERNEL32.CreateEventW() retval=00000070 ret=7e1b2580 002b:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bd,0014bf20,0014d3a0,00000000) ret=7e1c4643 002b:Call KERNEL32.IsBadReadPtr(0014bf20,0000002c) ret=7e0bdbc9 002b:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 002b:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bd,007ceaa4,0014d3a0,00000000) ret=7e0bdf33 002b:Call KERNEL32.SetEvent(00000068) ret=7e7341f6 002b:Ret KERNEL32.SetEvent() retval=00000001 ret=7e7341f6 002b:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 002b:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 002b:Call KERNEL32.SetEvent(00000070) ret=7e1c4f3d 002b:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c4f3d 002a:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e73429b 002a:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 002a:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 002a:Call msacm32.drv.wodMessage(0000ffff,0000000c,0014bf20,00000000,00000000) ret=7e728e1f 002a:Call winmm.waveOutReset(00008001) ret=7e0c0180 002a:Call winealsa.drv.wodMessage(00000000,0000000c,7e72ab2b,00000000,00000000) ret=7e728e1f 002a:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1b2580 002a:Ret KERNEL32.CreateEventW() retval=00000098 ret=7e1b2580 002b:Call KERNEL32.SetEvent(00000098) ret=7e1c4f3d 002b:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c4f3d 002a:Call KERNEL32.WaitForSingleObject(00000098,ffffffff) ret=7e1b2635 002a:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1b2635 002a:Call KERNEL32.CloseHandle(00000098) ret=7e1b2640 002a:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1b2640 002a:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 002a:Ret winmm.waveOutReset() retval=00000000 ret=7e0c0180 002a:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 002a:Call msacm32.drv.wodMessage(0000ffff,00000008,0014bf20,0014d3a0,00000020) ret=7e728e1f 002a:Call winmm.waveOutUnprepareHeader(00008001,0014d3a0,00000020) ret=7e0c00b6 002a:Call winealsa.drv.wodMessage(00000000,00000008,7e72ab2b,0014d3a0,00000020) ret=7e728e1f 002a:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 002a:Ret winmm.waveOutUnprepareHeader() retval=00000000 ret=7e0c00b6 002a:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 002a:Call msacm32.drv.wodMessage(0000ffff,00000008,0014bf20,0014d3c0,00000020) ret=7e728e1f 002a:Call winmm.waveOutUnprepareHeader(00008001,0014d3c0,00000020) ret=7e0c00b6 002a:Call winealsa.drv.wodMessage(00000000,00000008,7e72ab2b,0014d3c0,00000020) ret=7e728e1f 002a:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 002a:Ret winmm.waveOutUnprepareHeader() retval=00000000 ret=7e0c00b6 002a:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 002a:Call KERNEL32.CloseHandle(00000068) ret=7e7349fd 002a:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e7349fd 002a:Call ntdll.RtlFreeHeap(00110000,00000000,0014d3a0) ret=7e734a23 002a:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e734a23 002a:Call ntdll.RtlFreeHeap(00110000,00000000,00148cb8) ret=7e734a49 002a:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e734a49 002a:Call msacm32.drv.wodMessage(0000ffff,00000006,0014bf20,00000000,00000000) ret=7e728e1f 002a:Call winmm.waveOutClose(00008001) ret=7e0c01a5 002a:Call winealsa.drv.wodMessage(00000000,00000006,7e72ab2b,00000000,00000000) ret=7e728e1f 002a:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1b2580 002a:Ret KERNEL32.CreateEventW() retval=00000068 ret=7e1b2580 002b:Call KERNEL32.SetEvent(00000068) ret=7e1c4ea1 002b:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c4ea1 002b:Call KERNEL32.ExitThread(00000000) ret=7e1c4eb0 002b:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) 002b:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 002b:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) 002b:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) retval=1 002b:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) 002b:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 002b:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) 002b:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) retval=1 002b:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) 002b:Call KERNEL32.TlsGetValue(00000000) ret=7e3f4071 002b:Ret KERNEL32.TlsGetValue() retval=00000000 ret=7e3f4071 002b:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 002b:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) 002b:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 002a:Call KERNEL32.WaitForSingleObject(00000068,ffffffff) ret=7e1b2635 002a:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1b2635 002a:Call KERNEL32.CloseHandle(00000068) ret=7e1b2640 002a:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1b2640 002a:Call ntdll.RtlFreeHeap(00110000,00000000,0014c7d0) ret=7e1b24dc 002a:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e1b24dc 002a:Call ntdll.RtlDeleteCriticalSection(0013cefc) ret=7e1b24fb 002a:Ret ntdll.RtlDeleteCriticalSection() retval=00000000 ret=7e1b24fb 002a:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bc,0014bf20,00000000,00000000) ret=7e1c4643 002a:Call KERNEL32.IsBadReadPtr(0014bf20,0000002c) ret=7e0bdbc9 002a:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 002a:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bc,007ceaa4,00000000,00000000) ret=7e0bdf33 002a:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 002a:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 002a:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 002a:Call ntdll.RtlFreeHeap(00110000,00000000,0014bf58) ret=7e72ae0b 002a:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e72ae0b 002a:Ret winmm.waveOutClose() retval=00000000 ret=7e0c01a5 002a:Call ntdll.RtlFreeHeap(00110000,00000000,0014bf20) ret=7e0c01f7 002a:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e0c01f7 002a:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 002a:Call ntdll.RtlFreeHeap(00110000,00000000,0014bef8) ret=7e72ae0b 002a:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e72ae0b 0009:Call KERNEL32.WaitForSingleObject(00000070,ffffffff) ret=7e1b2635 0009:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1b2635 0009:Call KERNEL32.CloseHandle(00000070) ret=7e1b2640 0009:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1b2640 0009:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0009:Ret winmm.waveOutReset() retval=00000000 ret=7e0c0180 0009:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0009:Call KERNEL32.WaitForSingleObject(00000040,ffffffff) ret=7e73555a 002a:Call ntdll.RtlFreeHeap(00110000,00000000,00148c28) ret=7e731f79 002a:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e731f79 002a:Call KERNEL32.SetEvent(00000040) ret=7e7343a0 002a:Ret KERNEL32.SetEvent() retval=00000001 ret=7e7343a0 002a:Call KERNEL32.CloseHandle(00000064) ret=7e734340 002a:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e734340 002a:Call ntdll.RtlFreeHeap(00110000,00000000,0014bf80) ret=7e734360 002a:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e734360 002a:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) 002a:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 002a:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) 002a:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) retval=1 002a:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) 002a:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 002a:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) 002a:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) retval=1 002a:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) 002a:Call KERNEL32.TlsGetValue(00000000) ret=7e3f4071 002a:Ret KERNEL32.TlsGetValue() retval=00000000 ret=7e3f4071 002a:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 002a:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) 002a:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0009:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e73555a 0009:Call KERNEL32.ResetEvent(00000038) ret=7e735572 0009:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e735572 0009:Call KERNEL32.CreateThread(00000000,00000000,7e7348a0,00148bb0,00000000,0033f5a8) ret=7e73560c 002c:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) 002c:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 002c:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) 002c:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 002c:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) 002c:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) retval=1 002c:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) 002c:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 002c:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) 002c:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 002c:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) 002c:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 002c:Starting thread proc 0x7e7348a0 (arg=0x148bb0) 002c:Call KERNEL32.FindResourceW(01000000,0000007c,7e741bde L"WAVE") ret=7e734ca3 002c:Ret KERNEL32.FindResourceW() retval=01014c40 ret=7e734ca3 002c:Call KERNEL32.LoadResource(01000000,01014c40) ret=7e734cb9 002c:Ret KERNEL32.LoadResource() retval=0104d668 ret=7e734cb9 002c:Call KERNEL32.LockResource(0104d668) ret=7e734cce 002c:Ret KERNEL32.LockResource() retval=0104d668 ret=7e734cce 002c:Call KERNEL32.FreeResource(0104d668) ret=7e734ce9 002c:Ret KERNEL32.FreeResource() retval=00000000 ret=7e734ce9 002c:Call ntdll.RtlAllocateHeap(00110000,00000008,0000005c) ret=7e733960 002c:Ret ntdll.RtlAllocateHeap() retval=00148c28 ret=7e733960 002c:Call KERNEL32.GetFileSize(ffffffff,00000000) ret=7e733ab9 002c:Ret KERNEL32.GetFileSize() retval=ffffffff ret=7e733ab9 002c:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7e733cf0 002c:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e733cf0 002c:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7e734e1c 002c:Ret ntdll.RtlAllocateHeap() retval=00148cb8 ret=7e734e1c 002c:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e734f1f 002c:Ret KERNEL32.CreateEventW() retval=00000068 ret=7e734f1f 002c:Call ntdll.RtlAllocateHeap(00110000,00000008,0000001c) ret=7e72abbe 002c:Ret ntdll.RtlAllocateHeap() retval=0014bef8 ret=7e72abbe 002c:Call msacm32.drv.wodMessage(0000ffff,00000005,008ce918,008ce970,00030000) ret=7e728e1f 002c:Call ntdll.RtlAllocateHeap(00110000,00000000,0000002c) ret=7e0bfd8c 002c:Ret ntdll.RtlAllocateHeap() retval=0014bf20 ret=7e0bfd8c 002c:Call winmm.waveOutGetNumDevs() ret=7e0bfdb5 002c:Ret winmm.waveOutGetNumDevs() retval=00000002 ret=7e0bfdb5 002c:Call winmm.waveOutOpen(0014bf28,00000000,00148cb8,7e0bde60,0014bf20,00030008) ret=7e0c0313 002c:Call ntdll.RtlAllocateHeap(00110000,00000008,0000001c) ret=7e72abbe 002c:Ret ntdll.RtlAllocateHeap() retval=0014bf58 ret=7e72abbe 002c:Call winealsa.drv.wodMessage(00000000,00000005,008ce5b8,008ce610,00030008) ret=7e728e1f 002c:Call ntdll.RtlAllocateHeap(00110000,00000008,00000068) ret=7e1c6c82 002c:Ret ntdll.RtlAllocateHeap() retval=00148b18 ret=7e1c6c82 002c:Call ntdll.RtlAllocateHeap(00110000,00000008,00000300) ret=7e1b2459 002c:Ret ntdll.RtlAllocateHeap() retval=0014c7d0 ret=7e1b2459 002c:Call KERNEL32.InitializeCriticalSection(0013cefc) ret=7e1b2469 002c:Ret KERNEL32.InitializeCriticalSection() retval=00000001 ret=7e1b2469 002c:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1c73ab 002c:Ret KERNEL32.CreateEventW() retval=00000070 ret=7e1c73ab 002c:Call KERNEL32.CreateThread(00000000,00000000,7e1c5570,00000000,00000000,0013cedc) ret=7e1c73ef 0009:Ret KERNEL32.CreateThread() retval=00000064 ret=7e73560c 0009:Call KERNEL32.SetThreadPriority(00000064,0000000f) ret=7e73562d 0009:Ret KERNEL32.SetThreadPriority() retval=00000001 ret=7e73562d 0009:Ret winmm.PlaySoundW() retval=00000001 ret=01005c40 0009:Call user32.GetMenu(00010030) ret=01005c57 0009:Ret user32.GetMenu() retval=000000f0 ret=01005c57 0009:Call user32.EnableMenuItem(000000f0,00009c46,00000000) ret=01005c69 0009:Ret user32.EnableMenuItem() retval=00000001 ret=01005c69 0009:Call user32.EnableMenuItem(000000f0,00009c47,00000000) ret=01005c74 0009:Ret user32.EnableMenuItem() retval=00000001 ret=01005c74 0009:Call user32.EnableMenuItem(000000f0,00009c50,00000000) ret=01005c7f 0009:Ret user32.EnableMenuItem() retval=00000001 ret=01005c7f 0009:Call user32.EnableMenuItem(000000f0,00009c4d,00000000) ret=01005c8a 0009:Ret user32.EnableMenuItem() retval=00000001 ret=01005c8a 0009:Call user32.EnableMenuItem(000000f0,00009c4b,00000000) ret=01005c95 0009:Ret user32.EnableMenuItem() retval=00000001 ret=01005c95 0009:Call user32.DrawMenuBar(00010030) ret=01005c9d 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_WINDOWPOSCHANGING,wp=00000000,lp=0033f580) 0009:Call user32.DefWindowProcW(00010030,00000046,00000000,0033f580) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_WINDOWPOSCHANGING,wp=00000000,lp=0033f580) retval=00000000 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCCALCSIZE,wp=00000001,lp=0033f49c) 0009:Call user32.DefWindowProcW(00010030,00000083,00000001,0033f49c) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000300 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCCALCSIZE,wp=00000001,lp=0033f49c) retval=00000300 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCPAINT,wp=000015b0,lp=00000000) 0009:Call user32.DefWindowProcW(00010030,00000085,000015b0,00000000) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCPAINT,wp=000015b0,lp=00000000) retval=00000000 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_ERASEBKGND,wp=00000314,lp=00000000) 0009:Call user32.DefWindowProcW(00010030,00000014,00000314,00000000) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_ERASEBKGND,wp=00000314,lp=00000000) retval=00000000 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_WINDOWPOSCHANGED,wp=00000000,lp=0033f580) 0009:Call user32.DefWindowProcW(00010030,00000047,00000000,0033f580) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_WINDOWPOSCHANGED,wp=00000000,lp=0033f580) retval=00000000 0009:Ret user32.DrawMenuBar() retval=00000001 ret=01005c9d 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_COMMAND,wp=00009c51,lp=00000000) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEACTIVATE,wp=00010030,lp=02010002) 0009:Call user32.DefWindowProcW(00010030,00000021,00010030,02010002) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEACTIVATE,wp=00010030,lp=02010002) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=025003d0) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,025003d0) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=025003d0) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=020c03cf) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=020c03cf) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_PAINT,wp=00000000,lp=00000000) 0009:Call user32.BeginPaint(00010030,0033f8d4) ret=01006ec0 0009:Ret user32.BeginPaint() retval=00000314 ret=01006ec0 0009:Call user32.GetClientRect(00010030,0033f800) ret=01005cd6 0009:Ret user32.GetClientRect() retval=00000001 ret=01005cd6 0009:Call gdi32.CreateCompatibleDC(00000314) ret=0100272b 0009:Ret gdi32.CreateCompatibleDC() retval=00001600 ret=0100272b 0009:Call user32.LoadBitmapW(01000000,010012bc L"FELT") ret=0100273f 0009:Ret user32.LoadBitmapW() retval=00001618 ret=0100273f 0009:Call gdi32.SelectObject(00001600,00001618) ret=0100274c 0009:Ret gdi32.SelectObject() retval=0000006c ret=0100274c 0009:Call gdi32.BitBlt(00000314,00000000,00000000,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000003f,00000000,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000007e,00000000,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000bd,00000000,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000fc,00000000,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000013b,00000000,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000017a,00000000,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001b9,00000000,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001f8,00000000,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000237,00000000,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000276,00000000,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002b5,00000000,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002f4,00000000,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000333,00000000,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000372,00000000,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003b1,00000000,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003f0,00000000,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000042f,00000000,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000046e,00000000,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ad,00000000,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ec,00000000,00000013,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000000,00000040,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000003f,00000040,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000007e,00000040,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000bd,00000040,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000fc,00000040,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000013b,00000040,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000017a,00000040,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001b9,00000040,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001f8,00000040,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000237,00000040,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000276,00000040,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002b5,00000040,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002f4,00000040,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000333,00000040,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000372,00000040,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003b1,00000040,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003f0,00000040,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000042f,00000040,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000046e,00000040,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ad,00000040,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ec,00000040,00000013,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000000,00000080,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000003f,00000080,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000007e,00000080,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000bd,00000080,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000fc,00000080,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000013b,00000080,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000017a,00000080,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001b9,00000080,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001f8,00000080,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000237,00000080,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000276,00000080,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002b5,00000080,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002f4,00000080,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000333,00000080,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000372,00000080,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003b1,00000080,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003f0,00000080,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000042f,00000080,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000046e,00000080,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ad,00000080,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ec,00000080,00000013,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000000,000000c0,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000003f,000000c0,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000007e,000000c0,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000bd,000000c0,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000fc,000000c0,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000013b,000000c0,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000017a,000000c0,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001b9,000000c0,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001f8,000000c0,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000237,000000c0,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000276,000000c0,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002b5,000000c0,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002f4,000000c0,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000333,000000c0,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000372,000000c0,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003b1,000000c0,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003f0,000000c0,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000042f,000000c0,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000046e,000000c0,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ad,000000c0,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ec,000000c0,00000013,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000000,00000100,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000003f,00000100,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000007e,00000100,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000bd,00000100,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000fc,00000100,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000013b,00000100,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000017a,00000100,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001b9,00000100,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001f8,00000100,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000237,00000100,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000276,00000100,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002b5,00000100,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002f4,00000100,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000333,00000100,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000372,00000100,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003b1,00000100,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003f0,00000100,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000042f,00000100,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000046e,00000100,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ad,00000100,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ec,00000100,00000013,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000000,00000140,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000003f,00000140,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000007e,00000140,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000bd,00000140,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000fc,00000140,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000013b,00000140,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000017a,00000140,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001b9,00000140,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001f8,00000140,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000237,00000140,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000276,00000140,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002b5,00000140,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002f4,00000140,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000333,00000140,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000372,00000140,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003b1,00000140,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003f0,00000140,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000042f,00000140,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000046e,00000140,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ad,00000140,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ec,00000140,00000013,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000000,00000180,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000003f,00000180,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000007e,00000180,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000bd,00000180,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000fc,00000180,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000013b,00000180,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000017a,00000180,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001b9,00000180,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001f8,00000180,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000237,00000180,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000276,00000180,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002b5,00000180,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002f4,00000180,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000333,00000180,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000372,00000180,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003b1,00000180,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003f0,00000180,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000042f,00000180,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000046e,00000180,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ad,00000180,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ec,00000180,00000013,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000000,000001c0,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000003f,000001c0,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000007e,000001c0,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000bd,000001c0,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000fc,000001c0,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000013b,000001c0,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000017a,000001c0,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001b9,000001c0,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001f8,000001c0,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000237,000001c0,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000276,000001c0,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002b5,000001c0,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002f4,000001c0,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000333,000001c0,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000372,000001c0,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003b1,000001c0,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 002c:Ret KERNEL32.CreateThread() retval=00000098 ret=7e1c73ef 002c:Call KERNEL32.SetThreadPriority(00000098,0000000f) ret=7e1c7413 002c:Ret KERNEL32.SetThreadPriority() retval=00000001 ret=7e1c7413 002c:Call KERNEL32.WaitForSingleObject(00000070,ffffffff) ret=7e1c742f 002c:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1c742f 002c:Call KERNEL32.CloseHandle(00000070) ret=7e1c7443 002c:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1c7443 002c:Call ntdll.RtlFreeHeap(00110000,00000000,00148b18) ret=7e1c7479 002c:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e1c7479 002c:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bb,0014bf20,00000000,00000000) ret=7e1c4643 002c:Call KERNEL32.IsBadReadPtr(0014bf20,0000002c) ret=7e0bdbc9 002c:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 002c:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bb,008ceaa4,00000000,00000000) ret=7e0bdf33 002c:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 002c:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 002c:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 002c:Ret winmm.waveOutOpen() retval=00000000 ret=7e0c0313 002c:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 002c:Call ntdll.RtlAllocateHeap(00110000,00000000,000039ac) ret=7e73520d 002c:Ret ntdll.RtlAllocateHeap() retval=0014d3a0 ret=7e73520d 002c:Call msacm32.drv.wodMessage(0000ffff,00000007,0014bf20,0014d3a0,00000020) ret=7e728e1f 002c:Call winmm.waveOutPrepareHeader(00008001,0014d3a0,00000020) ret=7e0c09d8 002c:Call winealsa.drv.wodMessage(00000000,00000007,7e72ab2b,0014d3a0,00000020) ret=7e728e1f 002c:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 002c:Ret winmm.waveOutPrepareHeader() retval=00000000 ret=7e0c09d8 002c:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 002c:Call msacm32.drv.wodMessage(0000ffff,00000007,0014bf20,0014d3c0,00000020) ret=7e728e1f 002c:Call winmm.waveOutPrepareHeader(00008001,0014d3c0,00000020) ret=7e0c09d8 002c:Call winealsa.drv.wodMessage(00000000,00000007,7e72ab2b,0014d3c0,00000020) ret=7e728e1f 002c:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 002c:Ret winmm.waveOutPrepareHeader() retval=00000000 ret=7e0c09d8 002c:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 002c:Call KERNEL32.WaitForSingleObject(00000038,00000000) ret=7e735343 002c:Ret KERNEL32.WaitForSingleObject() retval=00000102 ret=7e735343 002c:Call msacm32.drv.wodMessage(0000ffff,00000009,0014bf20,0014d3a0,00000020) ret=7e728e1f 002c:Call winmm.waveOutWrite(00008001,0014d3a0,00000020) ret=7e0c09b5 002c:Call winealsa.drv.wodMessage(00000000,00000009,7e72ab2b,0014d3a0,00000020) ret=7e728e1f 0009:Call gdi32.BitBlt(00000314,000003f0,000001c0,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000042f,000001c0,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000046e,000001c0,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ad,000001c0,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ec,000001c0,00000013,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000000,00000200,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000003f,00000200,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000007e,00000200,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000bd,00000200,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000fc,00000200,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000013b,00000200,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000017a,00000200,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001b9,00000200,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001f8,00000200,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000237,00000200,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000276,00000200,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002b5,00000200,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002f4,00000200,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000333,00000200,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000372,00000200,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003b1,00000200,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003f0,00000200,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000042f,00000200,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000046e,00000200,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ad,00000200,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ec,00000200,00000013,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000000,00000240,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000003f,00000240,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000007e,00000240,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000bd,00000240,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000fc,00000240,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000013b,00000240,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000017a,00000240,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001b9,00000240,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001f8,00000240,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000237,00000240,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000276,00000240,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002b5,00000240,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002f4,00000240,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000333,00000240,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000372,00000240,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003b1,00000240,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003f0,00000240,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000042f,00000240,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000046e,00000240,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ad,00000240,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ec,00000240,00000013,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000000,00000280,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000003f,00000280,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000007e,00000280,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000bd,00000280,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000fc,00000280,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000013b,00000280,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000017a,00000280,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001b9,00000280,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001f8,00000280,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000237,00000280,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000276,00000280,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002b5,00000280,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002f4,00000280,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000333,00000280,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000372,00000280,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003b1,00000280,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003f0,00000280,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000042f,00000280,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000046e,00000280,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ad,00000280,0000003f,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ec,00000280,00000013,00000040,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000000,000002c0,0000003f,00000002,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000003f,000002c0,0000003f,00000002,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000007e,000002c0,0000003f,00000002,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000bd,000002c0,0000003f,00000002,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000fc,000002c0,0000003f,00000002,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000013b,000002c0,0000003f,00000002,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000017a,000002c0,0000003f,00000002,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001b9,000002c0,0000003f,00000002,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001f8,000002c0,0000003f,00000002,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000237,000002c0,0000003f,00000002,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000276,000002c0,0000003f,00000002,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002b5,000002c0,0000003f,00000002,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002f4,000002c0,0000003f,00000002,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000333,000002c0,0000003f,00000002,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000372,000002c0,0000003f,00000002,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003b1,000002c0,0000003f,00000002,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003f0,000002c0,0000003f,00000002,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000042f,000002c0,0000003f,00000002,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000046e,000002c0,0000003f,00000002,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ad,000002c0,0000003f,00000002,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ec,000002c0,00000013,00000002,00001600,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.SelectObject(00001600,0000006c) ret=0100287b 0009:Ret gdi32.SelectObject() retval=00001618 ret=0100287b 0009:Call gdi32.DeleteObject(00001618) ret=01002884 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01002884 0009:Call gdi32.DeleteDC(00001600) ret=0100288d 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100288d 0009:Call gdi32.CreateCompatibleDC(00000314) ret=01005cf3 0009:Ret gdi32.CreateCompatibleDC() retval=0000162c ret=01005cf3 0009:Call gdi32.CreateCompatibleDC(00000314) ret=01005cf9 0009:Ret gdi32.CreateCompatibleDC() retval=00001638 ret=01005cf9 0009:Call user32.LoadBitmapW(01000000,010012c8 L"CARDBACK") ret=01005d0d 002c:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 002c:Ret winmm.waveOutWrite() retval=00000000 ret=7e0c09b5 002c:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 002c:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 002c:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 002c:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 002c:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 002c:Call KERNEL32.WaitForSingleObject(00000068,ffffffff) ret=7e73429b 0009:Ret user32.LoadBitmapW() retval=00001650 ret=01005d0d 0009:Call gdi32.SelectObject(00001638,00001650) ret=01005d1a 0009:Ret gdi32.SelectObject() retval=0000006c ret=01005d1a 0009:Call gdi32.GetPixel(00000314,00000033,0000000a) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000034,0000000a) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000033,0000000b) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,00000079,0000000a) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,00000078,0000000a) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,00000079,0000000b) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,00000033,0000000a,00000047,00000009,00001638,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,00000033,0000000a,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000034,0000000a,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000033,0000000b,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,00000079,0000000a,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,00000078,0000000a,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,00000079,0000000b,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,00000033,00000011) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000034,00000011) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000033,00000012) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,00000079,00000011) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,00000078,00000011) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,00000079,00000012) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,00000033,00000011,00000047,00000009,00001638,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,00000033,00000011,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000034,00000011,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000033,00000012,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,00000079,00000011,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,00000078,00000011,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,00000079,00000012,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,00000033,00000018) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000034,00000018) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000033,00000019) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,00000079,00000018) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,00000078,00000018) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,00000079,00000019) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,00000033,00000018,00000047,00000009,00001638,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,00000033,00000018,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000034,00000018,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000033,00000019,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,00000079,00000018,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,00000078,00000018,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,00000079,00000019,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,00000033,0000001f) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000034,0000001f) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000033,00000020) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,00000079,0000001f) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,00000078,0000001f) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,00000079,00000020) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,00000033,0000001f,00000047,00000009,00001638,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,00000033,0000001f,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000034,0000001f,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000033,00000020,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,00000079,0000001f,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,00000078,0000001f,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,00000079,00000020,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,00000033,00000026) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000034,00000026) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000033,00000027) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,00000079,00000026) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,00000078,00000026) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,00000079,00000027) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,00000033,00000026,00000047,00000009,00001638,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,00000033,00000026,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000034,00000026,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000033,00000027,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,00000079,00000026,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,00000078,00000026,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,00000079,00000027,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,00000033,0000002d) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000034,0000002d) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000033,0000002e) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,00000079,0000002d) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,00000078,0000002d) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,00000079,0000002e) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.GetPixel(00000314,00000033,0000008c) ret=01005ea5 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ea5 0009:Call gdi32.GetPixel(00000314,00000034,0000008c) ret=01005eba 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005eba 0009:Call gdi32.GetPixel(00000314,00000033,0000008b) ret=01005ecd 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ecd 0009:Call gdi32.GetPixel(00000314,00000079,0000008c) ret=01005ee1 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ee1 0009:Call gdi32.GetPixel(00000314,00000078,0000008c) ret=01005ef5 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ef5 0009:Call gdi32.GetPixel(00000314,00000079,0000008b) ret=01005f09 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005f09 0009:Call user32.LoadBitmapW(01000000,0033f888 L"CARD50") ret=01005f7d 0009:Ret user32.LoadBitmapW() retval=00001670 ret=01005f7d 0009:Call gdi32.SelectObject(0000162c,00001670) ret=01005f8a 0009:Ret gdi32.SelectObject() retval=0000006c ret=01005f8a 0009:Call gdi32.BitBlt(00000314,00000033,0000002d,00000047,00000060,0000162c,00000000,00000000,00cc0020) ret=01005faa 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005faa 0009:Call gdi32.SelectObject(0000162c,0000006c) ret=01005fb6 0009:Ret gdi32.SelectObject() retval=00001670 ret=01005fb6 0009:Call gdi32.DeleteObject(00001670) ret=01005fbf 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005fbf 0009:Call gdi32.SetPixel(00000314,00000033,0000002d,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000034,0000002d,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000033,0000002e,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,00000079,0000002d,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,00000078,0000002d,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,00000079,0000002e,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.SetPixel(00000314,00000033,0000008c,ffffffff) ret=01006044 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006044 0009:Call gdi32.SetPixel(00000314,00000034,0000008c,ffffffff) ret=01006059 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006059 0009:Call gdi32.SetPixel(00000314,00000033,0000008b,ffffffff) ret=01006069 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006069 0009:Call gdi32.SetPixel(00000314,00000079,0000008c,ffffffff) ret=0100607d 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100607d 0009:Call gdi32.SetPixel(00000314,00000078,0000008c,ffffffff) ret=01006091 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006091 0009:Call gdi32.SetPixel(00000314,00000079,0000008b,ffffffff) ret=010060a5 0009:Ret gdi32.SetPixel() retval=00ffffff ret=010060a5 0009:Call gdi32.GetPixel(00000314,000000ad,0000000a) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,000000ae,0000000a) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,000000ad,0000000b) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,000000f3,0000000a) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,000000f2,0000000a) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,000000f3,0000000b) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,000000ad,0000000a,00000047,00000009,00001638,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,000000ad,0000000a,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,000000ae,0000000a,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,000000ad,0000000b,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000000f3,0000000a,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,000000f2,0000000a,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,000000f3,0000000b,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,000000ad,00000011) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,000000ae,00000011) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,000000ad,00000012) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,000000f3,00000011) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,000000f2,00000011) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,000000f3,00000012) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,000000ad,00000011,00000047,00000009,00001638,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,000000ad,00000011,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,000000ae,00000011,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,000000ad,00000012,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000000f3,00000011,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,000000f2,00000011,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,000000f3,00000012,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,000000ad,00000018) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,000000ae,00000018) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,000000ad,00000019) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,000000f3,00000018) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,000000f2,00000018) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,000000f3,00000019) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,000000ad,00000018,00000047,00000009,00001638,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,000000ad,00000018,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,000000ae,00000018,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,000000ad,00000019,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000000f3,00000018,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,000000f2,00000018,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,000000f3,00000019,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,000000ad,0000001f) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,000000ae,0000001f) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,000000ad,00000020) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,000000f3,0000001f) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,000000f2,0000001f) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,000000f3,00000020) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,000000ad,0000001f,00000047,00000009,00001638,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,000000ad,0000001f,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,000000ae,0000001f,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,000000ad,00000020,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000000f3,0000001f,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,000000f2,0000001f,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,000000f3,00000020,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,000000ad,00000026) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,000000ae,00000026) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,000000ad,00000027) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,000000f3,00000026) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,000000f2,00000026) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,000000f3,00000027) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,000000ad,00000026,00000047,00000009,00001638,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,000000ad,00000026,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,000000ae,00000026,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,000000ad,00000027,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000000f3,00000026,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,000000f2,00000026,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,000000f3,00000027,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,000000ad,0000002d) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,000000ae,0000002d) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,000000ad,0000002e) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,000000f3,0000002d) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,000000f2,0000002d) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,000000f3,0000002e) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.GetPixel(00000314,000000ad,0000008c) ret=01005ea5 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ea5 0009:Call gdi32.GetPixel(00000314,000000ae,0000008c) ret=01005eba 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005eba 0009:Call gdi32.GetPixel(00000314,000000ad,0000008b) ret=01005ecd 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ecd 0009:Call gdi32.GetPixel(00000314,000000f3,0000008c) ret=01005ee1 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ee1 0009:Call gdi32.GetPixel(00000314,000000f2,0000008c) ret=01005ef5 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ef5 0009:Call gdi32.GetPixel(00000314,000000f3,0000008b) ret=01005f09 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005f09 0009:Call user32.LoadBitmapW(01000000,0033f888 L"CARD44") ret=01005f7d 0009:Ret user32.LoadBitmapW() retval=00001690 ret=01005f7d 0009:Call gdi32.SelectObject(0000162c,00001690) ret=01005f8a 0009:Ret gdi32.SelectObject() retval=0000006c ret=01005f8a 0009:Call gdi32.BitBlt(00000314,000000ad,0000002d,00000047,00000060,0000162c,00000000,00000000,00cc0020) ret=01005faa 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005faa 0009:Call gdi32.SelectObject(0000162c,0000006c) ret=01005fb6 0009:Ret gdi32.SelectObject() retval=00001690 ret=01005fb6 0009:Call gdi32.DeleteObject(00001690) ret=01005fbf 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005fbf 0009:Call gdi32.SetPixel(00000314,000000ad,0000002d,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,000000ae,0000002d,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,000000ad,0000002e,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000000f3,0000002d,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,000000f2,0000002d,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,000000f3,0000002e,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.SetPixel(00000314,000000ad,0000008c,ffffffff) ret=01006044 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006044 0009:Call gdi32.SetPixel(00000314,000000ae,0000008c,ffffffff) ret=01006059 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006059 0009:Call gdi32.SetPixel(00000314,000000ad,0000008b,ffffffff) ret=01006069 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006069 0009:Call gdi32.SetPixel(00000314,000000f3,0000008c,ffffffff) ret=0100607d 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100607d 0009:Call gdi32.SetPixel(00000314,000000f2,0000008c,ffffffff) ret=01006091 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006091 0009:Call gdi32.SetPixel(00000314,000000f3,0000008b,ffffffff) ret=010060a5 0009:Ret gdi32.SetPixel() retval=00ffffff ret=010060a5 0009:Call gdi32.GetPixel(00000314,00000127,0000000a) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000128,0000000a) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000127,0000000b) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,0000016d,0000000a) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,0000016c,0000000a) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,0000016d,0000000b) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,00000127,0000000a,00000047,00000009,00001638,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,00000127,0000000a,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000128,0000000a,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000127,0000000b,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,0000016d,0000000a,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,0000016c,0000000a,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,0000016d,0000000b,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,00000127,00000011) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000128,00000011) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000127,00000012) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,0000016d,00000011) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,0000016c,00000011) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,0000016d,00000012) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,00000127,00000011,00000047,00000009,00001638,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,00000127,00000011,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000128,00000011,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000127,00000012,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,0000016d,00000011,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,0000016c,00000011,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,0000016d,00000012,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,00000127,00000018) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000128,00000018) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000127,00000019) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,0000016d,00000018) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,0000016c,00000018) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,0000016d,00000019) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,00000127,00000018,00000047,00000009,00001638,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,00000127,00000018,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000128,00000018,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000127,00000019,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,0000016d,00000018,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,0000016c,00000018,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,0000016d,00000019,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,00000127,0000001f) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000128,0000001f) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000127,00000020) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,0000016d,0000001f) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,0000016c,0000001f) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,0000016d,00000020) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,00000127,0000001f,00000047,00000009,00001638,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,00000127,0000001f,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000128,0000001f,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000127,00000020,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,0000016d,0000001f,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,0000016c,0000001f,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,0000016d,00000020,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,00000127,00000026) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000128,00000026) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000127,00000027) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,0000016d,00000026) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,0000016c,00000026) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,0000016d,00000027) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,00000127,00000026,00000047,00000009,00001638,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,00000127,00000026,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000128,00000026,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000127,00000027,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,0000016d,00000026,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,0000016c,00000026,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,0000016d,00000027,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,00000127,0000002d) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000128,0000002d) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000127,0000002e) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,0000016d,0000002d) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,0000016c,0000002d) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,0000016d,0000002e) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.GetPixel(00000314,00000127,0000008c) ret=01005ea5 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ea5 0009:Call gdi32.GetPixel(00000314,00000128,0000008c) ret=01005eba 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005eba 0009:Call gdi32.GetPixel(00000314,00000127,0000008b) ret=01005ecd 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ecd 0009:Call gdi32.GetPixel(00000314,0000016d,0000008c) ret=01005ee1 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ee1 0009:Call gdi32.GetPixel(00000314,0000016c,0000008c) ret=01005ef5 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ef5 0009:Call gdi32.GetPixel(00000314,0000016d,0000008b) ret=01005f09 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005f09 0009:Call user32.LoadBitmapW(01000000,0033f888 L"CARD48") ret=01005f7d 0009:Ret user32.LoadBitmapW() retval=000016b0 ret=01005f7d 0009:Call gdi32.SelectObject(0000162c,000016b0) ret=01005f8a 0009:Ret gdi32.SelectObject() retval=0000006c ret=01005f8a 0009:Call gdi32.BitBlt(00000314,00000127,0000002d,00000047,00000060,0000162c,00000000,00000000,00cc0020) ret=01005faa 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005faa 0009:Call gdi32.SelectObject(0000162c,0000006c) ret=01005fb6 0009:Ret gdi32.SelectObject() retval=000016b0 ret=01005fb6 0009:Call gdi32.DeleteObject(000016b0) ret=01005fbf 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005fbf 0009:Call gdi32.SetPixel(00000314,00000127,0000002d,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000128,0000002d,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000127,0000002e,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,0000016d,0000002d,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,0000016c,0000002d,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,0000016d,0000002e,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.SetPixel(00000314,00000127,0000008c,ffffffff) ret=01006044 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006044 0009:Call gdi32.SetPixel(00000314,00000128,0000008c,ffffffff) ret=01006059 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006059 0009:Call gdi32.SetPixel(00000314,00000127,0000008b,ffffffff) ret=01006069 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006069 0009:Call gdi32.SetPixel(00000314,0000016d,0000008c,ffffffff) ret=0100607d 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100607d 0009:Call gdi32.SetPixel(00000314,0000016c,0000008c,ffffffff) ret=01006091 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006091 0009:Call gdi32.SetPixel(00000314,0000016d,0000008b,ffffffff) ret=010060a5 0009:Ret gdi32.SetPixel() retval=00ffffff ret=010060a5 0009:Call gdi32.GetPixel(00000314,000001a1,0000000a) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,000001a2,0000000a) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,000001a1,0000000b) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,000001e7,0000000a) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,000001e6,0000000a) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,000001e7,0000000b) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,000001a1,0000000a,00000047,00000009,00001638,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,000001a1,0000000a,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,000001a2,0000000a,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,000001a1,0000000b,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000001e7,0000000a,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,000001e6,0000000a,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,000001e7,0000000b,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,000001a1,00000011) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,000001a2,00000011) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,000001a1,00000012) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,000001e7,00000011) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,000001e6,00000011) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,000001e7,00000012) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,000001a1,00000011,00000047,00000009,00001638,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,000001a1,00000011,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,000001a2,00000011,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,000001a1,00000012,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000001e7,00000011,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,000001e6,00000011,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,000001e7,00000012,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,000001a1,00000018) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,000001a2,00000018) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,000001a1,00000019) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,000001e7,00000018) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,000001e6,00000018) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,000001e7,00000019) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,000001a1,00000018,00000047,00000009,00001638,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,000001a1,00000018,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,000001a2,00000018,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,000001a1,00000019,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000001e7,00000018,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,000001e6,00000018,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,000001e7,00000019,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,000001a1,0000001f) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,000001a2,0000001f) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,000001a1,00000020) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,000001e7,0000001f) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,000001e6,0000001f) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,000001e7,00000020) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,000001a1,0000001f,00000047,00000009,00001638,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,000001a1,0000001f,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,000001a2,0000001f,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,000001a1,00000020,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000001e7,0000001f,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,000001e6,0000001f,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,000001e7,00000020,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,000001a1,00000026) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,000001a2,00000026) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,000001a1,00000027) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,000001e7,00000026) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,000001e6,00000026) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,000001e7,00000027) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,000001a1,00000026,00000047,00000009,00001638,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,000001a1,00000026,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,000001a2,00000026,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,000001a1,00000027,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000001e7,00000026,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,000001e6,00000026,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,000001e7,00000027,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,000001a1,0000002d) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,000001a2,0000002d) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,000001a1,0000002e) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,000001e7,0000002d) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,000001e6,0000002d) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,000001e7,0000002e) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.GetPixel(00000314,000001a1,0000008c) ret=01005ea5 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ea5 0009:Call gdi32.GetPixel(00000314,000001a2,0000008c) ret=01005eba 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005eba 0009:Call gdi32.GetPixel(00000314,000001a1,0000008b) ret=01005ecd 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ecd 0009:Call gdi32.GetPixel(00000314,000001e7,0000008c) ret=01005ee1 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ee1 0009:Call gdi32.GetPixel(00000314,000001e6,0000008c) ret=01005ef5 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ef5 0009:Call gdi32.GetPixel(00000314,000001e7,0000008b) ret=01005f09 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005f09 0009:Call user32.LoadBitmapW(01000000,0033f888 L"CARD47") ret=01005f7d 0009:Ret user32.LoadBitmapW() retval=000016d0 ret=01005f7d 0009:Call gdi32.SelectObject(0000162c,000016d0) ret=01005f8a 0009:Ret gdi32.SelectObject() retval=0000006c ret=01005f8a 0009:Call gdi32.BitBlt(00000314,000001a1,0000002d,00000047,00000060,0000162c,00000000,00000000,00cc0020) ret=01005faa 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005faa 0009:Call gdi32.SelectObject(0000162c,0000006c) ret=01005fb6 0009:Ret gdi32.SelectObject() retval=000016d0 ret=01005fb6 0009:Call gdi32.DeleteObject(000016d0) ret=01005fbf 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005fbf 0009:Call gdi32.SetPixel(00000314,000001a1,0000002d,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,000001a2,0000002d,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,000001a1,0000002e,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000001e7,0000002d,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,000001e6,0000002d,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,000001e7,0000002e,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.SetPixel(00000314,000001a1,0000008c,ffffffff) ret=01006044 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006044 0009:Call gdi32.SetPixel(00000314,000001a2,0000008c,ffffffff) ret=01006059 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006059 0009:Call gdi32.SetPixel(00000314,000001a1,0000008b,ffffffff) ret=01006069 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006069 0009:Call gdi32.SetPixel(00000314,000001e7,0000008c,ffffffff) ret=0100607d 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100607d 0009:Call gdi32.SetPixel(00000314,000001e6,0000008c,ffffffff) ret=01006091 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006091 0009:Call gdi32.SetPixel(00000314,000001e7,0000008b,ffffffff) ret=010060a5 0009:Ret gdi32.SetPixel() retval=00ffffff ret=010060a5 0009:Call gdi32.GetPixel(00000314,0000021b,0000000a) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,0000021c,0000000a) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,0000021b,0000000b) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,00000261,0000000a) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,00000260,0000000a) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,00000261,0000000b) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,0000021b,0000000a,00000047,00000009,00001638,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,0000021b,0000000a,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,0000021c,0000000a,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,0000021b,0000000b,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,00000261,0000000a,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,00000260,0000000a,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,00000261,0000000b,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,0000021b,00000011) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,0000021c,00000011) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,0000021b,00000012) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,00000261,00000011) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,00000260,00000011) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,00000261,00000012) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,0000021b,00000011,00000047,00000009,00001638,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,0000021b,00000011,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,0000021c,00000011,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,0000021b,00000012,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,00000261,00000011,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,00000260,00000011,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,00000261,00000012,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,0000021b,00000018) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,0000021c,00000018) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,0000021b,00000019) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,00000261,00000018) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,00000260,00000018) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,00000261,00000019) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,0000021b,00000018,00000047,00000009,00001638,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,0000021b,00000018,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,0000021c,00000018,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,0000021b,00000019,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,00000261,00000018,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,00000260,00000018,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,00000261,00000019,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,0000021b,0000001f) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,0000021c,0000001f) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,0000021b,00000020) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,00000261,0000001f) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,00000260,0000001f) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,00000261,00000020) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,0000021b,0000001f,00000047,00000009,00001638,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,0000021b,0000001f,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,0000021c,0000001f,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,0000021b,00000020,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,00000261,0000001f,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,00000260,0000001f,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,00000261,00000020,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,0000021b,00000026) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,0000021c,00000026) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,0000021b,00000027) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,00000261,00000026) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,00000260,00000026) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,00000261,00000027) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.GetPixel(00000314,0000021b,00000085) ret=01005ea5 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ea5 0009:Call gdi32.GetPixel(00000314,0000021c,00000085) ret=01005eba 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005eba 0009:Call gdi32.GetPixel(00000314,0000021b,00000084) ret=01005ecd 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ecd 0009:Call gdi32.GetPixel(00000314,00000261,00000085) ret=01005ee1 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ee1 0009:Call gdi32.GetPixel(00000314,00000260,00000085) ret=01005ef5 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ef5 0009:Call gdi32.GetPixel(00000314,00000261,00000084) ret=01005f09 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005f09 0009:Call user32.LoadBitmapW(01000000,0033f888 L"CARD41") ret=01005f7d 0009:Ret user32.LoadBitmapW() retval=000016f0 ret=01005f7d 0009:Call gdi32.SelectObject(0000162c,000016f0) ret=01005f8a 0009:Ret gdi32.SelectObject() retval=0000006c ret=01005f8a 0009:Call gdi32.BitBlt(00000314,0000021b,00000026,00000047,00000060,0000162c,00000000,00000000,00cc0020) ret=01005faa 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005faa 0009:Call gdi32.SelectObject(0000162c,0000006c) ret=01005fb6 0009:Ret gdi32.SelectObject() retval=000016f0 ret=01005fb6 0009:Call gdi32.DeleteObject(000016f0) ret=01005fbf 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005fbf 0009:Call gdi32.SetPixel(00000314,0000021b,00000026,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,0000021c,00000026,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,0000021b,00000027,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,00000261,00000026,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,00000260,00000026,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,00000261,00000027,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.SetPixel(00000314,0000021b,00000085,ffffffff) ret=01006044 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006044 0009:Call gdi32.SetPixel(00000314,0000021c,00000085,ffffffff) ret=01006059 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006059 0009:Call gdi32.SetPixel(00000314,0000021b,00000084,ffffffff) ret=01006069 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006069 0009:Call gdi32.SetPixel(00000314,00000261,00000085,ffffffff) ret=0100607d 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100607d 0009:Call gdi32.SetPixel(00000314,00000260,00000085,ffffffff) ret=01006091 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006091 0009:Call gdi32.SetPixel(00000314,00000261,00000084,ffffffff) ret=010060a5 0009:Ret gdi32.SetPixel() retval=00ffffff ret=010060a5 0009:Call gdi32.GetPixel(00000314,00000295,0000000a) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000296,0000000a) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000295,0000000b) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,000002db,0000000a) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,000002da,0000000a) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,000002db,0000000b) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,00000295,0000000a,00000047,00000009,00001638,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,00000295,0000000a,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000296,0000000a,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000295,0000000b,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000002db,0000000a,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,000002da,0000000a,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,000002db,0000000b,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,00000295,00000011) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000296,00000011) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000295,00000012) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,000002db,00000011) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,000002da,00000011) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,000002db,00000012) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,00000295,00000011,00000047,00000009,00001638,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,00000295,00000011,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000296,00000011,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000295,00000012,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000002db,00000011,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,000002da,00000011,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,000002db,00000012,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,00000295,00000018) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000296,00000018) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000295,00000019) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,000002db,00000018) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,000002da,00000018) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,000002db,00000019) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,00000295,00000018,00000047,00000009,00001638,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,00000295,00000018,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000296,00000018,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000295,00000019,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000002db,00000018,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,000002da,00000018,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,000002db,00000019,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,00000295,0000001f) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000296,0000001f) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000295,00000020) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,000002db,0000001f) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,000002da,0000001f) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,000002db,00000020) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,00000295,0000001f,00000047,00000009,00001638,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,00000295,0000001f,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000296,0000001f,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000295,00000020,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000002db,0000001f,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,000002da,0000001f,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,000002db,00000020,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,00000295,00000026) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000296,00000026) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000295,00000027) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,000002db,00000026) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,000002da,00000026) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,000002db,00000027) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.GetPixel(00000314,00000295,00000085) ret=01005ea5 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ea5 0009:Call gdi32.GetPixel(00000314,00000296,00000085) ret=01005eba 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005eba 0009:Call gdi32.GetPixel(00000314,00000295,00000084) ret=01005ecd 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ecd 0009:Call gdi32.GetPixel(00000314,000002db,00000085) ret=01005ee1 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ee1 0009:Call gdi32.GetPixel(00000314,000002da,00000085) ret=01005ef5 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ef5 0009:Call gdi32.GetPixel(00000314,000002db,00000084) ret=01005f09 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005f09 0009:Call user32.LoadBitmapW(01000000,0033f888 L"CARD44") ret=01005f7d 0009:Ret user32.LoadBitmapW() retval=00001710 ret=01005f7d 0009:Call gdi32.SelectObject(0000162c,00001710) ret=01005f8a 0009:Ret gdi32.SelectObject() retval=0000006c ret=01005f8a 0009:Call gdi32.BitBlt(00000314,00000295,00000026,00000047,00000060,0000162c,00000000,00000000,00cc0020) ret=01005faa 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005faa 0009:Call gdi32.SelectObject(0000162c,0000006c) ret=01005fb6 0009:Ret gdi32.SelectObject() retval=00001710 ret=01005fb6 0009:Call gdi32.DeleteObject(00001710) ret=01005fbf 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005fbf 0009:Call gdi32.SetPixel(00000314,00000295,00000026,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000296,00000026,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000295,00000027,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000002db,00000026,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,000002da,00000026,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,000002db,00000027,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.SetPixel(00000314,00000295,00000085,ffffffff) ret=01006044 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006044 0009:Call gdi32.SetPixel(00000314,00000296,00000085,ffffffff) ret=01006059 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006059 0009:Call gdi32.SetPixel(00000314,00000295,00000084,ffffffff) ret=01006069 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006069 0009:Call gdi32.SetPixel(00000314,000002db,00000085,ffffffff) ret=0100607d 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100607d 0009:Call gdi32.SetPixel(00000314,000002da,00000085,ffffffff) ret=01006091 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006091 0009:Call gdi32.SetPixel(00000314,000002db,00000084,ffffffff) ret=010060a5 0009:Ret gdi32.SetPixel() retval=00ffffff ret=010060a5 0009:Call gdi32.GetPixel(00000314,0000030f,0000000a) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000310,0000000a) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,0000030f,0000000b) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,00000355,0000000a) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,00000354,0000000a) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,00000355,0000000b) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,0000030f,0000000a,00000047,00000009,00001638,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,0000030f,0000000a,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000310,0000000a,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,0000030f,0000000b,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,00000355,0000000a,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,00000354,0000000a,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,00000355,0000000b,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,0000030f,00000011) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000310,00000011) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,0000030f,00000012) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,00000355,00000011) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,00000354,00000011) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,00000355,00000012) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,0000030f,00000011,00000047,00000009,00001638,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,0000030f,00000011,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000310,00000011,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,0000030f,00000012,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,00000355,00000011,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,00000354,00000011,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,00000355,00000012,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,0000030f,00000018) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000310,00000018) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,0000030f,00000019) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,00000355,00000018) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,00000354,00000018) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,00000355,00000019) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,0000030f,00000018,00000047,00000009,00001638,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,0000030f,00000018,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000310,00000018,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,0000030f,00000019,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,00000355,00000018,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,00000354,00000018,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,00000355,00000019,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,0000030f,0000001f) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000310,0000001f) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,0000030f,00000020) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,00000355,0000001f) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,00000354,0000001f) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,00000355,00000020) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,0000030f,0000001f,00000047,00000009,00001638,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,0000030f,0000001f,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000310,0000001f,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,0000030f,00000020,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,00000355,0000001f,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,00000354,0000001f,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,00000355,00000020,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,0000030f,00000026) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000310,00000026) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,0000030f,00000027) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,00000355,00000026) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,00000354,00000026) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,00000355,00000027) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.GetPixel(00000314,0000030f,00000085) ret=01005ea5 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ea5 0009:Call gdi32.GetPixel(00000314,00000310,00000085) ret=01005eba 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005eba 0009:Call gdi32.GetPixel(00000314,0000030f,00000084) ret=01005ecd 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ecd 0009:Call gdi32.GetPixel(00000314,00000355,00000085) ret=01005ee1 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ee1 0009:Call gdi32.GetPixel(00000314,00000354,00000085) ret=01005ef5 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ef5 0009:Call gdi32.GetPixel(00000314,00000355,00000084) ret=01005f09 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005f09 0009:Call user32.LoadBitmapW(01000000,0033f888 L"CARD40") ret=01005f7d 0009:Ret user32.LoadBitmapW() retval=00001730 ret=01005f7d 0009:Call gdi32.SelectObject(0000162c,00001730) ret=01005f8a 0009:Ret gdi32.SelectObject() retval=0000006c ret=01005f8a 0009:Call gdi32.BitBlt(00000314,0000030f,00000026,00000047,00000060,0000162c,00000000,00000000,00cc0020) ret=01005faa 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005faa 0009:Call gdi32.SelectObject(0000162c,0000006c) ret=01005fb6 0009:Ret gdi32.SelectObject() retval=00001730 ret=01005fb6 0009:Call gdi32.DeleteObject(00001730) ret=01005fbf 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005fbf 0009:Call gdi32.SetPixel(00000314,0000030f,00000026,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000310,00000026,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,0000030f,00000027,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,00000355,00000026,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,00000354,00000026,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,00000355,00000027,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.SetPixel(00000314,0000030f,00000085,ffffffff) ret=01006044 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006044 0009:Call gdi32.SetPixel(00000314,00000310,00000085,ffffffff) ret=01006059 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006059 0009:Call gdi32.SetPixel(00000314,0000030f,00000084,ffffffff) ret=01006069 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006069 0009:Call gdi32.SetPixel(00000314,00000355,00000085,ffffffff) ret=0100607d 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100607d 0009:Call gdi32.SetPixel(00000314,00000354,00000085,ffffffff) ret=01006091 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006091 0009:Call gdi32.SetPixel(00000314,00000355,00000084,ffffffff) ret=010060a5 0009:Ret gdi32.SetPixel() retval=00ffffff ret=010060a5 0009:Call gdi32.GetPixel(00000314,00000389,0000000a) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,0000038a,0000000a) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000389,0000000b) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,000003cf,0000000a) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,000003ce,0000000a) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,000003cf,0000000b) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,00000389,0000000a,00000047,00000009,00001638,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,00000389,0000000a,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,0000038a,0000000a,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000389,0000000b,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000003cf,0000000a,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,000003ce,0000000a,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,000003cf,0000000b,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,00000389,00000011) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,0000038a,00000011) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000389,00000012) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,000003cf,00000011) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,000003ce,00000011) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,000003cf,00000012) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,00000389,00000011,00000047,00000009,00001638,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,00000389,00000011,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,0000038a,00000011,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000389,00000012,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000003cf,00000011,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,000003ce,00000011,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,000003cf,00000012,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,00000389,00000018) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,0000038a,00000018) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000389,00000019) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,000003cf,00000018) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,000003ce,00000018) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,000003cf,00000019) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,00000389,00000018,00000047,00000009,00001638,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,00000389,00000018,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,0000038a,00000018,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000389,00000019,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000003cf,00000018,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,000003ce,00000018,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,000003cf,00000019,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,00000389,0000001f) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,0000038a,0000001f) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000389,00000020) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,000003cf,0000001f) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,000003ce,0000001f) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,000003cf,00000020) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,00000389,0000001f,00000047,00000009,00001638,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,00000389,0000001f,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,0000038a,0000001f,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000389,00000020,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000003cf,0000001f,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,000003ce,0000001f,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,000003cf,00000020,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,00000389,00000026) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,0000038a,00000026) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000389,00000027) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,000003cf,00000026) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,000003ce,00000026) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,000003cf,00000027) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.GetPixel(00000314,00000389,00000085) ret=01005ea5 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ea5 0009:Call gdi32.GetPixel(00000314,0000038a,00000085) ret=01005eba 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005eba 0009:Call gdi32.GetPixel(00000314,00000389,00000084) ret=01005ecd 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ecd 0009:Call gdi32.GetPixel(00000314,000003cf,00000085) ret=01005ee1 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ee1 0009:Call gdi32.GetPixel(00000314,000003ce,00000085) ret=01005ef5 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ef5 0009:Call gdi32.GetPixel(00000314,000003cf,00000084) ret=01005f09 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005f09 0009:Call user32.LoadBitmapW(01000000,0033f888 L"CARD43") ret=01005f7d 0009:Ret user32.LoadBitmapW() retval=00001750 ret=01005f7d 0009:Call gdi32.SelectObject(0000162c,00001750) ret=01005f8a 0009:Ret gdi32.SelectObject() retval=0000006c ret=01005f8a 0009:Call gdi32.BitBlt(00000314,00000389,00000026,00000047,00000060,0000162c,00000000,00000000,00cc0020) ret=01005faa 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005faa 0009:Call gdi32.SelectObject(0000162c,0000006c) ret=01005fb6 0009:Ret gdi32.SelectObject() retval=00001750 ret=01005fb6 0009:Call gdi32.DeleteObject(00001750) ret=01005fbf 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005fbf 0009:Call gdi32.SetPixel(00000314,00000389,00000026,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,0000038a,00000026,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000389,00000027,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000003cf,00000026,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,000003ce,00000026,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,000003cf,00000027,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.SetPixel(00000314,00000389,00000085,ffffffff) ret=01006044 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006044 0009:Call gdi32.SetPixel(00000314,0000038a,00000085,ffffffff) ret=01006059 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006059 0009:Call gdi32.SetPixel(00000314,00000389,00000084,ffffffff) ret=01006069 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006069 0009:Call gdi32.SetPixel(00000314,000003cf,00000085,ffffffff) ret=0100607d 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100607d 0009:Call gdi32.SetPixel(00000314,000003ce,00000085,ffffffff) ret=01006091 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006091 0009:Call gdi32.SetPixel(00000314,000003cf,00000084,ffffffff) ret=010060a5 0009:Ret gdi32.SetPixel() retval=00ffffff ret=010060a5 0009:Call gdi32.GetPixel(00000314,00000403,0000000a) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000404,0000000a) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000403,0000000b) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,00000449,0000000a) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,00000448,0000000a) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,00000449,0000000b) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,00000403,0000000a,00000047,00000009,00001638,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,00000403,0000000a,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000404,0000000a,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000403,0000000b,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,00000449,0000000a,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,00000448,0000000a,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,00000449,0000000b,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,00000403,00000011) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000404,00000011) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000403,00000012) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,00000449,00000011) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,00000448,00000011) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,00000449,00000012) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,00000403,00000011,00000047,00000009,00001638,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,00000403,00000011,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000404,00000011,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000403,00000012,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,00000449,00000011,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,00000448,00000011,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,00000449,00000012,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,00000403,00000018) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000404,00000018) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000403,00000019) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,00000449,00000018) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,00000448,00000018) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,00000449,00000019) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,00000403,00000018,00000047,00000009,00001638,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,00000403,00000018,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000404,00000018,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000403,00000019,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,00000449,00000018,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,00000448,00000018,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,00000449,00000019,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,00000403,0000001f) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000404,0000001f) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000403,00000020) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,00000449,0000001f) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,00000448,0000001f) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,00000449,00000020) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,00000403,0000001f,00000047,00000009,00001638,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,00000403,0000001f,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000404,0000001f,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000403,00000020,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,00000449,0000001f,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,00000448,0000001f,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,00000449,00000020,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,00000403,00000026) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000404,00000026) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000403,00000027) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,00000449,00000026) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,00000448,00000026) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,00000449,00000027) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.GetPixel(00000314,00000403,00000085) ret=01005ea5 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ea5 0009:Call gdi32.GetPixel(00000314,00000404,00000085) ret=01005eba 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005eba 0009:Call gdi32.GetPixel(00000314,00000403,00000084) ret=01005ecd 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ecd 0009:Call gdi32.GetPixel(00000314,00000449,00000085) ret=01005ee1 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ee1 0009:Call gdi32.GetPixel(00000314,00000448,00000085) ret=01005ef5 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ef5 0009:Call gdi32.GetPixel(00000314,00000449,00000084) ret=01005f09 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005f09 0009:Call user32.LoadBitmapW(01000000,0033f888 L"CARD46") ret=01005f7d 0009:Ret user32.LoadBitmapW() retval=00001770 ret=01005f7d 0009:Call gdi32.SelectObject(0000162c,00001770) ret=01005f8a 0009:Ret gdi32.SelectObject() retval=0000006c ret=01005f8a 0009:Call gdi32.BitBlt(00000314,00000403,00000026,00000047,00000060,0000162c,00000000,00000000,00cc0020) ret=01005faa 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005faa 0009:Call gdi32.SelectObject(0000162c,0000006c) ret=01005fb6 0009:Ret gdi32.SelectObject() retval=00001770 ret=01005fb6 0009:Call gdi32.DeleteObject(00001770) ret=01005fbf 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005fbf 0009:Call gdi32.SetPixel(00000314,00000403,00000026,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000404,00000026,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000403,00000027,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,00000449,00000026,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,00000448,00000026,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,00000449,00000027,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.SetPixel(00000314,00000403,00000085,ffffffff) ret=01006044 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006044 0009:Call gdi32.SetPixel(00000314,00000404,00000085,ffffffff) ret=01006059 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006059 0009:Call gdi32.SetPixel(00000314,00000403,00000084,ffffffff) ret=01006069 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006069 0009:Call gdi32.SetPixel(00000314,00000449,00000085,ffffffff) ret=0100607d 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100607d 0009:Call gdi32.SetPixel(00000314,00000448,00000085,ffffffff) ret=01006091 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006091 0009:Call gdi32.SetPixel(00000314,00000449,00000084,ffffffff) ret=010060a5 0009:Ret gdi32.SetPixel() retval=00ffffff ret=010060a5 0009:Call gdi32.GetPixel(00000314,0000047d,0000000a) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,0000047e,0000000a) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,0000047d,0000000b) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,000004c3,0000000a) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,000004c2,0000000a) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,000004c3,0000000b) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,0000047d,0000000a,00000047,00000009,00001638,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,0000047d,0000000a,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,0000047e,0000000a,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,0000047d,0000000b,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000004c3,0000000a,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,000004c2,0000000a,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,000004c3,0000000b,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,0000047d,00000011) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,0000047e,00000011) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,0000047d,00000012) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,000004c3,00000011) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,000004c2,00000011) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,000004c3,00000012) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,0000047d,00000011,00000047,00000009,00001638,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,0000047d,00000011,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,0000047e,00000011,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,0000047d,00000012,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000004c3,00000011,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,000004c2,00000011,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,000004c3,00000012,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,0000047d,00000018) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,0000047e,00000018) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,0000047d,00000019) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,000004c3,00000018) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,000004c2,00000018) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,000004c3,00000019) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,0000047d,00000018,00000047,00000009,00001638,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,0000047d,00000018,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,0000047e,00000018,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,0000047d,00000019,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000004c3,00000018,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,000004c2,00000018,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,000004c3,00000019,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,0000047d,0000001f) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,0000047e,0000001f) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,0000047d,00000020) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,000004c3,0000001f) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,000004c2,0000001f) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,000004c3,00000020) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,0000047d,0000001f,00000047,00000009,00001638,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,0000047d,0000001f,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,0000047e,0000001f,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,0000047d,00000020,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000004c3,0000001f,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,000004c2,0000001f,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,000004c3,00000020,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,0000047d,00000026) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,0000047e,00000026) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,0000047d,00000027) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,000004c3,00000026) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,000004c2,00000026) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,000004c3,00000027) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.GetPixel(00000314,0000047d,00000085) ret=01005ea5 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ea5 0009:Call gdi32.GetPixel(00000314,0000047e,00000085) ret=01005eba 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005eba 0009:Call gdi32.GetPixel(00000314,0000047d,00000084) ret=01005ecd 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ecd 0009:Call gdi32.GetPixel(00000314,000004c3,00000085) ret=01005ee1 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ee1 0009:Call gdi32.GetPixel(00000314,000004c2,00000085) ret=01005ef5 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ef5 0009:Call gdi32.GetPixel(00000314,000004c3,00000084) ret=01005f09 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005f09 0009:Call user32.LoadBitmapW(01000000,0033f888 L"CARD43") ret=01005f7d 0009:Ret user32.LoadBitmapW() retval=00001790 ret=01005f7d 0009:Call gdi32.SelectObject(0000162c,00001790) ret=01005f8a 0009:Ret gdi32.SelectObject() retval=0000006c ret=01005f8a 0009:Call gdi32.BitBlt(00000314,0000047d,00000026,00000047,00000060,0000162c,00000000,00000000,00cc0020) ret=01005faa 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005faa 0009:Call gdi32.SelectObject(0000162c,0000006c) ret=01005fb6 0009:Ret gdi32.SelectObject() retval=00001790 ret=01005fb6 0009:Call gdi32.DeleteObject(00001790) ret=01005fbf 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005fbf 0009:Call gdi32.SetPixel(00000314,0000047d,00000026,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,0000047e,00000026,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,0000047d,00000027,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000004c3,00000026,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,000004c2,00000026,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,000004c3,00000027,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.SetPixel(00000314,0000047d,00000085,ffffffff) ret=01006044 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006044 0009:Call gdi32.SetPixel(00000314,0000047e,00000085,ffffffff) ret=01006059 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006059 0009:Call gdi32.SetPixel(00000314,0000047d,00000084,ffffffff) ret=01006069 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006069 0009:Call gdi32.SetPixel(00000314,000004c3,00000085,ffffffff) ret=0100607d 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100607d 0009:Call gdi32.SetPixel(00000314,000004c2,00000085,ffffffff) ret=01006091 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006091 0009:Call gdi32.SetPixel(00000314,000004c3,00000084,ffffffff) ret=010060a5 0009:Ret gdi32.SetPixel() retval=00ffffff ret=010060a5 0009:Call gdi32.SelectObject(00001638,0000006c) ret=010061a0 0009:Ret gdi32.SelectObject() retval=00001650 ret=010061a0 0009:Call gdi32.DeleteObject(00001650) ret=010061a9 0009:Ret gdi32.DeleteObject() retval=00000001 ret=010061a9 0009:Call gdi32.DeleteDC(00001638) ret=010061b4 0009:Ret gdi32.DeleteDC() retval=00000001 ret=010061b4 0009:Call gdi32.DeleteDC(0000162c) ret=010061b9 0009:Ret gdi32.DeleteDC() retval=00000001 ret=010061b9 0009:Call user32.GetClientRect(00010030,0033f700) ret=01003826 0009:Ret user32.GetClientRect() retval=00000001 ret=01003826 0009:Call user32.GetClientRect(00010030,0033f6b0) ret=01002b2e 0009:Ret user32.GetClientRect() retval=00000001 ret=01002b2e 0009:Call user32.OffsetRect(0033f700,00000000,00000000) ret=01004a4e 0009:Ret user32.OffsetRect() retval=00000001 ret=01004a4e 0009:Call gdi32.CreateSolidBrush(00007f00) ret=01004a59 0009:Ret gdi32.CreateSolidBrush() retval=000017a4 ret=01004a59 0009:Call gdi32.GetStockObject(00000004) ret=01004a63 0009:Ret gdi32.GetStockObject() retval=00000054 ret=01004a63 0009:Call user32.FillRect(00000314,0033f700,000017a4) ret=01004a78 0009:Ret user32.FillRect() retval=00000001 ret=01004a78 0009:Call gdi32.DeleteObject(000017a4) ret=01004a7f 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01004a7f 0009:Call user32.FrameRect(00000314,0033f700,00000054) ret=01004a92 0009:Ret user32.FrameRect() retval=00000001 ret=01004a92 0009:Call gdi32.GetBkMode(00000314) ret=01004a99 0009:Ret gdi32.GetBkMode() retval=00000002 ret=01004a99 0009:Call gdi32.GetTextColor(00000314) ret=01004aa6 0009:Ret gdi32.GetTextColor() retval=00000000 ret=01004aa6 0009:Call gdi32.SetBkMode(00000314,00000001) ret=01004ab5 0009:Ret gdi32.SetBkMode() retval=00000002 ret=01004ab5 0009:Call gdi32.SetTextColor(00000314,00ffffff) ret=01004ac1 0009:Ret gdi32.SetTextColor() retval=00000000 ret=01004ac1 0009:Call user32.SetRect(0033f6ec,00000225,00000276,0000027f,0000028a) ret=01004aec 0009:Ret user32.SetRect() retval=00000001 ret=01004aec 0009:Call user32.LoadStringW(01000000,00000035,01011800,00000400) ret=0100361b 0009:Ret user32.LoadStringW() retval=00000006 ret=0100361b 0009:Call user32.DrawTextW(00000314,01011800 L"Score:",ffffffff,0033f6ec,00000022) ret=01004b08 0009:Ret user32.DrawTextW() retval=00000010 ret=01004b08 0009:Call user32.SetRect(0033f6ec,00000225,0000028a,0000027f,000002a8) ret=01004b2d 0009:Ret user32.SetRect() retval=00000001 ret=01004b2d 0009:Call user32.LoadStringW(01000000,00000036,01011800,00000400) ret=0100361b 0009:Ret user32.LoadStringW() retval=00000006 ret=0100361b 0009:Call user32.DrawTextW(00000314,01011800 L"Moves:",ffffffff,0033f6ec,00000022) ret=01004b43 0009:Ret user32.DrawTextW() retval=00000010 ret=01004b43 0009:Call user32.SetRect(0033f6ec,00000289,00000276,000002e3,0000028a) ret=01004b8c 0009:Ret user32.SetRect() retval=00000001 ret=01004b8c 0009:Call user32.DrawTextW(00000314,0033f714 L"500",ffffffff,0033f6ec,00000020) ret=01004ba1 0009:Ret user32.DrawTextW() retval=00000010 ret=01004ba1 0009:Call user32.SetRect(0033f6ec,00000289,0000028a,000002e3,000002a8) ret=01004bea 0009:Ret user32.SetRect() retval=00000001 ret=01004bea 0009:Call user32.DrawTextW(00000314,0033f714 L"0",ffffffff,0033f6ec,00000020) ret=01004bff 0009:Ret user32.DrawTextW() retval=00000010 ret=01004bff 0009:Call gdi32.SetBkMode(00000314,00000002) ret=01004c0c 0009:Ret gdi32.SetBkMode() retval=00000001 ret=01004c0c 0009:Call gdi32.SetTextColor(00000314,00000000) ret=01004c19 0009:Ret gdi32.SetTextColor() retval=00ffffff ret=01004c19 0009:Call user32.GetClientRect(00010030,0033f7b8) ret=01002b2e 0009:Ret user32.GetClientRect() retval=00000001 ret=01002b2e 0009:Call user32.LoadBitmapW(01000000,010012c8 L"CARDBACK") ret=010028ff 0009:Ret user32.LoadBitmapW() retval=000017d4 ret=010028ff 0009:Call gdi32.CreateCompatibleDC(00000314) ret=01002909 0009:Ret gdi32.CreateCompatibleDC() retval=000017e8 ret=01002909 0009:Call gdi32.SelectObject(000017e8,000017d4) ret=01002917 0009:Ret gdi32.SelectObject() retval=0000006c ret=01002917 0009:Call gdi32.BitBlt(00000314,0000047d,00000258,00000047,00000060,000017e8,00000000,00000000,00cc0020) ret=01002938 0009:Ret gdi32.BitBlt() retval=00000001 ret=01002938 0009:Call gdi32.SelectObject(000017e8,0000006c) ret=0100293e 0009:Ret gdi32.SelectObject() retval=000017d4 ret=0100293e 0009:Call gdi32.DeleteObject(000017d4) ret=01002947 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01002947 0009:Call gdi32.DeleteDC(000017e8) ret=0100294e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100294e 0009:Call gdi32.SetPixel(00000314,0000047d,00000258,00008000) ret=01002969 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002969 0009:Call gdi32.SetPixel(00000314,0000047e,00000258,00008000) ret=01002976 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002976 0009:Call gdi32.SetPixel(00000314,0000047d,00000259,00008000) ret=01002982 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002982 0009:Call gdi32.SetPixel(00000314,000004c3,00000258,00008000) ret=0100298f 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100298f 0009:Call gdi32.SetPixel(00000314,000004c2,00000258,00008000) ret=0100299c 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100299c 0009:Call gdi32.SetPixel(00000314,000004c3,00000259,00008000) ret=010029ab 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ab 0009:Call gdi32.SetPixel(00000314,0000047d,000002b7,00008000) ret=010029bf 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029bf 0009:Call gdi32.SetPixel(00000314,0000047e,000002b7,00008000) ret=010029d0 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029d0 0009:Call gdi32.SetPixel(00000314,0000047d,000002b6,00008000) ret=010029de 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029de 0009:Call gdi32.SetPixel(00000314,000004c3,000002b7,00008000) ret=010029ef 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ef 0009:Call gdi32.SetPixel(00000314,000004c2,000002b7,00008000) ret=01002a00 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a00 0009:Call gdi32.SetPixel(00000314,000004c3,000002b6,00008000) ret=01002a11 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a11 0009:Call user32.LoadBitmapW(01000000,010012c8 L"CARDBACK") ret=010028ff 0009:Ret user32.LoadBitmapW() retval=00001800 ret=010028ff 0009:Call gdi32.CreateCompatibleDC(00000314) ret=01002909 0009:Ret gdi32.CreateCompatibleDC() retval=00001814 ret=01002909 0009:Call gdi32.SelectObject(00001814,00001800) ret=01002917 0009:Ret gdi32.SelectObject() retval=0000006c ret=01002917 0009:Call gdi32.BitBlt(00000314,00000471,00000258,00000047,00000060,00001814,00000000,00000000,00cc0020) ret=01002938 0009:Ret gdi32.BitBlt() retval=00000001 ret=01002938 0009:Call gdi32.SelectObject(00001814,0000006c) ret=0100293e 0009:Ret gdi32.SelectObject() retval=00001800 ret=0100293e 0009:Call gdi32.DeleteObject(00001800) ret=01002947 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01002947 0009:Call gdi32.DeleteDC(00001814) ret=0100294e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100294e 0009:Call gdi32.SetPixel(00000314,00000471,00000258,00008000) ret=01002969 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002969 0009:Call gdi32.SetPixel(00000314,00000472,00000258,00008000) ret=01002976 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002976 0009:Call gdi32.SetPixel(00000314,00000471,00000259,00008000) ret=01002982 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002982 0009:Call gdi32.SetPixel(00000314,000004b7,00000258,00008000) ret=0100298f 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100298f 0009:Call gdi32.SetPixel(00000314,000004b6,00000258,00008000) ret=0100299c 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100299c 0009:Call gdi32.SetPixel(00000314,000004b7,00000259,00008000) ret=010029ab 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ab 0009:Call gdi32.SetPixel(00000314,00000471,000002b7,00008000) ret=010029bf 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029bf 0009:Call gdi32.SetPixel(00000314,00000472,000002b7,00008000) ret=010029d0 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029d0 0009:Call gdi32.SetPixel(00000314,00000471,000002b6,00008000) ret=010029de 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029de 0009:Call gdi32.SetPixel(00000314,000004b7,000002b7,00008000) ret=010029ef 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ef 0009:Call gdi32.SetPixel(00000314,000004b6,000002b7,00008000) ret=01002a00 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a00 0009:Call gdi32.SetPixel(00000314,000004b7,000002b6,00008000) ret=01002a11 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a11 0009:Call user32.LoadBitmapW(01000000,010012c8 L"CARDBACK") ret=010028ff 0009:Ret user32.LoadBitmapW() retval=0000182c ret=010028ff 0009:Call gdi32.CreateCompatibleDC(00000314) ret=01002909 0009:Ret gdi32.CreateCompatibleDC() retval=00001840 ret=01002909 0009:Call gdi32.SelectObject(00001840,0000182c) ret=01002917 0009:Ret gdi32.SelectObject() retval=0000006c ret=01002917 0009:Call gdi32.BitBlt(00000314,00000465,00000258,00000047,00000060,00001840,00000000,00000000,00cc0020) ret=01002938 0009:Ret gdi32.BitBlt() retval=00000001 ret=01002938 0009:Call gdi32.SelectObject(00001840,0000006c) ret=0100293e 0009:Ret gdi32.SelectObject() retval=0000182c ret=0100293e 0009:Call gdi32.DeleteObject(0000182c) ret=01002947 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01002947 0009:Call gdi32.DeleteDC(00001840) ret=0100294e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100294e 0009:Call gdi32.SetPixel(00000314,00000465,00000258,00008000) ret=01002969 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002969 0009:Call gdi32.SetPixel(00000314,00000466,00000258,00008000) ret=01002976 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002976 0009:Call gdi32.SetPixel(00000314,00000465,00000259,00008000) ret=01002982 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002982 0009:Call gdi32.SetPixel(00000314,000004ab,00000258,00008000) ret=0100298f 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100298f 0009:Call gdi32.SetPixel(00000314,000004aa,00000258,00008000) ret=0100299c 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100299c 0009:Call gdi32.SetPixel(00000314,000004ab,00000259,00008000) ret=010029ab 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ab 0009:Call gdi32.SetPixel(00000314,00000465,000002b7,00008000) ret=010029bf 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029bf 0009:Call gdi32.SetPixel(00000314,00000466,000002b7,00008000) ret=010029d0 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029d0 0009:Call gdi32.SetPixel(00000314,00000465,000002b6,00008000) ret=010029de 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029de 0009:Call gdi32.SetPixel(00000314,000004ab,000002b7,00008000) ret=010029ef 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ef 0009:Call gdi32.SetPixel(00000314,000004aa,000002b7,00008000) ret=01002a00 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a00 0009:Call gdi32.SetPixel(00000314,000004ab,000002b6,00008000) ret=01002a11 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a11 0009:Call user32.LoadBitmapW(01000000,010012c8 L"CARDBACK") ret=010028ff 0009:Ret user32.LoadBitmapW() retval=00001858 ret=010028ff 0009:Call gdi32.CreateCompatibleDC(00000314) ret=01002909 0009:Ret gdi32.CreateCompatibleDC() retval=0000186c ret=01002909 0009:Call gdi32.SelectObject(0000186c,00001858) ret=01002917 0009:Ret gdi32.SelectObject() retval=0000006c ret=01002917 0009:Call gdi32.BitBlt(00000314,00000459,00000258,00000047,00000060,0000186c,00000000,00000000,00cc0020) ret=01002938 0009:Ret gdi32.BitBlt() retval=00000001 ret=01002938 0009:Call gdi32.SelectObject(0000186c,0000006c) ret=0100293e 0009:Ret gdi32.SelectObject() retval=00001858 ret=0100293e 0009:Call gdi32.DeleteObject(00001858) ret=01002947 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01002947 0009:Call gdi32.DeleteDC(0000186c) ret=0100294e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100294e 0009:Call gdi32.SetPixel(00000314,00000459,00000258,00008000) ret=01002969 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002969 0009:Call gdi32.SetPixel(00000314,0000045a,00000258,00008000) ret=01002976 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002976 0009:Call gdi32.SetPixel(00000314,00000459,00000259,00008000) ret=01002982 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002982 0009:Call gdi32.SetPixel(00000314,0000049f,00000258,00008000) ret=0100298f 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100298f 0009:Call gdi32.SetPixel(00000314,0000049e,00000258,00008000) ret=0100299c 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100299c 0009:Call gdi32.SetPixel(00000314,0000049f,00000259,00008000) ret=010029ab 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ab 0009:Call gdi32.SetPixel(00000314,00000459,000002b7,00008000) ret=010029bf 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029bf 0009:Call gdi32.SetPixel(00000314,0000045a,000002b7,00008000) ret=010029d0 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029d0 0009:Call gdi32.SetPixel(00000314,00000459,000002b6,00008000) ret=010029de 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029de 0009:Call gdi32.SetPixel(00000314,0000049f,000002b7,00008000) ret=010029ef 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ef 0009:Call gdi32.SetPixel(00000314,0000049e,000002b7,00008000) ret=01002a00 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a00 0009:Call gdi32.SetPixel(00000314,0000049f,000002b6,00008000) ret=01002a11 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a11 0009:Call user32.LoadBitmapW(01000000,010012c8 L"CARDBACK") ret=010028ff 0009:Ret user32.LoadBitmapW() retval=00001884 ret=010028ff 0009:Call gdi32.CreateCompatibleDC(00000314) ret=01002909 0009:Ret gdi32.CreateCompatibleDC() retval=00001898 ret=01002909 0009:Call gdi32.SelectObject(00001898,00001884) ret=01002917 0009:Ret gdi32.SelectObject() retval=0000006c ret=01002917 0009:Call gdi32.BitBlt(00000314,0000044d,00000258,00000047,00000060,00001898,00000000,00000000,00cc0020) ret=01002938 0009:Ret gdi32.BitBlt() retval=00000001 ret=01002938 0009:Call gdi32.SelectObject(00001898,0000006c) ret=0100293e 0009:Ret gdi32.SelectObject() retval=00001884 ret=0100293e 0009:Call gdi32.DeleteObject(00001884) ret=01002947 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01002947 0009:Call gdi32.DeleteDC(00001898) ret=0100294e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100294e 0009:Call gdi32.SetPixel(00000314,0000044d,00000258,00008000) ret=01002969 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002969 0009:Call gdi32.SetPixel(00000314,0000044e,00000258,00008000) ret=01002976 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002976 0009:Call gdi32.SetPixel(00000314,0000044d,00000259,00008000) ret=01002982 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002982 0009:Call gdi32.SetPixel(00000314,00000493,00000258,00008000) ret=0100298f 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100298f 0009:Call gdi32.SetPixel(00000314,00000492,00000258,00008000) ret=0100299c 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100299c 0009:Call gdi32.SetPixel(00000314,00000493,00000259,00008000) ret=010029ab 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ab 0009:Call gdi32.SetPixel(00000314,0000044d,000002b7,00008000) ret=010029bf 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029bf 0009:Call gdi32.SetPixel(00000314,0000044e,000002b7,00008000) ret=010029d0 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029d0 0009:Call gdi32.SetPixel(00000314,0000044d,000002b6,00008000) ret=010029de 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029de 0009:Call gdi32.SetPixel(00000314,00000493,000002b7,00008000) ret=010029ef 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ef 0009:Call gdi32.SetPixel(00000314,00000492,000002b7,00008000) ret=01002a00 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a00 0009:Call gdi32.SetPixel(00000314,00000493,000002b6,00008000) ret=01002a11 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a11 0009:Call user32.GetClientRect(00010030,0033f7c0) ret=01002b2e 0009:Ret user32.GetClientRect() retval=00000001 ret=01002b2e 0009:Call user32.EndPaint(00010030,0033f8d4) ret=01006ee5 0009:Ret user32.EndPaint() retval=00000001 ret=01006ee5 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_PAINT,wp=00000000,lp=00000000) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=026003e0) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,026003e0) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=026003e0) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=021c03df) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=021c03df) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=026403e4) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,026403e4) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=026403e4) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=022003e3) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=022003e3) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=026803e8) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,026803e8) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=026803e8) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=022403e7) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=022403e7) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=026a03ee) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,026a03ee) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=026a03ee) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=022603ed) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=022603ed) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=026e03f2) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,026e03f2) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=026e03f2) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=022a03f1) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=022a03f1) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=027203f8) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,027203f8) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=027203f8) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=022e03f7) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=022e03f7) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02740400) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02740400) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02740400) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=023003ff) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=023003ff) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02760408) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02760408) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02760408) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02320407) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02320407) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=0278040e) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,0278040e) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=0278040e) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=0234040d) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=0234040d) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02780416) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02780416) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02780416) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02340415) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02340415) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02780418) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02780418) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02780418) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02340417) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02340417) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=0278041a) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,0278041a) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=0278041a) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02340419) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02340419) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=0279041b) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,0279041b) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=0279041b) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=0235041a) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=0235041a) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=027d0421) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,027d0421) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=027d0421) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02390420) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02390420) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02870427) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02870427) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02870427) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02430426) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02430426) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02910431) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02910431) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02910431) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=024d0430) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=024d0430) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02990439) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02990439) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02990439) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02550438) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02550438) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02a10443) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02a10443) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02a10443) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=025d0442) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=025d0442) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02a9044b) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02a9044b) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02a9044b) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=0265044a) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=0265044a) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02b10453) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02b10453) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02b10453) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=026d0452) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=026d0452) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02b7045b) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02b7045b) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02b7045b) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=0273045a) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=0273045a) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02bd045f) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02bd045f) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02bd045f) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=0279045e) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=0279045e) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02c30465) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02c30465) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02c30465) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=027f0464) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=027f0464) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02c70469) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02c70469) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02c70469) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02830468) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02830468) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02cd046d) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02cd046d) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02cd046d) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=0289046c) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=0289046c) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02d10471) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02d10471) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02d10471) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=028d0470) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=028d0470) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02d20473) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02d20473) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02d20473) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=028e0472) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=028e0472) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02d30475) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02d30475) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02d30475) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=028f0474) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=028f0474) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02d30476) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02d30476) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02d30476) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=028f0475) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=028f0475) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02d40477) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02d40477) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02d40477) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02900476) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02900476) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02d40478) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02d40478) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02d40478) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02900477) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02900477) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02d50478) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02d50478) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02d50478) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02910477) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02910477) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02d50478) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02d50478) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02d50478) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02010001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02010001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02010001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_LBUTTONDOWN,wp=00000001,lp=02910477) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_LBUTTONDOWN,wp=00000001,lp=02910477) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02d50478) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02d50478) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02d50478) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02020001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02020001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02020001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_LBUTTONUP,wp=00000000,lp=02910477) 0009:Call user32.GetClientRect(00010030,0033f83c) ret=01002b53 0009:Ret user32.GetClientRect() retval=00000001 ret=01002b53 0009:Call user32.PostMessageW(00010030,00000111,00009c47,00000000) ret=010067a8 0009:Ret user32.PostMessageW() retval=00000001 ret=010067a8 0009:Call user32.GetClientRect(00010030,0033f884) ret=01003826 0009:Ret user32.GetClientRect() retval=00000001 ret=01003826 0009:Call user32.GetClientRect(00010030,0033f82c) ret=01002b2e 0009:Ret user32.GetClientRect() retval=00000001 ret=01002b2e 0009:Call user32.PtInRect(0033f884,00000477,00000291) ret=010067c3 0009:Ret user32.PtInRect() retval=00000000 ret=010067c3 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_LBUTTONUP,wp=00000000,lp=02910477) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_COMMAND,wp=00009c47,lp=00000000) 0009:Call user32.GetForegroundWindow() ret=01006c03 0009:Ret user32.GetForegroundWindow() retval=00010030 ret=01006c03 0009:Call user32.GetMenu(00010030) ret=01006c3f 0009:Ret user32.GetMenu() retval=000000f0 ret=01006c3f 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,0000000c) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c57c0 ret=0100a7d2 0009:Call user32.GetClientRect(00010030,0033f608) ret=01005145 0009:Ret user32.GetClientRect() retval=00000001 ret=01005145 0009:Call user32.GetDC(00010030) ret=010051ad 0009:Ret user32.GetDC() retval=00000314 ret=010051ad 0009:Call gdi32.CreateCompatibleDC(00000314) ret=010051bc 0009:Ret gdi32.CreateCompatibleDC() retval=000018b8 ret=010051bc 0009:Call gdi32.CreateCompatibleDC(00000314) ret=010051ca 0009:Ret gdi32.CreateCompatibleDC() retval=000018c4 ret=010051ca 0009:Call gdi32.CreateCompatibleDC(00000314) ret=010051d8 0009:Ret gdi32.CreateCompatibleDC() retval=000018d0 ret=010051d8 0009:Call gdi32.CreateCompatibleBitmap(00000314,00000047,00000060) ret=010051f8 0009:Ret gdi32.CreateCompatibleBitmap() retval=000018dc ret=010051f8 0009:Call gdi32.CreateCompatibleBitmap(00000314,00000047,00000060) ret=01005212 0009:Ret gdi32.CreateCompatibleBitmap() retval=000018e0 ret=01005212 0009:Call gdi32.CreateCompatibleBitmap(00000314,00000047,00000060) ret=0100522c 0009:Ret gdi32.CreateCompatibleBitmap() retval=000018e4 ret=0100522c 0009:Call gdi32.SelectObject(000018b8,000018dc) ret=01005246 0009:Ret gdi32.SelectObject() retval=0000006c ret=01005246 0009:Call gdi32.SelectObject(000018c4,000018e0) ret=0100525a 0009:Ret gdi32.SelectObject() retval=0000006c ret=0100525a 0009:Call gdi32.SelectObject(000018d0,000018e4) ret=0100526e 0009:Ret gdi32.SelectObject() retval=0000006c ret=0100526e 0009:Call user32.LoadBitmapW(01000000,0033f5a0 L"CARD45") ret=010028ff 0009:Ret user32.LoadBitmapW() retval=000018f4 ret=010028ff 0009:Call gdi32.CreateCompatibleDC(000018c4) ret=01002909 0009:Ret gdi32.CreateCompatibleDC() retval=00001908 ret=01002909 0009:Call gdi32.SelectObject(00001908,000018f4) ret=01002917 0009:Ret gdi32.SelectObject() retval=0000006c ret=01002917 0009:Call gdi32.BitBlt(000018c4,00000000,00000000,00000047,00000060,00001908,00000000,00000000,00cc0020) ret=01002938 0009:Ret gdi32.BitBlt() retval=00000001 ret=01002938 0009:Call gdi32.SelectObject(00001908,0000006c) ret=0100293e 0009:Ret gdi32.SelectObject() retval=000018f4 ret=0100293e 0009:Call gdi32.DeleteObject(000018f4) ret=01002947 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01002947 0009:Call gdi32.DeleteDC(00001908) ret=0100294e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100294e 0009:Call gdi32.SetPixel(000018c4,00000000,00000000,00008000) ret=01002969 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002969 0009:Call gdi32.SetPixel(000018c4,00000001,00000000,00008000) ret=01002976 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002976 0009:Call gdi32.SetPixel(000018c4,00000000,00000001,00008000) ret=01002982 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002982 0009:Call gdi32.SetPixel(000018c4,00000046,00000000,00008000) ret=0100298f 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100298f 0009:Call gdi32.SetPixel(000018c4,00000045,00000000,00008000) ret=0100299c 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100299c 0009:Call gdi32.SetPixel(000018c4,00000046,00000001,00008000) ret=010029ab 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ab 0009:Call gdi32.SetPixel(000018c4,00000000,0000005f,00008000) ret=010029bf 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029bf 0009:Call gdi32.SetPixel(000018c4,00000001,0000005f,00008000) ret=010029d0 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029d0 0009:Call gdi32.SetPixel(000018c4,00000000,0000005e,00008000) ret=010029de 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029de 0009:Call gdi32.SetPixel(000018c4,00000046,0000005f,00008000) ret=010029ef 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ef 0009:Call gdi32.SetPixel(000018c4,00000045,0000005f,00008000) ret=01002a00 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a00 0009:Call gdi32.SetPixel(000018c4,00000046,0000005e,00008000) ret=01002a11 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a11 0009:Call user32.LoadBitmapW(01000000,010012c8 L"CARDBACK") ret=010028ff 0009:Ret user32.LoadBitmapW() retval=00001920 ret=010028ff 0009:Call gdi32.CreateCompatibleDC(000018b8) ret=01002909 0009:Ret gdi32.CreateCompatibleDC() retval=00001934 ret=01002909 0009:Call gdi32.SelectObject(00001934,00001920) ret=01002917 0009:Ret gdi32.SelectObject() retval=0000006c ret=01002917 0009:Call gdi32.BitBlt(000018b8,00000000,00000000,00000047,00000060,00001934,00000000,00000000,00cc0020) ret=01002938 0009:Ret gdi32.BitBlt() retval=00000001 ret=01002938 0009:Call gdi32.SelectObject(00001934,0000006c) ret=0100293e 0009:Ret gdi32.SelectObject() retval=00001920 ret=0100293e 0009:Call gdi32.DeleteObject(00001920) ret=01002947 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01002947 0009:Call gdi32.DeleteDC(00001934) ret=0100294e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100294e 0009:Call gdi32.SetPixel(000018b8,00000000,00000000,00008000) ret=01002969 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002969 0009:Call gdi32.SetPixel(000018b8,00000001,00000000,00008000) ret=01002976 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002976 0009:Call gdi32.SetPixel(000018b8,00000000,00000001,00008000) ret=01002982 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002982 0009:Call gdi32.SetPixel(000018b8,00000046,00000000,00008000) ret=0100298f 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100298f 0009:Call gdi32.SetPixel(000018b8,00000045,00000000,00008000) ret=0100299c 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100299c 0009:Call gdi32.SetPixel(000018b8,00000046,00000001,00008000) ret=010029ab 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ab 0009:Call gdi32.SetPixel(000018b8,00000000,0000005f,00008000) ret=010029bf 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029bf 0009:Call gdi32.SetPixel(000018b8,00000001,0000005f,00008000) ret=010029d0 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029d0 0009:Call gdi32.SetPixel(000018b8,00000000,0000005e,00008000) ret=010029de 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029de 0009:Call gdi32.SetPixel(000018b8,00000046,0000005f,00008000) ret=010029ef 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ef 0009:Call gdi32.SetPixel(000018b8,00000045,0000005f,00008000) ret=01002a00 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a00 0009:Call gdi32.SetPixel(000018b8,00000046,0000005e,00008000) ret=01002a11 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a11 0009:Call winmm.timeGetTime() ret=010047d1 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000020fa ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000020fa ret=010047d1 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000020fa ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000020fa ret=01004881 0009:Call gdi32.BitBlt(000018b8,00000000,00000000,00000048,00000061,000018b8,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00000314,0000044d,00000258,00000047,00000060,000018c4,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000020ff ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000020ff ret=01004881 0009:Call gdi32.BitBlt(000018d0,00000000,00000046,00000047,0000001a,000018b8,00000000,00000046,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000018d0,00000013,00000000,00000034,00000046,000018b8,00000013,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000018b8,00000034,0000001a,00000014,00000047,000018b8,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(000018b8,00000000,00000000,00000047,0000001a,00000314,00000419,0000023e,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000018b8,00000000,0000001a,00000034,00000046,00000314,00000419,00000258,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000419,0000023e,00000047,00000060,000018c4,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,0000044d,0000029e,00000047,0000001a,000018d0,00000000,00000046,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000460,00000258,00000034,00000046,000018d0,00000013,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00002107 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00002107 ret=01004881 0009:Call gdi32.BitBlt(000018d0,00000000,00000036,00000047,0000002a,000018b8,00000000,00000036,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000018d0,fffffff3,00000000,00000054,00000036,000018b8,fffffff3,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000018b8,00000000,00000000,00000047,0000002a,00000314,000003c5,00000214,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000018b8,00000000,0000002a,00000054,00000036,00000314,000003c5,0000023e,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000003c5,00000214,00000047,00000060,000018c4,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000419,00000274,00000047,0000002a,000018d0,00000000,00000036,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000419,0000023e,00000047,00000036,000018d0,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=0000210f ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=0000210f ret=01004881 0009:Call gdi32.BitBlt(000018d0,00000000,00000036,00000047,0000002a,000018b8,00000000,00000036,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000018d0,fffffff3,00000000,00000054,00000036,000018b8,fffffff3,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000018b8,00000000,00000000,00000047,0000002a,00000314,00000371,000001ea,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000018b8,00000000,0000002a,00000054,00000036,00000314,00000371,00000214,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000371,000001ea,00000047,00000060,000018c4,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000003c5,0000024a,00000047,0000002a,000018d0,00000000,00000036,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,000003c5,00000214,00000047,00000036,000018d0,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00002117 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00002117 ret=01004881 0009:Call gdi32.BitBlt(000018d0,00000000,00000036,00000047,0000002a,000018b8,00000000,00000036,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000018d0,fffffff3,00000000,00000054,00000036,000018b8,fffffff3,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000018b8,00000000,00000000,00000047,0000002a,00000314,0000031d,000001c0,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000018b8,00000000,0000002a,00000054,00000036,00000314,0000031d,000001ea,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,0000031d,000001c0,00000047,00000060,000018c4,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000371,00000220,00000047,0000002a,000018d0,00000000,00000036,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000371,000001ea,00000047,00000036,000018d0,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=0000211f ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=0000211f ret=01004881 0009:Call gdi32.BitBlt(000018d0,00000000,00000036,00000047,0000002a,000018b8,00000000,00000036,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000018d0,fffffff3,00000000,00000054,00000036,000018b8,fffffff3,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000018b8,00000000,00000000,00000047,0000002a,00000314,000002c9,00000196,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000018b8,00000000,0000002a,00000054,00000036,00000314,000002c9,000001c0,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000002c9,00000196,00000047,00000060,000018c4,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,0000031d,000001f6,00000047,0000002a,000018d0,00000000,00000036,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000031d,000001c0,00000047,00000036,000018d0,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00002127 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00002127 ret=01004881 0009:Call gdi32.BitBlt(000018d0,00000000,00000035,00000047,0000002b,000018b8,00000000,00000035,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000018d0,fffffff3,00000000,00000054,00000035,000018b8,fffffff3,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000018b8,00000000,00000000,00000047,0000002b,00000314,00000275,0000016b,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000018b8,00000000,0000002b,00000054,00000035,00000314,00000275,00000196,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000275,0000016b,00000047,00000060,000018c4,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000002c9,000001cb,00000047,0000002b,000018d0,00000000,00000035,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,000002c9,00000196,00000047,00000035,000018d0,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=0000212f ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=0000212f ret=01004881 0009:Call gdi32.BitBlt(000018d0,00000000,00000036,00000047,0000002a,000018b8,00000000,00000036,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000018d0,fffffff3,00000000,00000054,00000036,000018b8,fffffff3,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000018b8,00000000,00000000,00000047,0000002a,00000314,00000221,00000141,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000018b8,00000000,0000002a,00000054,00000036,00000314,00000221,0000016b,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000221,00000141,00000047,00000060,000018c4,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000275,000001a1,00000047,0000002a,000018d0,00000000,00000036,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000275,0000016b,00000047,00000036,000018d0,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00002137 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00002137 ret=01004881 0009:Call gdi32.BitBlt(000018d0,00000000,00000036,00000047,0000002a,000018b8,00000000,00000036,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000018d0,fffffff3,00000000,00000054,00000036,000018b8,fffffff3,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000018b8,00000000,00000000,00000047,0000002a,00000314,000001cd,00000117,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000018b8,00000000,0000002a,00000054,00000036,00000314,000001cd,00000141,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000001cd,00000117,00000047,00000060,000018c4,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000221,00000177,00000047,0000002a,000018d0,00000000,00000036,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000221,00000141,00000047,00000036,000018d0,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=0000213f ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=0000213f ret=01004881 0009:Call gdi32.BitBlt(000018d0,00000000,00000036,00000047,0000002a,000018b8,00000000,00000036,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000018d0,fffffff3,00000000,00000054,00000036,000018b8,fffffff3,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000018b8,00000000,00000000,00000047,0000002a,00000314,00000179,000000ed,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000018b8,00000000,0000002a,00000054,00000036,00000314,00000179,00000117,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000179,000000ed,00000047,00000060,000018c4,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000001cd,0000014d,00000047,0000002a,000018d0,00000000,00000036,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,000001cd,00000117,00000047,00000036,000018d0,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00002147 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00002147 ret=01004881 0009:Call gdi32.BitBlt(000018d0,00000000,00000036,00000047,0000002a,000018b8,00000000,00000036,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000018d0,fffffff3,00000000,00000054,00000036,000018b8,fffffff3,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000018b8,00000000,00000000,00000047,0000002a,00000314,00000125,000000c3,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000018b8,00000000,0000002a,00000054,00000036,00000314,00000125,000000ed,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000125,000000c3,00000047,00000060,000018c4,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000179,00000123,00000047,0000002a,000018d0,00000000,00000036,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000179,000000ed,00000047,00000036,000018d0,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=0000214f ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=0000214f ret=01004881 0009:Call gdi32.BitBlt(000018d0,00000000,00000036,00000047,0000002a,000018b8,00000000,00000036,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000018d0,fffffff3,00000000,00000054,00000036,000018b8,fffffff3,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000018b8,00000000,00000000,00000047,0000002a,00000314,000000d1,00000099,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000018b8,00000000,0000002a,00000054,00000036,00000314,000000d1,000000c3,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000000d1,00000099,00000047,00000060,000018c4,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000125,000000f9,00000047,0000002a,000018d0,00000000,00000036,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000125,000000c3,00000047,00000036,000018d0,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00002157 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00002157 ret=01004881 0009:Call gdi32.BitBlt(000018d0,00000000,00000035,00000047,0000002b,000018b8,00000000,00000035,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000018d0,fffffff3,00000000,00000054,00000035,000018b8,fffffff3,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000018b8,00000000,00000000,00000047,0000002b,00000314,0000007d,0000006e,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000018b8,00000000,0000002b,00000054,00000035,00000314,0000007d,00000099,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,0000007d,0000006e,00000047,00000060,000018c4,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000000d1,000000ce,00000047,0000002b,000018d0,00000000,00000035,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,000000d1,00000099,00000047,00000035,000018d0,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=0000215f ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=0000215f ret=01004881 0009:Call gdi32.BitBlt(000018d0,00000000,0000003b,00000047,00000025,000018b8,00000000,0000003b,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000018d0,fffffffd,00000000,0000004a,0000003b,000018b8,fffffffd,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000018b8,00000000,00000000,00000047,00000025,00000314,00000033,00000049,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000018b8,00000000,00000025,0000004a,0000003b,00000314,00000033,0000006e,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000033,00000049,00000047,00000060,000018c4,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,0000007d,000000a9,00000047,00000025,000018d0,00000000,0000003b,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000007d,0000006e,00000047,0000003b,000018d0,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call gdi32.SelectObject(000018b8,0000006c) ret=01005316 0009:Ret gdi32.SelectObject() retval=000018dc ret=01005316 0009:Call gdi32.SelectObject(000018c4,0000006c) ret=01005324 0009:Ret gdi32.SelectObject() retval=000018e0 ret=01005324 0009:Call gdi32.SelectObject(000018d0,0000006c) ret=01005332 0009:Ret gdi32.SelectObject() retval=000018e4 ret=01005332 0009:Call gdi32.DeleteObject(000018dc) ret=01005340 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005340 0009:Call gdi32.DeleteObject(000018e0) ret=01005348 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005348 0009:Call gdi32.DeleteObject(000018e4) ret=01005350 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005350 0009:Call gdi32.DeleteDC(000018b8) ret=0100535e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100535e 0009:Call gdi32.DeleteDC(000018c4) ret=01005366 0009:Ret gdi32.DeleteDC() retval=00000001 ret=01005366 0009:Call gdi32.DeleteDC(000018d0) ret=0100536e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100536e 0009:Call user32.ReleaseDC(00010030,00000314) ret=0100537c 0009:Ret user32.ReleaseDC() retval=00000001 ret=0100537c 0009:Call user32.InvalidateRect(00010030,0033f618,00000000) ret=0100538a 0009:Ret user32.InvalidateRect() retval=00000001 ret=0100538a 0009:Call KERNEL32.GetModuleHandleW(00000000) ret=01006a97 0009:Ret KERNEL32.GetModuleHandleW() retval=01000000 ret=01006a97 0009:Call winmm.PlaySoundW(0000007c,01000000,00040007) ret=01006aa0 0009:Call ntdll.RtlAllocateHeap(00110000,00000008,0000001c) ret=7e7356bc 0009:Ret ntdll.RtlAllocateHeap() retval=00148bd8 ret=7e7356bc 0009:Call KERNEL32.ResetEvent(00000040) ret=7e735513 0009:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e735513 0009:Call KERNEL32.SetEvent(00000038) ret=7e735520 0009:Ret KERNEL32.SetEvent() retval=00000001 ret=7e735520 0009:Call msacm32.drv.wodMessage(0000ffff,0000000c,0014bf20,00000000,00000000) ret=7e728e1f 0009:Call winmm.waveOutReset(00008001) ret=7e0c0180 0009:Call winealsa.drv.wodMessage(00000000,0000000c,7e72ab2b,00000000,00000000) ret=7e728e1f 0009:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1b2580 0009:Ret KERNEL32.CreateEventW() retval=00000070 ret=7e1b2580 002d:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bd,0014bf20,0014d3a0,00000000) ret=7e1c4643 002d:Call KERNEL32.IsBadReadPtr(0014bf20,0000002c) ret=7e0bdbc9 002d:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 002d:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bd,008ceaa4,0014d3a0,00000000) ret=7e0bdf33 002d:Call KERNEL32.SetEvent(00000068) ret=7e7341f6 002c:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e73429b 002c:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 002c:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 002c:Call msacm32.drv.wodMessage(0000ffff,0000000c,0014bf20,00000000,00000000) ret=7e728e1f 002c:Call winmm.waveOutReset(00008001) ret=7e0c0180 002c:Call winealsa.drv.wodMessage(00000000,0000000c,7e72ab2b,00000000,00000000) ret=7e728e1f 002c:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1b2580 002c:Ret KERNEL32.CreateEventW() retval=0000009c ret=7e1b2580 002c:Call KERNEL32.WaitForSingleObject(0000009c,ffffffff) ret=7e1b2635 002d:Ret KERNEL32.SetEvent() retval=00000001 ret=7e7341f6 002d:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 002d:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 002d:fixme:wave:wodPlayer_Reset shouldn't have headers left 002d:Call KERNEL32.SetEvent(0000009c) ret=7e1c4bb8 002c:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1b2635 002c:Call KERNEL32.CloseHandle(0000009c) ret=7e1b2640 002c:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1b2640 002c:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 002c:Ret winmm.waveOutReset() retval=00000000 ret=7e0c0180 002c:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 002c:Call msacm32.drv.wodMessage(0000ffff,00000008,0014bf20,0014d3a0,00000020) ret=7e728e1f 002c:Call winmm.waveOutUnprepareHeader(00008001,0014d3a0,00000020) ret=7e0c00b6 002c:Call winealsa.drv.wodMessage(00000000,00000008,7e72ab2b,0014d3a0,00000020) ret=7e728e1f 002c:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 002c:Ret winmm.waveOutUnprepareHeader() retval=00000000 ret=7e0c00b6 002c:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 002c:Call msacm32.drv.wodMessage(0000ffff,00000008,0014bf20,0014d3c0,00000020) ret=7e728e1f 002c:Call winmm.waveOutUnprepareHeader(00008001,0014d3c0,00000020) ret=7e0c00b6 002c:Call winealsa.drv.wodMessage(00000000,00000008,7e72ab2b,0014d3c0,00000020) ret=7e728e1f 002c:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 002c:Ret winmm.waveOutUnprepareHeader() retval=00000000 ret=7e0c00b6 002c:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 002c:Call KERNEL32.CloseHandle(00000068) ret=7e7349fd 002d:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c4bb8 002d:Call KERNEL32.SetEvent(00000070) ret=7e1c4f3d 002d:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c4f3d 002c:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e7349fd 002c:Call ntdll.RtlFreeHeap(00110000,00000000,0014d3a0) ret=7e734a23 002c:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e734a23 002c:Call ntdll.RtlFreeHeap(00110000,00000000,00148cb8) ret=7e734a49 002c:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e734a49 002c:Call msacm32.drv.wodMessage(0000ffff,00000006,0014bf20,00000000,00000000) ret=7e728e1f 002c:Call winmm.waveOutClose(00008001) ret=7e0c01a5 002c:Call winealsa.drv.wodMessage(00000000,00000006,7e72ab2b,00000000,00000000) ret=7e728e1f 002c:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1b2580 002c:Ret KERNEL32.CreateEventW() retval=00000068 ret=7e1b2580 002c:Call KERNEL32.WaitForSingleObject(00000068,ffffffff) ret=7e1b2635 002d:Call KERNEL32.SetEvent(00000068) ret=7e1c4ea1 002d:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c4ea1 002d:Call KERNEL32.ExitThread(00000000) ret=7e1c4eb0 002d:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) 002d:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 002d:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) 002d:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) retval=1 002d:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) 002d:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 002d:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) 002d:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) retval=1 002d:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) 002d:Call KERNEL32.TlsGetValue(00000000) ret=7e3f4071 002d:Ret KERNEL32.TlsGetValue() retval=00000000 ret=7e3f4071 002d:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 002d:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) 002d:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 002c:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1b2635 002c:Call KERNEL32.CloseHandle(00000068) ret=7e1b2640 002c:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1b2640 002c:Call ntdll.RtlFreeHeap(00110000,00000000,0014c7d0) ret=7e1b24dc 002c:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e1b24dc 002c:Call ntdll.RtlDeleteCriticalSection(0013cefc) ret=7e1b24fb 002c:Ret ntdll.RtlDeleteCriticalSection() retval=00000000 ret=7e1b24fb 002c:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bc,0014bf20,00000000,00000000) ret=7e1c4643 002c:Call KERNEL32.IsBadReadPtr(0014bf20,0000002c) ret=7e0bdbc9 002c:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 002c:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bc,008ceaa4,00000000,00000000) ret=7e0bdf33 002c:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 002c:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 002c:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 002c:Call ntdll.RtlFreeHeap(00110000,00000000,0014bf58) ret=7e72ae0b 002c:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e72ae0b 002c:Ret winmm.waveOutClose() retval=00000000 ret=7e0c01a5 002c:Call ntdll.RtlFreeHeap(00110000,00000000,0014bf20) ret=7e0c01f7 002c:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e0c01f7 002c:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 002c:Call ntdll.RtlFreeHeap(00110000,00000000,0014bef8) ret=7e72ae0b 002c:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e72ae0b 0009:Call KERNEL32.WaitForSingleObject(00000070,ffffffff) ret=7e1b2635 0009:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1b2635 0009:Call KERNEL32.CloseHandle(00000070) ret=7e1b2640 0009:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1b2640 0009:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0009:Ret winmm.waveOutReset() retval=00000000 ret=7e0c0180 0009:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 002c:Call ntdll.RtlFreeHeap(00110000,00000000,00148c28) ret=7e731f79 002c:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e731f79 002c:Call KERNEL32.SetEvent(00000040) ret=7e7343a0 002c:Ret KERNEL32.SetEvent() retval=00000001 ret=7e7343a0 002c:Call KERNEL32.CloseHandle(00000064) ret=7e734340 002c:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e734340 002c:Call ntdll.RtlFreeHeap(00110000,00000000,00148bb0) ret=7e734360 002c:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e734360 002c:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) 002c:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 002c:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) 002c:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) retval=1 002c:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) 002c:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 002c:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) 002c:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) retval=1 002c:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) 002c:Call KERNEL32.TlsGetValue(00000000) ret=7e3f4071 002c:Ret KERNEL32.TlsGetValue() retval=00000000 ret=7e3f4071 002c:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 002c:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) 002c:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0009:Call KERNEL32.WaitForSingleObject(00000040,ffffffff) ret=7e73555a 0009:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e73555a 0009:Call KERNEL32.ResetEvent(00000038) ret=7e735572 0009:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e735572 0009:Call KERNEL32.CreateThread(00000000,00000000,7e7348a0,00148bd8,00000000,0033f598) ret=7e73560c 002e:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) 002e:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 002e:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) 002e:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 002e:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) 002e:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) retval=1 002e:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) 002e:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 002e:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) 002e:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 002e:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) 002e:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 002e:Starting thread proc 0x7e7348a0 (arg=0x148bd8) 002e:Call KERNEL32.FindResourceW(01000000,0000007c,7e741bde L"WAVE") ret=7e734ca3 002e:Ret KERNEL32.FindResourceW() retval=01014c40 ret=7e734ca3 002e:Call KERNEL32.LoadResource(01000000,01014c40) ret=7e734cb9 002e:Ret KERNEL32.LoadResource() retval=0104d668 ret=7e734cb9 002e:Call KERNEL32.LockResource(0104d668) ret=7e734cce 002e:Ret KERNEL32.LockResource() retval=0104d668 ret=7e734cce 002e:Call KERNEL32.FreeResource(0104d668) ret=7e734ce9 002e:Ret KERNEL32.FreeResource() retval=00000000 ret=7e734ce9 002e:Call ntdll.RtlAllocateHeap(00110000,00000008,0000005c) ret=7e733960 002e:Ret ntdll.RtlAllocateHeap() retval=00148c28 ret=7e733960 002e:Call KERNEL32.GetFileSize(ffffffff,00000000) ret=7e733ab9 002e:Ret KERNEL32.GetFileSize() retval=ffffffff ret=7e733ab9 002e:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7e733cf0 002e:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e733cf0 002e:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7e734e1c 002e:Ret ntdll.RtlAllocateHeap() retval=00148cb8 ret=7e734e1c 002e:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e734f1f 002e:Ret KERNEL32.CreateEventW() retval=00000068 ret=7e734f1f 002e:Call ntdll.RtlAllocateHeap(00110000,00000008,0000001c) ret=7e72abbe 002e:Ret ntdll.RtlAllocateHeap() retval=00148b18 ret=7e72abbe 002e:Call msacm32.drv.wodMessage(0000ffff,00000005,007ce918,007ce970,00030000) ret=7e728e1f 002e:Call ntdll.RtlAllocateHeap(00110000,00000000,0000002c) ret=7e0bfd8c 002e:Ret ntdll.RtlAllocateHeap() retval=00148b40 ret=7e0bfd8c 002e:Call winmm.waveOutGetNumDevs() ret=7e0bfdb5 002e:Ret winmm.waveOutGetNumDevs() retval=00000002 ret=7e0bfdb5 002e:Call winmm.waveOutOpen(00148b48,00000000,00148cb8,7e0bde60,00148b40,00030008) ret=7e0c0313 002e:Call ntdll.RtlAllocateHeap(00110000,00000008,0000001c) ret=7e72abbe 002e:Ret ntdll.RtlAllocateHeap() retval=00148b78 ret=7e72abbe 002e:Call winealsa.drv.wodMessage(00000000,00000005,007ce5b8,007ce610,00030008) ret=7e728e1f 002e:Call ntdll.RtlAllocateHeap(00110000,00000008,00000068) ret=7e1c6c82 002e:Ret ntdll.RtlAllocateHeap() retval=0014bef8 ret=7e1c6c82 002e:Call ntdll.RtlAllocateHeap(00110000,00000008,00000300) ret=7e1b2459 002e:Ret ntdll.RtlAllocateHeap() retval=0014c7d0 ret=7e1b2459 002e:Call KERNEL32.InitializeCriticalSection(0013cefc) ret=7e1b2469 002e:Ret KERNEL32.InitializeCriticalSection() retval=00000001 ret=7e1b2469 002e:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1c73ab 0009:Ret KERNEL32.CreateThread() retval=00000064 ret=7e73560c 0009:Call KERNEL32.SetThreadPriority(00000064,0000000f) ret=7e73562d 0009:Ret KERNEL32.SetThreadPriority() retval=00000001 ret=7e73562d 0009:Ret winmm.PlaySoundW() retval=00000001 ret=01006aa0 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,0000000c) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c57d8 ret=0100a7d2 0009:Call user32.GetClientRect(00010030,0033f608) ret=01005145 0009:Ret user32.GetClientRect() retval=00000001 ret=01005145 0009:Call user32.GetDC(00010030) ret=010051ad 0009:Ret user32.GetDC() retval=00000314 ret=010051ad 0009:Call gdi32.CreateCompatibleDC(00000314) ret=010051bc 0009:Ret gdi32.CreateCompatibleDC() retval=00001944 ret=010051bc 0009:Call gdi32.CreateCompatibleDC(00000314) ret=010051ca 0009:Ret gdi32.CreateCompatibleDC() retval=00001950 ret=010051ca 0009:Call gdi32.CreateCompatibleDC(00000314) ret=010051d8 0009:Ret gdi32.CreateCompatibleDC() retval=0000195c ret=010051d8 0009:Call gdi32.CreateCompatibleBitmap(00000314,00000047,00000060) ret=010051f8 0009:Ret gdi32.CreateCompatibleBitmap() retval=00001968 ret=010051f8 0009:Call gdi32.CreateCompatibleBitmap(00000314,00000047,00000060) ret=01005212 0009:Ret gdi32.CreateCompatibleBitmap() retval=0000196c ret=01005212 0009:Call gdi32.CreateCompatibleBitmap(00000314,00000047,00000060) ret=0100522c 0009:Ret gdi32.CreateCompatibleBitmap() retval=00001970 ret=0100522c 0009:Call gdi32.SelectObject(00001944,00001968) ret=01005246 0009:Ret gdi32.SelectObject() retval=0000006c ret=01005246 0009:Call gdi32.SelectObject(00001950,0000196c) ret=0100525a 0009:Ret gdi32.SelectObject() retval=0000006c ret=0100525a 0009:Call gdi32.SelectObject(0000195c,00001970) ret=0100526e 0009:Ret gdi32.SelectObject() retval=0000006c ret=0100526e 0009:Call user32.LoadBitmapW(01000000,0033f5a0 L"CARD45") ret=010028ff 002e:Ret KERNEL32.CreateEventW() retval=00000070 ret=7e1c73ab 002e:Call KERNEL32.CreateThread(00000000,00000000,7e1c5570,00000000,00000000,0013cedc) ret=7e1c73ef 0009:Ret user32.LoadBitmapW() retval=00001980 ret=010028ff 0009:Call gdi32.CreateCompatibleDC(00001950) ret=01002909 0009:Ret gdi32.CreateCompatibleDC() retval=00001994 ret=01002909 0009:Call gdi32.SelectObject(00001994,00001980) ret=01002917 0009:Ret gdi32.SelectObject() retval=0000006c ret=01002917 0009:Call gdi32.BitBlt(00001950,00000000,00000000,00000047,00000060,00001994,00000000,00000000,00cc0020) ret=01002938 0009:Ret gdi32.BitBlt() retval=00000001 ret=01002938 0009:Call gdi32.SelectObject(00001994,0000006c) ret=0100293e 0009:Ret gdi32.SelectObject() retval=00001980 ret=0100293e 0009:Call gdi32.DeleteObject(00001980) ret=01002947 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01002947 0009:Call gdi32.DeleteDC(00001994) ret=0100294e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100294e 0009:Call gdi32.SetPixel(00001950,00000000,00000000,00008000) ret=01002969 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002969 0009:Call gdi32.SetPixel(00001950,00000001,00000000,00008000) ret=01002976 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002976 0009:Call gdi32.SetPixel(00001950,00000000,00000001,00008000) ret=01002982 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002982 0009:Call gdi32.SetPixel(00001950,00000046,00000000,00008000) ret=0100298f 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100298f 0009:Call gdi32.SetPixel(00001950,00000045,00000000,00008000) ret=0100299c 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100299c 0009:Call gdi32.SetPixel(00001950,00000046,00000001,00008000) ret=010029ab 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ab 0009:Call gdi32.SetPixel(00001950,00000000,0000005f,00008000) ret=010029bf 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029bf 0009:Call gdi32.SetPixel(00001950,00000001,0000005f,00008000) ret=010029d0 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029d0 0009:Call gdi32.SetPixel(00001950,00000000,0000005e,00008000) ret=010029de 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029de 0009:Call gdi32.SetPixel(00001950,00000046,0000005f,00008000) ret=010029ef 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ef 0009:Call gdi32.SetPixel(00001950,00000045,0000005f,00008000) ret=01002a00 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a00 0009:Call gdi32.SetPixel(00001950,00000046,0000005e,00008000) ret=01002a11 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a11 0009:Call user32.LoadBitmapW(01000000,010012c8 L"CARDBACK") ret=010028ff 0009:Ret user32.LoadBitmapW() retval=000019ac ret=010028ff 0009:Call gdi32.CreateCompatibleDC(00001944) ret=01002909 0009:Ret gdi32.CreateCompatibleDC() retval=000019c0 ret=01002909 0009:Call gdi32.SelectObject(000019c0,000019ac) ret=01002917 0009:Ret gdi32.SelectObject() retval=0000006c ret=01002917 0009:Call gdi32.BitBlt(00001944,00000000,00000000,00000047,00000060,000019c0,00000000,00000000,00cc0020) ret=01002938 0009:Ret gdi32.BitBlt() retval=00000001 ret=01002938 0009:Call gdi32.SelectObject(000019c0,0000006c) ret=0100293e 0009:Ret gdi32.SelectObject() retval=000019ac ret=0100293e 0009:Call gdi32.DeleteObject(000019ac) ret=01002947 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01002947 0009:Call gdi32.DeleteDC(000019c0) ret=0100294e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100294e 0009:Call gdi32.SetPixel(00001944,00000000,00000000,00008000) ret=01002969 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002969 0009:Call gdi32.SetPixel(00001944,00000001,00000000,00008000) ret=01002976 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002976 0009:Call gdi32.SetPixel(00001944,00000000,00000001,00008000) ret=01002982 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002982 0009:Call gdi32.SetPixel(00001944,00000046,00000000,00008000) ret=0100298f 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100298f 0009:Call gdi32.SetPixel(00001944,00000045,00000000,00008000) ret=0100299c 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100299c 0009:Call gdi32.SetPixel(00001944,00000046,00000001,00008000) ret=010029ab 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ab 0009:Call gdi32.SetPixel(00001944,00000000,0000005f,00008000) ret=010029bf 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029bf 0009:Call gdi32.SetPixel(00001944,00000001,0000005f,00008000) ret=010029d0 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029d0 0009:Call gdi32.SetPixel(00001944,00000000,0000005e,00008000) ret=010029de 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029de 0009:Call gdi32.SetPixel(00001944,00000046,0000005f,00008000) ret=010029ef 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ef 0009:Call gdi32.SetPixel(00001944,00000045,0000005f,00008000) ret=01002a00 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a00 0009:Call gdi32.SetPixel(00001944,00000046,0000005e,00008000) ret=01002a11 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a11 0009:Call winmm.timeGetTime() ret=010047d1 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=0000218c ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=0000218c ret=010047d1 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=0000218c ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=0000218c ret=01004881 0009:Call gdi32.BitBlt(00001944,00000000,00000000,00000048,00000061,00001944,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00000314,0000044d,00000258,00000047,00000060,00001950,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 002f:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) 002f:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 002f:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) 002f:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 002f:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) 002f:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) retval=1 002f:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) 002f:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 002f:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) 002f:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 002f:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) 002f:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 002f:Starting thread proc 0x7e1c5570 (arg=(nil)) 002f:Call KERNEL32.SetEvent(00000070) ret=7e1c55aa 002f:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c55aa 002e:Ret KERNEL32.CreateThread() retval=0000009c ret=7e1c73ef 002e:Call KERNEL32.SetThreadPriority(0000009c,0000000f) ret=7e1c7413 002e:Ret KERNEL32.SetThreadPriority() retval=00000001 ret=7e1c7413 002e:Call KERNEL32.WaitForSingleObject(00000070,ffffffff) ret=7e1c742f 002e:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1c742f 002e:Call KERNEL32.CloseHandle(00000070) ret=7e1c7443 002e:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1c7443 002e:Call ntdll.RtlFreeHeap(00110000,00000000,0014bef8) ret=7e1c7479 002e:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e1c7479 002e:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bb,00148b40,00000000,00000000) ret=7e1c4643 002e:Call KERNEL32.IsBadReadPtr(00148b40,0000002c) ret=7e0bdbc9 002e:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 002e:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bb,007ceaa4,00000000,00000000) ret=7e0bdf33 002e:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 002e:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 002e:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 002e:Ret winmm.waveOutOpen() retval=00000000 ret=7e0c0313 002e:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 002e:Call ntdll.RtlAllocateHeap(00110000,00000000,000039ac) ret=7e73520d 002e:Ret ntdll.RtlAllocateHeap() retval=0014d3a0 ret=7e73520d 002e:Call msacm32.drv.wodMessage(0000ffff,00000007,00148b40,0014d3a0,00000020) ret=7e728e1f 002e:Call winmm.waveOutPrepareHeader(00008001,0014d3a0,00000020) ret=7e0c09d8 002e:Call winealsa.drv.wodMessage(00000000,00000007,7e72ab2b,0014d3a0,00000020) ret=7e728e1f 002e:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 002e:Ret winmm.waveOutPrepareHeader() retval=00000000 ret=7e0c09d8 002e:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 002e:Call msacm32.drv.wodMessage(0000ffff,00000007,00148b40,0014d3c0,00000020) ret=7e728e1f 002e:Call winmm.waveOutPrepareHeader(00008001,0014d3c0,00000020) ret=7e0c09d8 002e:Call winealsa.drv.wodMessage(00000000,00000007,7e72ab2b,0014d3c0,00000020) ret=7e728e1f 002e:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 002e:Ret winmm.waveOutPrepareHeader() retval=00000000 ret=7e0c09d8 002e:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 002e:Call KERNEL32.WaitForSingleObject(00000038,00000000) ret=7e735343 002e:Ret KERNEL32.WaitForSingleObject() retval=00000102 ret=7e735343 002e:Call msacm32.drv.wodMessage(0000ffff,00000009,00148b40,0014d3a0,00000020) ret=7e728e1f 002e:Call winmm.waveOutWrite(00008001,0014d3a0,00000020) ret=7e0c09b5 002e:Call winealsa.drv.wodMessage(00000000,00000009,7e72ab2b,0014d3a0,00000020) ret=7e728e1f 002e:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 002e:Ret winmm.waveOutWrite() retval=00000000 ret=7e0c09b5 002e:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 002e:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 002e:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 002e:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 002e:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 002e:Call KERNEL32.WaitForSingleObject(00000068,ffffffff) ret=7e73429b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00002193 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00002193 ret=01004881 0009:Call gdi32.BitBlt(0000195c,00000000,0000003c,00000047,00000024,00001944,00000000,0000003c,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(0000195c,00000007,00000000,00000040,0000003c,00001944,00000007,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001944,00000040,00000024,00000008,0000003d,00001944,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001944,00000000,00000000,00000047,00000024,00000314,0000040d,00000234,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001944,00000000,00000024,00000040,0000003c,00000314,0000040d,00000258,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,0000040d,00000234,00000047,00000060,00001950,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,0000044d,00000294,00000047,00000024,0000195c,00000000,0000003c,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000454,00000258,00000040,0000003c,0000195c,00000007,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=0000219b ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=0000219b ret=01004881 0009:Call gdi32.BitBlt(0000195c,00000000,00000035,00000047,0000002b,00001944,00000000,00000035,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(0000195c,fffffffc,00000000,0000004b,00000035,00001944,fffffffc,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001944,00000000,00000000,00000047,0000002b,00000314,000003c2,00000209,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001944,00000000,0000002b,0000004b,00000035,00000314,000003c2,00000234,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000003c2,00000209,00000047,00000060,00001950,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,0000040d,00000269,00000047,0000002b,0000195c,00000000,00000035,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000040d,00000234,00000047,00000035,0000195c,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000021a3 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000021a3 ret=01004881 0009:Call gdi32.BitBlt(0000195c,00000000,00000036,00000047,0000002a,00001944,00000000,00000036,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(0000195c,fffffffd,00000000,0000004a,00000036,00001944,fffffffd,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001944,00000000,00000000,00000047,0000002a,00000314,00000378,000001df,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001944,00000000,0000002a,0000004a,00000036,00000314,00000378,00000209,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000378,000001df,00000047,00000060,00001950,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000003c2,0000023f,00000047,0000002a,0000195c,00000000,00000036,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,000003c2,00000209,00000047,00000036,0000195c,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000021ab ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000021ab ret=01004881 0009:Call gdi32.BitBlt(0000195c,00000000,00000036,00000047,0000002a,00001944,00000000,00000036,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(0000195c,fffffffd,00000000,0000004a,00000036,00001944,fffffffd,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001944,00000000,00000000,00000047,0000002a,00000314,0000032e,000001b5,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001944,00000000,0000002a,0000004a,00000036,00000314,0000032e,000001df,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,0000032e,000001b5,00000047,00000060,00001950,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000378,00000215,00000047,0000002a,0000195c,00000000,00000036,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000378,000001df,00000047,00000036,0000195c,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000021b3 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000021b3 ret=01004881 0009:Call gdi32.BitBlt(0000195c,00000000,00000036,00000047,0000002a,00001944,00000000,00000036,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(0000195c,fffffffd,00000000,0000004a,00000036,00001944,fffffffd,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001944,00000000,00000000,00000047,0000002a,00000314,000002e4,0000018b,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001944,00000000,0000002a,0000004a,00000036,00000314,000002e4,000001b5,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000002e4,0000018b,00000047,00000060,00001950,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,0000032e,000001eb,00000047,0000002a,0000195c,00000000,00000036,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000032e,000001b5,00000047,00000036,0000195c,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000021bb ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000021bb ret=01004881 0009:Call gdi32.BitBlt(0000195c,00000000,00000036,00000047,0000002a,00001944,00000000,00000036,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(0000195c,fffffffc,00000000,0000004b,00000036,00001944,fffffffc,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001944,00000000,00000000,00000047,0000002a,00000314,00000299,00000161,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001944,00000000,0000002a,0000004b,00000036,00000314,00000299,0000018b,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000299,00000161,00000047,00000060,00001950,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000002e4,000001c1,00000047,0000002a,0000195c,00000000,00000036,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,000002e4,0000018b,00000047,00000036,0000195c,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000021c3 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000021c3 ret=01004881 0009:Call gdi32.BitBlt(0000195c,00000000,00000036,00000047,0000002a,00001944,00000000,00000036,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(0000195c,fffffffd,00000000,0000004a,00000036,00001944,fffffffd,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001944,00000000,00000000,00000047,0000002a,00000314,0000024f,00000137,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001944,00000000,0000002a,0000004a,00000036,00000314,0000024f,00000161,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,0000024f,00000137,00000047,00000060,00001950,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000299,00000197,00000047,0000002a,0000195c,00000000,00000036,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000299,00000161,00000047,00000036,0000195c,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000021cb ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000021cb ret=01004881 0009:Call gdi32.BitBlt(0000195c,00000000,00000035,00000047,0000002b,00001944,00000000,00000035,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(0000195c,fffffffd,00000000,0000004a,00000035,00001944,fffffffd,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001944,00000000,00000000,00000047,0000002b,00000314,00000205,0000010c,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001944,00000000,0000002b,0000004a,00000035,00000314,00000205,00000137,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000205,0000010c,00000047,00000060,00001950,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,0000024f,0000016c,00000047,0000002b,0000195c,00000000,00000035,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000024f,00000137,00000047,00000035,0000195c,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000021d3 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000021d3 ret=01004881 0009:Call gdi32.BitBlt(0000195c,00000000,00000036,00000047,0000002a,00001944,00000000,00000036,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(0000195c,fffffffd,00000000,0000004a,00000036,00001944,fffffffd,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001944,00000000,00000000,00000047,0000002a,00000314,000001bb,000000e2,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001944,00000000,0000002a,0000004a,00000036,00000314,000001bb,0000010c,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000001bb,000000e2,00000047,00000060,00001950,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000205,00000142,00000047,0000002a,0000195c,00000000,00000036,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000205,0000010c,00000047,00000036,0000195c,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0019:Ret user32.GetMessageW() retval=00000001 ret=7ec5ec4b 0019:Call user32.DispatchMessageW(0033f93c) ret=7ec5ec28 0019:Call window proc 0x7ec60b80 (hwnd=0x10026,msg=WM_TIMER,wp=00000001,lp=00000000) 0019:Ret window proc 0x7ec60b80 (hwnd=0x10026,msg=WM_TIMER,wp=00000001,lp=00000000) retval=00000000 0019:Ret user32.DispatchMessageW() retval=00000000 ret=7ec5ec28 0019:Call user32.GetMessageW(0033f93c,00000000,00000000,00000000) ret=7ec5ec4b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000021db ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000021db ret=01004881 0009:Call gdi32.BitBlt(0000195c,00000000,00000036,00000047,0000002a,00001944,00000000,00000036,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(0000195c,fffffffc,00000000,0000004b,00000036,00001944,fffffffc,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001944,00000000,00000000,00000047,0000002a,00000314,00000170,000000b8,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001944,00000000,0000002a,0000004b,00000036,00000314,00000170,000000e2,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000170,000000b8,00000047,00000060,00001950,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000001bb,00000118,00000047,0000002a,0000195c,00000000,00000036,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,000001bb,000000e2,00000047,00000036,0000195c,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000021e3 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000021e3 ret=01004881 0009:Call gdi32.BitBlt(0000195c,00000000,00000036,00000047,0000002a,00001944,00000000,00000036,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(0000195c,fffffffd,00000000,0000004a,00000036,00001944,fffffffd,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001944,00000000,00000000,00000047,0000002a,00000314,00000126,0000008e,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001944,00000000,0000002a,0000004a,00000036,00000314,00000126,000000b8,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000126,0000008e,00000047,00000060,00001950,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000170,000000ee,00000047,0000002a,0000195c,00000000,00000036,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000170,000000b8,00000047,00000036,0000195c,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000021eb ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000021eb ret=01004881 0009:Call gdi32.BitBlt(0000195c,00000000,00000036,00000047,0000002a,00001944,00000000,00000036,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(0000195c,fffffffd,00000000,0000004a,00000036,00001944,fffffffd,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001944,00000000,00000000,00000047,0000002a,00000314,000000dc,00000064,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001944,00000000,0000002a,0000004a,00000036,00000314,000000dc,0000008e,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000000dc,00000064,00000047,00000060,00001950,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000126,000000c4,00000047,0000002a,0000195c,00000000,00000036,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000126,0000008e,00000047,00000036,0000195c,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000021f3 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000021f3 ret=01004881 0009:Call gdi32.BitBlt(0000195c,00000000,00000045,00000047,0000001b,00001944,00000000,00000045,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(0000195c,00000018,00000000,0000002f,00000045,00001944,00000018,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001944,0000002f,0000001b,00000019,00000046,00001944,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001944,00000000,00000000,00000047,0000001b,00000314,000000ad,00000049,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001944,00000000,0000001b,0000002f,00000045,00000314,000000ad,00000064,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000000ad,00000049,00000047,00000060,00001950,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000000dc,000000a9,00000047,0000001b,0000195c,00000000,00000045,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,000000f4,00000064,0000002f,00000045,0000195c,00000018,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call gdi32.SelectObject(00001944,0000006c) ret=01005316 0009:Ret gdi32.SelectObject() retval=00001968 ret=01005316 0009:Call gdi32.SelectObject(00001950,0000006c) ret=01005324 0009:Ret gdi32.SelectObject() retval=0000196c ret=01005324 0009:Call gdi32.SelectObject(0000195c,0000006c) ret=01005332 0009:Ret gdi32.SelectObject() retval=00001970 ret=01005332 0009:Call gdi32.DeleteObject(00001968) ret=01005340 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005340 0009:Call gdi32.DeleteObject(0000196c) ret=01005348 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005348 0009:Call gdi32.DeleteObject(00001970) ret=01005350 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005350 0009:Call gdi32.DeleteDC(00001944) ret=0100535e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100535e 0009:Call gdi32.DeleteDC(00001950) ret=01005366 0009:Ret gdi32.DeleteDC() retval=00000001 ret=01005366 0009:Call gdi32.DeleteDC(0000195c) ret=0100536e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100536e 0009:Call user32.ReleaseDC(00010030,00000314) ret=0100537c 0009:Ret user32.ReleaseDC() retval=00000001 ret=0100537c 0009:Call user32.InvalidateRect(00010030,0033f618,00000000) ret=0100538a 0009:Ret user32.InvalidateRect() retval=00000001 ret=0100538a 0009:Call KERNEL32.GetModuleHandleW(00000000) ret=01006a97 0009:Ret KERNEL32.GetModuleHandleW() retval=01000000 ret=01006a97 0009:Call winmm.PlaySoundW(0000007c,01000000,00040007) ret=01006aa0 0009:Call ntdll.RtlAllocateHeap(00110000,00000008,0000001c) ret=7e7356bc 0009:Ret ntdll.RtlAllocateHeap() retval=0014cad8 ret=7e7356bc 0009:Call KERNEL32.ResetEvent(00000040) ret=7e735513 0009:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e735513 0009:Call KERNEL32.SetEvent(00000038) ret=7e735520 0009:Ret KERNEL32.SetEvent() retval=00000001 ret=7e735520 0009:Call msacm32.drv.wodMessage(0000ffff,0000000c,00148b40,00000000,00000000) ret=7e728e1f 0009:Call winmm.waveOutReset(00008001) ret=7e0c0180 0009:Call winealsa.drv.wodMessage(00000000,0000000c,7e72ab2b,00000000,00000000) ret=7e728e1f 0009:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1b2580 0009:Ret KERNEL32.CreateEventW() retval=00000070 ret=7e1b2580 0009:Call KERNEL32.WaitForSingleObject(00000070,ffffffff) ret=7e1b2635 002f:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bd,00148b40,0014d3a0,00000000) ret=7e1c4643 002f:Call KERNEL32.IsBadReadPtr(00148b40,0000002c) ret=7e0bdbc9 002f:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 002f:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bd,007ceaa4,0014d3a0,00000000) ret=7e0bdf33 002f:Call KERNEL32.SetEvent(00000068) ret=7e7341f6 002f:Ret KERNEL32.SetEvent() retval=00000001 ret=7e7341f6 002f:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 002f:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 002f:Call KERNEL32.SetEvent(00000070) ret=7e1c4f3d 002f:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c4f3d 002e:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e73429b 002e:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 002e:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 002e:Call msacm32.drv.wodMessage(0000ffff,0000000c,00148b40,00000000,00000000) ret=7e728e1f 002e:Call winmm.waveOutReset(00008001) ret=7e0c0180 002e:Call winealsa.drv.wodMessage(00000000,0000000c,7e72ab2b,00000000,00000000) ret=7e728e1f 002e:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1b2580 002e:Ret KERNEL32.CreateEventW() retval=000000a0 ret=7e1b2580 002e:Call KERNEL32.WaitForSingleObject(000000a0,ffffffff) ret=7e1b2635 002f:Call KERNEL32.SetEvent(000000a0) ret=7e1c4f3d 002f:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c4f3d 002e:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1b2635 002e:Call KERNEL32.CloseHandle(000000a0) ret=7e1b2640 002e:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1b2640 002e:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 002e:Ret winmm.waveOutReset() retval=00000000 ret=7e0c0180 002e:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 002e:Call msacm32.drv.wodMessage(0000ffff,00000008,00148b40,0014d3a0,00000020) ret=7e728e1f 002e:Call winmm.waveOutUnprepareHeader(00008001,0014d3a0,00000020) ret=7e0c00b6 002e:Call winealsa.drv.wodMessage(00000000,00000008,7e72ab2b,0014d3a0,00000020) ret=7e728e1f 002e:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 002e:Ret winmm.waveOutUnprepareHeader() retval=00000000 ret=7e0c00b6 002e:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 002e:Call msacm32.drv.wodMessage(0000ffff,00000008,00148b40,0014d3c0,00000020) ret=7e728e1f 002e:Call winmm.waveOutUnprepareHeader(00008001,0014d3c0,00000020) ret=7e0c00b6 002e:Call winealsa.drv.wodMessage(00000000,00000008,7e72ab2b,0014d3c0,00000020) ret=7e728e1f 002e:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 002e:Ret winmm.waveOutUnprepareHeader() retval=00000000 ret=7e0c00b6 002e:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 002e:Call KERNEL32.CloseHandle(00000068) ret=7e7349fd 002e:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e7349fd 002e:Call ntdll.RtlFreeHeap(00110000,00000000,0014d3a0) ret=7e734a23 002e:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e734a23 002e:Call ntdll.RtlFreeHeap(00110000,00000000,00148cb8) ret=7e734a49 002e:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e734a49 002e:Call msacm32.drv.wodMessage(0000ffff,00000006,00148b40,00000000,00000000) ret=7e728e1f 002e:Call winmm.waveOutClose(00008001) ret=7e0c01a5 002e:Call winealsa.drv.wodMessage(00000000,00000006,7e72ab2b,00000000,00000000) ret=7e728e1f 002e:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1b2580 002e:Ret KERNEL32.CreateEventW() retval=00000068 ret=7e1b2580 002e:Call KERNEL32.WaitForSingleObject(00000068,ffffffff) ret=7e1b2635 002f:Call KERNEL32.SetEvent(00000068) ret=7e1c4ea1 002f:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c4ea1 002f:Call KERNEL32.ExitThread(00000000) ret=7e1c4eb0 002f:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) 002f:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 002f:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) 002f:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) retval=1 002f:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) 002f:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 002f:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) 002f:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) retval=1 002f:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) 002f:Call KERNEL32.TlsGetValue(00000000) ret=7e3f4071 002f:Ret KERNEL32.TlsGetValue() retval=00000000 ret=7e3f4071 002f:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 002f:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) 002f:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 002e:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1b2635 002e:Call KERNEL32.CloseHandle(00000068) ret=7e1b2640 002e:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1b2640 002e:Call ntdll.RtlFreeHeap(00110000,00000000,0014c7d0) ret=7e1b24dc 002e:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e1b24dc 002e:Call ntdll.RtlDeleteCriticalSection(0013cefc) ret=7e1b24fb 002e:Ret ntdll.RtlDeleteCriticalSection() retval=00000000 ret=7e1b24fb 002e:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bc,00148b40,00000000,00000000) ret=7e1c4643 002e:Call KERNEL32.IsBadReadPtr(00148b40,0000002c) ret=7e0bdbc9 002e:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 002e:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bc,007ceaa4,00000000,00000000) ret=7e0bdf33 002e:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 002e:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 002e:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 002e:Call ntdll.RtlFreeHeap(00110000,00000000,00148b78) ret=7e72ae0b 002e:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e72ae0b 002e:Ret winmm.waveOutClose() retval=00000000 ret=7e0c01a5 002e:Call ntdll.RtlFreeHeap(00110000,00000000,00148b40) ret=7e0c01f7 002e:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e0c01f7 002e:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 002e:Call ntdll.RtlFreeHeap(00110000,00000000,00148b18) ret=7e72ae0b 002e:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e72ae0b 0009:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1b2635 0009:Call KERNEL32.CloseHandle(00000070) ret=7e1b2640 0009:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1b2640 0009:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0009:Ret winmm.waveOutReset() retval=00000000 ret=7e0c0180 0009:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0009:Call KERNEL32.WaitForSingleObject(00000040,ffffffff) ret=7e73555a 002e:Call ntdll.RtlFreeHeap(00110000,00000000,00148c28) ret=7e731f79 002e:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e731f79 002e:Call KERNEL32.SetEvent(00000040) ret=7e7343a0 002e:Ret KERNEL32.SetEvent() retval=00000001 ret=7e7343a0 002e:Call KERNEL32.CloseHandle(00000064) ret=7e734340 002e:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e734340 002e:Call ntdll.RtlFreeHeap(00110000,00000000,00148bd8) ret=7e734360 002e:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e734360 002e:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) 002e:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 002e:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) 002e:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) retval=1 002e:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) 002e:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 002e:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) 002e:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) retval=1 002e:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) 002e:Call KERNEL32.TlsGetValue(00000000) ret=7e3f4071 002e:Ret KERNEL32.TlsGetValue() retval=00000000 ret=7e3f4071 002e:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 002e:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) 002e:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0009:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e73555a 0009:Call KERNEL32.ResetEvent(00000038) ret=7e735572 0009:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e735572 0009:Call KERNEL32.CreateThread(00000000,00000000,7e7348a0,0014cad8,00000000,0033f598) ret=7e73560c 0030:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) 0030:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0030:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) 0030:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0030:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) 0030:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) retval=1 0030:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) 0030:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0030:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) 0030:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0030:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) 0030:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0030:Starting thread proc 0x7e7348a0 (arg=0x14cad8) 0030:Call KERNEL32.FindResourceW(01000000,0000007c,7e741bde L"WAVE") ret=7e734ca3 0030:Ret KERNEL32.FindResourceW() retval=01014c40 ret=7e734ca3 0030:Call KERNEL32.LoadResource(01000000,01014c40) ret=7e734cb9 0030:Ret KERNEL32.LoadResource() retval=0104d668 ret=7e734cb9 0030:Call KERNEL32.LockResource(0104d668) ret=7e734cce 0030:Ret KERNEL32.LockResource() retval=0104d668 ret=7e734cce 0030:Call KERNEL32.FreeResource(0104d668) ret=7e734ce9 0030:Ret KERNEL32.FreeResource() retval=00000000 ret=7e734ce9 0030:Call ntdll.RtlAllocateHeap(00110000,00000008,0000005c) ret=7e733960 0030:Ret ntdll.RtlAllocateHeap() retval=00148c28 ret=7e733960 0030:Call KERNEL32.GetFileSize(ffffffff,00000000) ret=7e733ab9 0030:Ret KERNEL32.GetFileSize() retval=ffffffff ret=7e733ab9 0030:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7e733cf0 0030:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e733cf0 0030:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7e734e1c 0030:Ret ntdll.RtlAllocateHeap() retval=00148cb8 ret=7e734e1c 0030:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e734f1f 0030:Ret KERNEL32.CreateEventW() retval=00000068 ret=7e734f1f 0030:Call ntdll.RtlAllocateHeap(00110000,00000008,0000001c) ret=7e72abbe 0030:Ret ntdll.RtlAllocateHeap() retval=0014cb00 ret=7e72abbe 0030:Call msacm32.drv.wodMessage(0000ffff,00000005,008ce918,008ce970,00030000) ret=7e728e1f 0030:Call ntdll.RtlAllocateHeap(00110000,00000000,0000002c) ret=7e0bfd8c 0030:Ret ntdll.RtlAllocateHeap() retval=0014cb28 ret=7e0bfd8c 0030:Call winmm.waveOutGetNumDevs() ret=7e0bfdb5 0030:Ret winmm.waveOutGetNumDevs() retval=00000002 ret=7e0bfdb5 0030:Call winmm.waveOutOpen(0014cb30,00000000,00148cb8,7e0bde60,0014cb28,00030008) ret=7e0c0313 0030:Call ntdll.RtlAllocateHeap(00110000,00000008,0000001c) ret=7e72abbe 0030:Ret ntdll.RtlAllocateHeap() retval=0014cb60 ret=7e72abbe 0030:Call winealsa.drv.wodMessage(00000000,00000005,008ce5b8,008ce610,00030008) ret=7e728e1f 0030:Call ntdll.RtlAllocateHeap(00110000,00000008,00000068) ret=7e1c6c82 0030:Ret ntdll.RtlAllocateHeap() retval=00148b18 ret=7e1c6c82 0030:Call ntdll.RtlAllocateHeap(00110000,00000008,00000300) ret=7e1b2459 0030:Ret ntdll.RtlAllocateHeap() retval=0014c7d0 ret=7e1b2459 0030:Call KERNEL32.InitializeCriticalSection(0013cefc) ret=7e1b2469 0030:Ret KERNEL32.InitializeCriticalSection() retval=00000001 ret=7e1b2469 0030:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1c73ab 0009:Ret KERNEL32.CreateThread() retval=00000064 ret=7e73560c 0009:Call KERNEL32.SetThreadPriority(00000064,0000000f) ret=7e73562d 0009:Ret KERNEL32.SetThreadPriority() retval=00000001 ret=7e73562d 0009:Ret winmm.PlaySoundW() retval=00000001 ret=01006aa0 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,0000000c) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c57f0 ret=0100a7d2 0009:Call user32.GetClientRect(00010030,0033f608) ret=01005145 0009:Ret user32.GetClientRect() retval=00000001 ret=01005145 0009:Call user32.GetDC(00010030) ret=010051ad 0009:Ret user32.GetDC() retval=00000314 ret=010051ad 0009:Call gdi32.CreateCompatibleDC(00000314) ret=010051bc 0009:Ret gdi32.CreateCompatibleDC() retval=000019d0 ret=010051bc 0009:Call gdi32.CreateCompatibleDC(00000314) ret=010051ca 0009:Ret gdi32.CreateCompatibleDC() retval=000019dc ret=010051ca 0009:Call gdi32.CreateCompatibleDC(00000314) ret=010051d8 0009:Ret gdi32.CreateCompatibleDC() retval=000019e8 ret=010051d8 0009:Call gdi32.CreateCompatibleBitmap(00000314,00000047,00000060) ret=010051f8 0009:Ret gdi32.CreateCompatibleBitmap() retval=000019f4 ret=010051f8 0009:Call gdi32.CreateCompatibleBitmap(00000314,00000047,00000060) ret=01005212 0009:Ret gdi32.CreateCompatibleBitmap() retval=000019f8 ret=01005212 0009:Call gdi32.CreateCompatibleBitmap(00000314,00000047,00000060) ret=0100522c 0009:Ret gdi32.CreateCompatibleBitmap() retval=000019fc ret=0100522c 0009:Call gdi32.SelectObject(000019d0,000019f4) ret=01005246 0009:Ret gdi32.SelectObject() retval=0000006c ret=01005246 0009:Call gdi32.SelectObject(000019dc,000019f8) ret=0100525a 0009:Ret gdi32.SelectObject() retval=0000006c ret=0100525a 0009:Call gdi32.SelectObject(000019e8,000019fc) ret=0100526e 0009:Ret gdi32.SelectObject() retval=0000006c ret=0100526e 0009:Call user32.LoadBitmapW(01000000,0033f5a0 L"CARD52") ret=010028ff 0030:Ret KERNEL32.CreateEventW() retval=00000070 ret=7e1c73ab 0030:Call KERNEL32.CreateThread(00000000,00000000,7e1c5570,00000000,00000000,0013cedc) ret=7e1c73ef 0009:Ret user32.LoadBitmapW() retval=00001a0c ret=010028ff 0009:Call gdi32.CreateCompatibleDC(000019dc) ret=01002909 0009:Ret gdi32.CreateCompatibleDC() retval=00001a20 ret=01002909 0009:Call gdi32.SelectObject(00001a20,00001a0c) ret=01002917 0009:Ret gdi32.SelectObject() retval=0000006c ret=01002917 0009:Call gdi32.BitBlt(000019dc,00000000,00000000,00000047,00000060,00001a20,00000000,00000000,00cc0020) ret=01002938 0009:Ret gdi32.BitBlt() retval=00000001 ret=01002938 0009:Call gdi32.SelectObject(00001a20,0000006c) ret=0100293e 0009:Ret gdi32.SelectObject() retval=00001a0c ret=0100293e 0009:Call gdi32.DeleteObject(00001a0c) ret=01002947 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01002947 0009:Call gdi32.DeleteDC(00001a20) ret=0100294e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100294e 0009:Call gdi32.SetPixel(000019dc,00000000,00000000,00008000) ret=01002969 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002969 0009:Call gdi32.SetPixel(000019dc,00000001,00000000,00008000) ret=01002976 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002976 0009:Call gdi32.SetPixel(000019dc,00000000,00000001,00008000) ret=01002982 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002982 0009:Call gdi32.SetPixel(000019dc,00000046,00000000,00008000) ret=0100298f 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100298f 0009:Call gdi32.SetPixel(000019dc,00000045,00000000,00008000) ret=0100299c 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100299c 0009:Call gdi32.SetPixel(000019dc,00000046,00000001,00008000) ret=010029ab 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ab 0009:Call gdi32.SetPixel(000019dc,00000000,0000005f,00008000) ret=010029bf 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029bf 0009:Call gdi32.SetPixel(000019dc,00000001,0000005f,00008000) ret=010029d0 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029d0 0009:Call gdi32.SetPixel(000019dc,00000000,0000005e,00008000) ret=010029de 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029de 0009:Call gdi32.SetPixel(000019dc,00000046,0000005f,00008000) ret=010029ef 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ef 0009:Call gdi32.SetPixel(000019dc,00000045,0000005f,00008000) ret=01002a00 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a00 0009:Call gdi32.SetPixel(000019dc,00000046,0000005e,00008000) ret=01002a11 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a11 0009:Call user32.LoadBitmapW(01000000,010012c8 L"CARDBACK") ret=010028ff 0031:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) 0031:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0031:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) 0031:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0031:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) 0031:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) retval=1 0031:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) 0031:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0031:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) 0031:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0031:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) 0031:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0031:Starting thread proc 0x7e1c5570 (arg=(nil)) 0031:Call KERNEL32.SetEvent(00000070) ret=7e1c55aa 0031:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c55aa 0030:Ret KERNEL32.CreateThread() retval=000000a0 ret=7e1c73ef 0030:Call KERNEL32.SetThreadPriority(000000a0,0000000f) ret=7e1c7413 0030:Ret KERNEL32.SetThreadPriority() retval=00000001 ret=7e1c7413 0030:Call KERNEL32.WaitForSingleObject(00000070,ffffffff) ret=7e1c742f 0030:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1c742f 0030:Call KERNEL32.CloseHandle(00000070) ret=7e1c7443 0030:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1c7443 0030:Call ntdll.RtlFreeHeap(00110000,00000000,00148b18) ret=7e1c7479 0030:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e1c7479 0030:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bb,0014cb28,00000000,00000000) ret=7e1c4643 0030:Call KERNEL32.IsBadReadPtr(0014cb28,0000002c) ret=7e0bdbc9 0030:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 0030:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bb,008ceaa4,00000000,00000000) ret=7e0bdf33 0030:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 0030:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 0030:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0030:Ret winmm.waveOutOpen() retval=00000000 ret=7e0c0313 0030:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0030:Call ntdll.RtlAllocateHeap(00110000,00000000,000039ac) ret=7e73520d 0030:Ret ntdll.RtlAllocateHeap() retval=0014d970 ret=7e73520d 0030:Call msacm32.drv.wodMessage(0000ffff,00000007,0014cb28,0014d970,00000020) ret=7e728e1f 0030:Call winmm.waveOutPrepareHeader(00008001,0014d970,00000020) ret=7e0c09d8 0030:Call winealsa.drv.wodMessage(00000000,00000007,7e72ab2b,0014d970,00000020) ret=7e728e1f 0030:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 0030:Ret winmm.waveOutPrepareHeader() retval=00000000 ret=7e0c09d8 0030:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0030:Call msacm32.drv.wodMessage(0000ffff,00000007,0014cb28,0014d990,00000020) ret=7e728e1f 0030:Call winmm.waveOutPrepareHeader(00008001,0014d990,00000020) ret=7e0c09d8 0030:Call winealsa.drv.wodMessage(00000000,00000007,7e72ab2b,0014d990,00000020) ret=7e728e1f 0030:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 0030:Ret winmm.waveOutPrepareHeader() retval=00000000 ret=7e0c09d8 0030:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0030:Call KERNEL32.WaitForSingleObject(00000038,00000000) ret=7e735343 0030:Ret KERNEL32.WaitForSingleObject() retval=00000102 ret=7e735343 0030:Call msacm32.drv.wodMessage(0000ffff,00000009,0014cb28,0014d970,00000020) ret=7e728e1f 0030:Call winmm.waveOutWrite(00008001,0014d970,00000020) ret=7e0c09b5 0030:Call winealsa.drv.wodMessage(00000000,00000009,7e72ab2b,0014d970,00000020) ret=7e728e1f 0030:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0030:Ret winmm.waveOutWrite() retval=00000000 ret=7e0c09b5 0030:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0030:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 0030:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 0030:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 0030:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 0030:Call KERNEL32.WaitForSingleObject(00000068,ffffffff) ret=7e73429b 0009:Ret user32.LoadBitmapW() retval=00001a38 ret=010028ff 0009:Call gdi32.CreateCompatibleDC(000019d0) ret=01002909 0009:Ret gdi32.CreateCompatibleDC() retval=00001a4c ret=01002909 0009:Call gdi32.SelectObject(00001a4c,00001a38) ret=01002917 0009:Ret gdi32.SelectObject() retval=0000006c ret=01002917 0009:Call gdi32.BitBlt(000019d0,00000000,00000000,00000047,00000060,00001a4c,00000000,00000000,00cc0020) ret=01002938 0009:Ret gdi32.BitBlt() retval=00000001 ret=01002938 0009:Call gdi32.SelectObject(00001a4c,0000006c) ret=0100293e 0009:Ret gdi32.SelectObject() retval=00001a38 ret=0100293e 0009:Call gdi32.DeleteObject(00001a38) ret=01002947 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01002947 0009:Call gdi32.DeleteDC(00001a4c) ret=0100294e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100294e 0009:Call gdi32.SetPixel(000019d0,00000000,00000000,00008000) ret=01002969 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002969 0009:Call gdi32.SetPixel(000019d0,00000001,00000000,00008000) ret=01002976 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002976 0009:Call gdi32.SetPixel(000019d0,00000000,00000001,00008000) ret=01002982 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002982 0009:Call gdi32.SetPixel(000019d0,00000046,00000000,00008000) ret=0100298f 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100298f 0009:Call gdi32.SetPixel(000019d0,00000045,00000000,00008000) ret=0100299c 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100299c 0009:Call gdi32.SetPixel(000019d0,00000046,00000001,00008000) ret=010029ab 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ab 0009:Call gdi32.SetPixel(000019d0,00000000,0000005f,00008000) ret=010029bf 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029bf 0009:Call gdi32.SetPixel(000019d0,00000001,0000005f,00008000) ret=010029d0 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029d0 0009:Call gdi32.SetPixel(000019d0,00000000,0000005e,00008000) ret=010029de 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029de 0009:Call gdi32.SetPixel(000019d0,00000046,0000005f,00008000) ret=010029ef 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ef 0009:Call gdi32.SetPixel(000019d0,00000045,0000005f,00008000) ret=01002a00 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a00 0009:Call gdi32.SetPixel(000019d0,00000046,0000005e,00008000) ret=01002a11 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a11 0009:Call winmm.timeGetTime() ret=010047d1 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00002229 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00002229 ret=010047d1 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00002229 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00002229 ret=01004881 0009:Call gdi32.BitBlt(000019d0,00000000,00000000,00000048,00000061,000019d0,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00000314,0000044d,00000258,00000047,00000060,000019dc,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=0000222f ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=0000222f ret=01004881 0009:Call gdi32.BitBlt(000019e8,00000000,00000041,00000047,0000001f,000019d0,00000000,00000041,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000019e8,00000017,00000000,00000030,00000041,000019d0,00000017,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000019d0,00000030,0000001f,00000018,00000042,000019d0,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(000019d0,00000000,00000000,00000047,0000001f,00000314,0000041d,00000239,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000019d0,00000000,0000001f,00000030,00000041,00000314,0000041d,00000258,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,0000041d,00000239,00000047,00000060,000019dc,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,0000044d,00000299,00000047,0000001f,000019e8,00000000,00000041,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000464,00000258,00000030,00000041,000019e8,00000017,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00002237 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00002237 ret=01004881 0009:Call gdi32.BitBlt(000019e8,00000000,00000036,00000047,0000002a,000019d0,00000000,00000036,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000019e8,00000007,00000000,00000040,00000036,000019d0,00000007,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000019d0,00000040,0000002a,00000008,00000037,000019d0,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(000019d0,00000000,00000000,00000047,0000002a,00000314,000003dd,0000020f,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000019d0,00000000,0000002a,00000040,00000036,00000314,000003dd,00000239,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000003dd,0000020f,00000047,00000060,000019dc,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,0000041d,0000026f,00000047,0000002a,000019e8,00000000,00000036,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000424,00000239,00000040,00000036,000019e8,00000007,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=0000223f ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=0000223f ret=01004881 0009:Call gdi32.BitBlt(000019e8,00000000,00000036,00000047,0000002a,000019d0,00000000,00000036,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000019e8,00000006,00000000,00000041,00000036,000019d0,00000006,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000019d0,00000041,0000002a,00000007,00000037,000019d0,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(000019d0,00000000,00000000,00000047,0000002a,00000314,0000039c,000001e5,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000019d0,00000000,0000002a,00000041,00000036,00000314,0000039c,0000020f,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,0000039c,000001e5,00000047,00000060,000019dc,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000003dd,00000245,00000047,0000002a,000019e8,00000000,00000036,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,000003e3,0000020f,00000041,00000036,000019e8,00000006,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00002247 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00002247 ret=01004881 0009:Call gdi32.BitBlt(000019e8,00000000,00000035,00000047,0000002b,000019d0,00000000,00000035,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000019e8,00000007,00000000,00000040,00000035,000019d0,00000007,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000019d0,00000040,0000002b,00000008,00000036,000019d0,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(000019d0,00000000,00000000,00000047,0000002b,00000314,0000035c,000001ba,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000019d0,00000000,0000002b,00000040,00000035,00000314,0000035c,000001e5,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,0000035c,000001ba,00000047,00000060,000019dc,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,0000039c,0000021a,00000047,0000002b,000019e8,00000000,00000035,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,000003a3,000001e5,00000040,00000035,000019e8,00000007,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=0000224f ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=0000224f ret=01004881 0009:Call gdi32.BitBlt(000019e8,00000000,00000036,00000047,0000002a,000019d0,00000000,00000036,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000019e8,00000006,00000000,00000041,00000036,000019d0,00000006,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000019d0,00000041,0000002a,00000007,00000037,000019d0,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(000019d0,00000000,00000000,00000047,0000002a,00000314,0000031b,00000190,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000019d0,00000000,0000002a,00000041,00000036,00000314,0000031b,000001ba,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,0000031b,00000190,00000047,00000060,000019dc,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,0000035c,000001f0,00000047,0000002a,000019e8,00000000,00000036,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000362,000001ba,00000041,00000036,000019e8,00000006,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00002257 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00002257 ret=01004881 0009:Call gdi32.BitBlt(000019e8,00000000,00000036,00000047,0000002a,000019d0,00000000,00000036,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000019e8,00000007,00000000,00000040,00000036,000019d0,00000007,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000019d0,00000040,0000002a,00000008,00000037,000019d0,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(000019d0,00000000,00000000,00000047,0000002a,00000314,000002db,00000166,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000019d0,00000000,0000002a,00000040,00000036,00000314,000002db,00000190,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000002db,00000166,00000047,00000060,000019dc,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,0000031b,000001c6,00000047,0000002a,000019e8,00000000,00000036,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000322,00000190,00000040,00000036,000019e8,00000007,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=0000225f ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=0000225f ret=01004881 0009:Call gdi32.BitBlt(000019e8,00000000,00000036,00000047,0000002a,000019d0,00000000,00000036,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000019e8,00000006,00000000,00000041,00000036,000019d0,00000006,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000019d0,00000041,0000002a,00000007,00000037,000019d0,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(000019d0,00000000,00000000,00000047,0000002a,00000314,0000029a,0000013c,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000019d0,00000000,0000002a,00000041,00000036,00000314,0000029a,00000166,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,0000029a,0000013c,00000047,00000060,000019dc,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000002db,0000019c,00000047,0000002a,000019e8,00000000,00000036,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,000002e1,00000166,00000041,00000036,000019e8,00000006,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00002267 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00002267 ret=01004881 0009:Call gdi32.BitBlt(000019e8,00000000,00000036,00000047,0000002a,000019d0,00000000,00000036,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000019e8,00000007,00000000,00000040,00000036,000019d0,00000007,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000019d0,00000040,0000002a,00000008,00000037,000019d0,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(000019d0,00000000,00000000,00000047,0000002a,00000314,0000025a,00000112,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000019d0,00000000,0000002a,00000040,00000036,00000314,0000025a,0000013c,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,0000025a,00000112,00000047,00000060,000019dc,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,0000029a,00000172,00000047,0000002a,000019e8,00000000,00000036,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,000002a1,0000013c,00000040,00000036,000019e8,00000007,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=0000226f ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=0000226f ret=01004881 0009:Call gdi32.BitBlt(000019e8,00000000,00000036,00000047,0000002a,000019d0,00000000,00000036,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000019e8,00000006,00000000,00000041,00000036,000019d0,00000006,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000019d0,00000041,0000002a,00000007,00000037,000019d0,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(000019d0,00000000,00000000,00000047,0000002a,00000314,00000219,000000e8,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000019d0,00000000,0000002a,00000041,00000036,00000314,00000219,00000112,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000219,000000e8,00000047,00000060,000019dc,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,0000025a,00000148,00000047,0000002a,000019e8,00000000,00000036,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000260,00000112,00000041,00000036,000019e8,00000006,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00002277 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00002277 ret=01004881 0009:Call gdi32.BitBlt(000019e8,00000000,00000035,00000047,0000002b,000019d0,00000000,00000035,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000019e8,00000007,00000000,00000040,00000035,000019d0,00000007,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000019d0,00000040,0000002b,00000008,00000036,000019d0,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(000019d0,00000000,00000000,00000047,0000002b,00000314,000001d9,000000bd,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000019d0,00000000,0000002b,00000040,00000035,00000314,000001d9,000000e8,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000001d9,000000bd,00000047,00000060,000019dc,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000219,0000011d,00000047,0000002b,000019e8,00000000,00000035,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000220,000000e8,00000040,00000035,000019e8,00000007,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=0000227f ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=0000227f ret=01004881 0009:Call gdi32.BitBlt(000019e8,00000000,00000036,00000047,0000002a,000019d0,00000000,00000036,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000019e8,00000006,00000000,00000041,00000036,000019d0,00000006,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000019d0,00000041,0000002a,00000007,00000037,000019d0,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(000019d0,00000000,00000000,00000047,0000002a,00000314,00000198,00000093,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000019d0,00000000,0000002a,00000041,00000036,00000314,00000198,000000bd,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000198,00000093,00000047,00000060,000019dc,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000001d9,000000f3,00000047,0000002a,000019e8,00000000,00000036,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,000001df,000000bd,00000041,00000036,000019e8,00000006,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00002287 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00002287 ret=01004881 0009:Call gdi32.BitBlt(000019e8,00000000,00000036,00000047,0000002a,000019d0,00000000,00000036,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000019e8,00000007,00000000,00000040,00000036,000019d0,00000007,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000019d0,00000040,0000002a,00000008,00000037,000019d0,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(000019d0,00000000,00000000,00000047,0000002a,00000314,00000158,00000069,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000019d0,00000000,0000002a,00000040,00000036,00000314,00000158,00000093,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000158,00000069,00000047,00000060,000019dc,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000198,000000c9,00000047,0000002a,000019e8,00000000,00000036,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000019f,00000093,00000040,00000036,000019e8,00000007,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=0000228f ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=0000228f ret=01004881 0009:Call gdi32.BitBlt(000019e8,00000000,00000040,00000047,00000020,000019d0,00000000,00000040,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000019e8,00000016,00000000,00000031,00000040,000019d0,00000016,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000019d0,00000031,00000020,00000017,00000041,000019d0,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(000019d0,00000000,00000000,00000047,00000020,00000314,00000127,00000049,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000019d0,00000000,00000020,00000031,00000040,00000314,00000127,00000069,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000127,00000049,00000047,00000060,000019dc,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000158,000000a9,00000047,00000020,000019e8,00000000,00000040,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000016e,00000069,00000031,00000040,000019e8,00000016,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call gdi32.SelectObject(000019d0,0000006c) ret=01005316 0009:Ret gdi32.SelectObject() retval=000019f4 ret=01005316 0009:Call gdi32.SelectObject(000019dc,0000006c) ret=01005324 0009:Ret gdi32.SelectObject() retval=000019f8 ret=01005324 0009:Call gdi32.SelectObject(000019e8,0000006c) ret=01005332 0009:Ret gdi32.SelectObject() retval=000019fc ret=01005332 0009:Call gdi32.DeleteObject(000019f4) ret=01005340 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005340 0009:Call gdi32.DeleteObject(000019f8) ret=01005348 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005348 0009:Call gdi32.DeleteObject(000019fc) ret=01005350 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005350 0009:Call gdi32.DeleteDC(000019d0) ret=0100535e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100535e 0009:Call gdi32.DeleteDC(000019dc) ret=01005366 0009:Ret gdi32.DeleteDC() retval=00000001 ret=01005366 0009:Call gdi32.DeleteDC(000019e8) ret=0100536e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100536e 0009:Call user32.ReleaseDC(00010030,00000314) ret=0100537c 0009:Ret user32.ReleaseDC() retval=00000001 ret=0100537c 0009:Call user32.InvalidateRect(00010030,0033f618,00000000) ret=0100538a 0009:Ret user32.InvalidateRect() retval=00000001 ret=0100538a 0009:Call KERNEL32.GetModuleHandleW(00000000) ret=01006a97 0009:Ret KERNEL32.GetModuleHandleW() retval=01000000 ret=01006a97 0009:Call winmm.PlaySoundW(0000007c,01000000,00040007) ret=01006aa0 0009:Call ntdll.RtlAllocateHeap(00110000,00000008,0000001c) ret=7e7356bc 0009:Ret ntdll.RtlAllocateHeap() retval=00148bb0 ret=7e7356bc 0009:Call KERNEL32.ResetEvent(00000040) ret=7e735513 0009:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e735513 0009:Call KERNEL32.SetEvent(00000038) ret=7e735520 0009:Ret KERNEL32.SetEvent() retval=00000001 ret=7e735520 0009:Call msacm32.drv.wodMessage(0000ffff,0000000c,0014cb28,00000000,00000000) ret=7e728e1f 0009:Call winmm.waveOutReset(00008001) ret=7e0c0180 0009:Call winealsa.drv.wodMessage(00000000,0000000c,7e72ab2b,00000000,00000000) ret=7e728e1f 0009:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1b2580 0009:Ret KERNEL32.CreateEventW() retval=00000070 ret=7e1b2580 0009:Call KERNEL32.WaitForSingleObject(00000070,ffffffff) ret=7e1b2635 0031:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bd,0014cb28,0014d970,00000000) ret=7e1c4643 0031:Call KERNEL32.IsBadReadPtr(0014cb28,0000002c) ret=7e0bdbc9 0031:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 0031:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bd,008ceaa4,0014d970,00000000) ret=7e0bdf33 0031:Call KERNEL32.SetEvent(00000068) ret=7e7341f6 0031:Ret KERNEL32.SetEvent() retval=00000001 ret=7e7341f6 0031:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 0031:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 0031:Call KERNEL32.SetEvent(00000070) ret=7e1c4f3d 0031:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c4f3d 0030:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e73429b 0030:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 0030:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 0030:Call msacm32.drv.wodMessage(0000ffff,0000000c,0014cb28,00000000,00000000) ret=7e728e1f 0030:Call winmm.waveOutReset(00008001) ret=7e0c0180 0030:Call winealsa.drv.wodMessage(00000000,0000000c,7e72ab2b,00000000,00000000) ret=7e728e1f 0030:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1b2580 0030:Ret KERNEL32.CreateEventW() retval=000000a4 ret=7e1b2580 0030:Call KERNEL32.WaitForSingleObject(000000a4,ffffffff) ret=7e1b2635 0031:Call KERNEL32.SetEvent(000000a4) ret=7e1c4f3d 0031:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c4f3d 0030:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1b2635 0030:Call KERNEL32.CloseHandle(000000a4) ret=7e1b2640 0030:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1b2640 0030:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0030:Ret winmm.waveOutReset() retval=00000000 ret=7e0c0180 0030:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0030:Call msacm32.drv.wodMessage(0000ffff,00000008,0014cb28,0014d970,00000020) ret=7e728e1f 0030:Call winmm.waveOutUnprepareHeader(00008001,0014d970,00000020) ret=7e0c00b6 0030:Call winealsa.drv.wodMessage(00000000,00000008,7e72ab2b,0014d970,00000020) ret=7e728e1f 0030:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 0030:Ret winmm.waveOutUnprepareHeader() retval=00000000 ret=7e0c00b6 0030:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0030:Call msacm32.drv.wodMessage(0000ffff,00000008,0014cb28,0014d990,00000020) ret=7e728e1f 0030:Call winmm.waveOutUnprepareHeader(00008001,0014d990,00000020) ret=7e0c00b6 0030:Call winealsa.drv.wodMessage(00000000,00000008,7e72ab2b,0014d990,00000020) ret=7e728e1f 0030:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 0030:Ret winmm.waveOutUnprepareHeader() retval=00000000 ret=7e0c00b6 0030:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0030:Call KERNEL32.CloseHandle(00000068) ret=7e7349fd 0030:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e7349fd 0030:Call ntdll.RtlFreeHeap(00110000,00000000,0014d970) ret=7e734a23 0030:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e734a23 0030:Call ntdll.RtlFreeHeap(00110000,00000000,00148cb8) ret=7e734a49 0030:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e734a49 0030:Call msacm32.drv.wodMessage(0000ffff,00000006,0014cb28,00000000,00000000) ret=7e728e1f 0030:Call winmm.waveOutClose(00008001) ret=7e0c01a5 0030:Call winealsa.drv.wodMessage(00000000,00000006,7e72ab2b,00000000,00000000) ret=7e728e1f 0030:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1b2580 0030:Ret KERNEL32.CreateEventW() retval=00000068 ret=7e1b2580 0030:Call KERNEL32.WaitForSingleObject(00000068,ffffffff) ret=7e1b2635 0031:Call KERNEL32.SetEvent(00000068) ret=7e1c4ea1 0031:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c4ea1 0031:Call KERNEL32.ExitThread(00000000) ret=7e1c4eb0 0031:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) 0031:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0031:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) 0031:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0031:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) 0031:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0031:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) 0031:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) retval=1 0031:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) 0031:Call KERNEL32.TlsGetValue(00000000) ret=7e3f4071 0031:Ret KERNEL32.TlsGetValue() retval=00000000 ret=7e3f4071 0031:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0031:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) 0031:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0030:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1b2635 0030:Call KERNEL32.CloseHandle(00000068) ret=7e1b2640 0030:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1b2640 0030:Call ntdll.RtlFreeHeap(00110000,00000000,0014c7d0) ret=7e1b24dc 0030:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e1b24dc 0030:Call ntdll.RtlDeleteCriticalSection(0013cefc) ret=7e1b24fb 0030:Ret ntdll.RtlDeleteCriticalSection() retval=00000000 ret=7e1b24fb 0030:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bc,0014cb28,00000000,00000000) ret=7e1c4643 0030:Call KERNEL32.IsBadReadPtr(0014cb28,0000002c) ret=7e0bdbc9 0030:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 0030:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bc,008ceaa4,00000000,00000000) ret=7e0bdf33 0030:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 0030:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 0030:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0030:Call ntdll.RtlFreeHeap(00110000,00000000,0014cb60) ret=7e72ae0b 0030:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e72ae0b 0030:Ret winmm.waveOutClose() retval=00000000 ret=7e0c01a5 0030:Call ntdll.RtlFreeHeap(00110000,00000000,0014cb28) ret=7e0c01f7 0030:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e0c01f7 0030:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0030:Call ntdll.RtlFreeHeap(00110000,00000000,0014cb00) ret=7e72ae0b 0030:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e72ae0b 0009:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1b2635 0009:Call KERNEL32.CloseHandle(00000070) ret=7e1b2640 0009:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1b2640 0009:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0009:Ret winmm.waveOutReset() retval=00000000 ret=7e0c0180 0009:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0009:Call KERNEL32.WaitForSingleObject(00000040,ffffffff) ret=7e73555a 0030:Call ntdll.RtlFreeHeap(00110000,00000000,00148c28) ret=7e731f79 0030:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e731f79 0030:Call KERNEL32.SetEvent(00000040) ret=7e7343a0 0030:Ret KERNEL32.SetEvent() retval=00000001 ret=7e7343a0 0030:Call KERNEL32.CloseHandle(00000064) ret=7e734340 0030:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e734340 0030:Call ntdll.RtlFreeHeap(00110000,00000000,0014cad8) ret=7e734360 0030:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e734360 0030:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) 0030:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0030:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) 0030:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0030:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) 0030:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0030:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) 0030:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) retval=1 0030:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) 0030:Call KERNEL32.TlsGetValue(00000000) ret=7e3f4071 0030:Ret KERNEL32.TlsGetValue() retval=00000000 ret=7e3f4071 0030:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0030:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) 0030:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0009:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e73555a 0009:Call KERNEL32.ResetEvent(00000038) ret=7e735572 0009:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e735572 0009:Call KERNEL32.CreateThread(00000000,00000000,7e7348a0,00148bb0,00000000,0033f598) ret=7e73560c 0032:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) 0032:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0032:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) 0032:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0032:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) 0032:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) retval=1 0032:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) 0032:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0032:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) 0032:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0032:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) 0032:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0032:Starting thread proc 0x7e7348a0 (arg=0x148bb0) 0032:Call KERNEL32.FindResourceW(01000000,0000007c,7e741bde L"WAVE") ret=7e734ca3 0032:Ret KERNEL32.FindResourceW() retval=01014c40 ret=7e734ca3 0032:Call KERNEL32.LoadResource(01000000,01014c40) ret=7e734cb9 0032:Ret KERNEL32.LoadResource() retval=0104d668 ret=7e734cb9 0032:Call KERNEL32.LockResource(0104d668) ret=7e734cce 0032:Ret KERNEL32.LockResource() retval=0104d668 ret=7e734cce 0032:Call KERNEL32.FreeResource(0104d668) ret=7e734ce9 0032:Ret KERNEL32.FreeResource() retval=00000000 ret=7e734ce9 0032:Call ntdll.RtlAllocateHeap(00110000,00000008,0000005c) ret=7e733960 0032:Ret ntdll.RtlAllocateHeap() retval=00148c28 ret=7e733960 0032:Call KERNEL32.GetFileSize(ffffffff,00000000) ret=7e733ab9 0032:Ret KERNEL32.GetFileSize() retval=ffffffff ret=7e733ab9 0032:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7e733cf0 0032:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e733cf0 0032:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7e734e1c 0032:Ret ntdll.RtlAllocateHeap() retval=00148cb8 ret=7e734e1c 0032:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e734f1f 0032:Ret KERNEL32.CreateEventW() retval=00000068 ret=7e734f1f 0032:Call ntdll.RtlAllocateHeap(00110000,00000008,0000001c) ret=7e72abbe 0032:Ret ntdll.RtlAllocateHeap() retval=00148bd8 ret=7e72abbe 0032:Call msacm32.drv.wodMessage(0000ffff,00000005,007ce918,007ce970,00030000) ret=7e728e1f 0032:Call ntdll.RtlAllocateHeap(00110000,00000000,0000002c) ret=7e0bfd8c 0032:Ret ntdll.RtlAllocateHeap() retval=00148b18 ret=7e0bfd8c 0032:Call winmm.waveOutGetNumDevs() ret=7e0bfdb5 0032:Ret winmm.waveOutGetNumDevs() retval=00000002 ret=7e0bfdb5 0032:Call winmm.waveOutOpen(00148b20,00000000,00148cb8,7e0bde60,00148b18,00030008) ret=7e0c0313 0032:Call ntdll.RtlAllocateHeap(00110000,00000008,0000001c) ret=7e72abbe 0032:Ret ntdll.RtlAllocateHeap() retval=00148b50 ret=7e72abbe 0032:Call winealsa.drv.wodMessage(00000000,00000005,007ce5b8,007ce610,00030008) ret=7e728e1f 0032:Call ntdll.RtlAllocateHeap(00110000,00000008,00000068) ret=7e1c6c82 0032:Ret ntdll.RtlAllocateHeap() retval=0014bef8 ret=7e1c6c82 0032:Call ntdll.RtlAllocateHeap(00110000,00000008,00000300) ret=7e1b2459 0032:Ret ntdll.RtlAllocateHeap() retval=0014c7d0 ret=7e1b2459 0032:Call KERNEL32.InitializeCriticalSection(0013cefc) ret=7e1b2469 0032:Ret KERNEL32.InitializeCriticalSection() retval=00000001 ret=7e1b2469 0032:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1c73ab 0009:Ret KERNEL32.CreateThread() retval=00000064 ret=7e73560c 0009:Call KERNEL32.SetThreadPriority(00000064,0000000f) ret=7e73562d 0009:Ret KERNEL32.SetThreadPriority() retval=00000001 ret=7e73562d 0009:Ret winmm.PlaySoundW() retval=00000001 ret=01006aa0 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,0000000c) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c5808 ret=0100a7d2 0009:Call user32.GetClientRect(00010030,0033f608) ret=01005145 0009:Ret user32.GetClientRect() retval=00000001 ret=01005145 0009:Call user32.GetDC(00010030) ret=010051ad 0009:Ret user32.GetDC() retval=00000314 ret=010051ad 0009:Call gdi32.CreateCompatibleDC(00000314) ret=010051bc 0009:Ret gdi32.CreateCompatibleDC() retval=00001a5c ret=010051bc 0009:Call gdi32.CreateCompatibleDC(00000314) ret=010051ca 0009:Ret gdi32.CreateCompatibleDC() retval=00001a68 ret=010051ca 0009:Call gdi32.CreateCompatibleDC(00000314) ret=010051d8 0009:Ret gdi32.CreateCompatibleDC() retval=00001a74 ret=010051d8 0009:Call gdi32.CreateCompatibleBitmap(00000314,00000047,00000060) ret=010051f8 0009:Ret gdi32.CreateCompatibleBitmap() retval=00001a80 ret=010051f8 0009:Call gdi32.CreateCompatibleBitmap(00000314,00000047,00000060) ret=01005212 0009:Ret gdi32.CreateCompatibleBitmap() retval=00001a84 ret=01005212 0009:Call gdi32.CreateCompatibleBitmap(00000314,00000047,00000060) ret=0100522c 0009:Ret gdi32.CreateCompatibleBitmap() retval=00001a88 ret=0100522c 0009:Call gdi32.SelectObject(00001a5c,00001a80) ret=01005246 0009:Ret gdi32.SelectObject() retval=0000006c ret=01005246 0009:Call gdi32.SelectObject(00001a68,00001a84) ret=0100525a 0009:Ret gdi32.SelectObject() retval=0000006c ret=0100525a 0009:Call gdi32.SelectObject(00001a74,00001a88) ret=0100526e 0009:Ret gdi32.SelectObject() retval=0000006c ret=0100526e 0009:Call user32.LoadBitmapW(01000000,0033f5a0 L"CARD40") ret=010028ff 0032:Ret KERNEL32.CreateEventW() retval=00000070 ret=7e1c73ab 0032:Call KERNEL32.CreateThread(00000000,00000000,7e1c5570,00000000,00000000,0013cedc) ret=7e1c73ef 0033:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) 0033:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0033:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) 0033:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0033:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) 0033:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) retval=1 0033:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) 0033:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0033:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) 0033:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0033:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) 0033:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0033:Starting thread proc 0x7e1c5570 (arg=(nil)) 0033:Call KERNEL32.SetEvent(00000070) ret=7e1c55aa 0033:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c55aa 0032:Ret KERNEL32.CreateThread() retval=000000a4 ret=7e1c73ef 0032:Call KERNEL32.SetThreadPriority(000000a4,0000000f) ret=7e1c7413 0032:Ret KERNEL32.SetThreadPriority() retval=00000001 ret=7e1c7413 0032:Call KERNEL32.WaitForSingleObject(00000070,ffffffff) ret=7e1c742f 0032:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1c742f 0032:Call KERNEL32.CloseHandle(00000070) ret=7e1c7443 0032:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1c7443 0032:Call ntdll.RtlFreeHeap(00110000,00000000,0014bef8) ret=7e1c7479 0032:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e1c7479 0032:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bb,00148b18,00000000,00000000) ret=7e1c4643 0032:Call KERNEL32.IsBadReadPtr(00148b18,0000002c) ret=7e0bdbc9 0032:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 0032:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bb,007ceaa4,00000000,00000000) ret=7e0bdf33 0032:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 0032:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 0032:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0032:Ret winmm.waveOutOpen() retval=00000000 ret=7e0c0313 0032:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0032:Call ntdll.RtlAllocateHeap(00110000,00000000,000039ac) ret=7e73520d 0032:Ret ntdll.RtlAllocateHeap() retval=0014d3a0 ret=7e73520d 0032:Call msacm32.drv.wodMessage(0000ffff,00000007,00148b18,0014d3a0,00000020) ret=7e728e1f 0032:Call winmm.waveOutPrepareHeader(00008001,0014d3a0,00000020) ret=7e0c09d8 0032:Call winealsa.drv.wodMessage(00000000,00000007,7e72ab2b,0014d3a0,00000020) ret=7e728e1f 0032:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 0032:Ret winmm.waveOutPrepareHeader() retval=00000000 ret=7e0c09d8 0032:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0032:Call msacm32.drv.wodMessage(0000ffff,00000007,00148b18,0014d3c0,00000020) ret=7e728e1f 0032:Call winmm.waveOutPrepareHeader(00008001,0014d3c0,00000020) ret=7e0c09d8 0032:Call winealsa.drv.wodMessage(00000000,00000007,7e72ab2b,0014d3c0,00000020) ret=7e728e1f 0032:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 0032:Ret winmm.waveOutPrepareHeader() retval=00000000 ret=7e0c09d8 0032:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0032:Call KERNEL32.WaitForSingleObject(00000038,00000000) ret=7e735343 0032:Ret KERNEL32.WaitForSingleObject() retval=00000102 ret=7e735343 0032:Call msacm32.drv.wodMessage(0000ffff,00000009,00148b18,0014d3a0,00000020) ret=7e728e1f 0032:Call winmm.waveOutWrite(00008001,0014d3a0,00000020) ret=7e0c09b5 0032:Call winealsa.drv.wodMessage(00000000,00000009,7e72ab2b,0014d3a0,00000020) ret=7e728e1f 0032:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0032:Ret winmm.waveOutWrite() retval=00000000 ret=7e0c09b5 0032:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0032:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 0032:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 0032:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 0032:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 0032:Call KERNEL32.WaitForSingleObject(00000068,ffffffff) ret=7e73429b 0009:Ret user32.LoadBitmapW() retval=00001a98 ret=010028ff 0009:Call gdi32.CreateCompatibleDC(00001a68) ret=01002909 0009:Ret gdi32.CreateCompatibleDC() retval=00001aac ret=01002909 0009:Call gdi32.SelectObject(00001aac,00001a98) ret=01002917 0009:Ret gdi32.SelectObject() retval=0000006c ret=01002917 0009:Call gdi32.BitBlt(00001a68,00000000,00000000,00000047,00000060,00001aac,00000000,00000000,00cc0020) ret=01002938 0009:Ret gdi32.BitBlt() retval=00000001 ret=01002938 0009:Call gdi32.SelectObject(00001aac,0000006c) ret=0100293e 0009:Ret gdi32.SelectObject() retval=00001a98 ret=0100293e 0009:Call gdi32.DeleteObject(00001a98) ret=01002947 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01002947 0009:Call gdi32.DeleteDC(00001aac) ret=0100294e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100294e 0009:Call gdi32.SetPixel(00001a68,00000000,00000000,00008000) ret=01002969 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002969 0009:Call gdi32.SetPixel(00001a68,00000001,00000000,00008000) ret=01002976 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002976 0009:Call gdi32.SetPixel(00001a68,00000000,00000001,00008000) ret=01002982 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002982 0009:Call gdi32.SetPixel(00001a68,00000046,00000000,00008000) ret=0100298f 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100298f 0009:Call gdi32.SetPixel(00001a68,00000045,00000000,00008000) ret=0100299c 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100299c 0009:Call gdi32.SetPixel(00001a68,00000046,00000001,00008000) ret=010029ab 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ab 0009:Call gdi32.SetPixel(00001a68,00000000,0000005f,00008000) ret=010029bf 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029bf 0009:Call gdi32.SetPixel(00001a68,00000001,0000005f,00008000) ret=010029d0 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029d0 0009:Call gdi32.SetPixel(00001a68,00000000,0000005e,00008000) ret=010029de 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029de 0009:Call gdi32.SetPixel(00001a68,00000046,0000005f,00008000) ret=010029ef 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ef 0009:Call gdi32.SetPixel(00001a68,00000045,0000005f,00008000) ret=01002a00 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a00 0009:Call gdi32.SetPixel(00001a68,00000046,0000005e,00008000) ret=01002a11 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a11 0009:Call user32.LoadBitmapW(01000000,010012c8 L"CARDBACK") ret=010028ff 0009:Ret user32.LoadBitmapW() retval=00001ac4 ret=010028ff 0009:Call gdi32.CreateCompatibleDC(00001a5c) ret=01002909 0009:Ret gdi32.CreateCompatibleDC() retval=00001ad8 ret=01002909 0009:Call gdi32.SelectObject(00001ad8,00001ac4) ret=01002917 0009:Ret gdi32.SelectObject() retval=0000006c ret=01002917 0009:Call gdi32.BitBlt(00001a5c,00000000,00000000,00000047,00000060,00001ad8,00000000,00000000,00cc0020) ret=01002938 0009:Ret gdi32.BitBlt() retval=00000001 ret=01002938 0009:Call gdi32.SelectObject(00001ad8,0000006c) ret=0100293e 0009:Ret gdi32.SelectObject() retval=00001ac4 ret=0100293e 0009:Call gdi32.DeleteObject(00001ac4) ret=01002947 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01002947 0009:Call gdi32.DeleteDC(00001ad8) ret=0100294e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100294e 0009:Call gdi32.SetPixel(00001a5c,00000000,00000000,00008000) ret=01002969 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002969 0009:Call gdi32.SetPixel(00001a5c,00000001,00000000,00008000) ret=01002976 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002976 0009:Call gdi32.SetPixel(00001a5c,00000000,00000001,00008000) ret=01002982 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002982 0009:Call gdi32.SetPixel(00001a5c,00000046,00000000,00008000) ret=0100298f 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100298f 0009:Call gdi32.SetPixel(00001a5c,00000045,00000000,00008000) ret=0100299c 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100299c 0009:Call gdi32.SetPixel(00001a5c,00000046,00000001,00008000) ret=010029ab 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ab 0009:Call gdi32.SetPixel(00001a5c,00000000,0000005f,00008000) ret=010029bf 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029bf 0009:Call gdi32.SetPixel(00001a5c,00000001,0000005f,00008000) ret=010029d0 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029d0 0009:Call gdi32.SetPixel(00001a5c,00000000,0000005e,00008000) ret=010029de 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029de 0009:Call gdi32.SetPixel(00001a5c,00000046,0000005f,00008000) ret=010029ef 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ef 0009:Call gdi32.SetPixel(00001a5c,00000045,0000005f,00008000) ret=01002a00 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a00 0009:Call gdi32.SetPixel(00001a5c,00000046,0000005e,00008000) ret=01002a11 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a11 0009:Call winmm.timeGetTime() ret=010047d1 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000022c4 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000022c4 ret=010047d1 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000022c4 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000022c4 ret=01004881 0009:Call gdi32.BitBlt(00001a5c,00000000,00000000,00000048,00000061,00001a5c,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00000314,0000044d,00000258,00000047,00000060,00001a68,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000022cb ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000022cb ret=01004881 0009:Call gdi32.BitBlt(00001a74,00000000,0000003c,00000047,00000024,00001a5c,00000000,0000003c,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001a74,00000018,00000000,0000002f,0000003c,00001a5c,00000018,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001a5c,0000002f,00000024,00000019,0000003d,00001a5c,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001a5c,00000000,00000000,00000047,00000024,00000314,0000041e,00000234,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001a5c,00000000,00000024,0000002f,0000003c,00000314,0000041e,00000258,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,0000041e,00000234,00000047,00000060,00001a68,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,0000044d,00000294,00000047,00000024,00001a74,00000000,0000003c,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000465,00000258,0000002f,0000003c,00001a74,00000018,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000022d3 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000022d3 ret=01004881 0009:Call gdi32.BitBlt(00001a74,00000000,00000035,00000047,0000002b,00001a5c,00000000,00000035,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001a74,00000010,00000000,00000037,00000035,00001a5c,00000010,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001a5c,00000037,0000002b,00000011,00000036,00001a5c,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001a5c,00000000,00000000,00000047,0000002b,00000314,000003e7,00000209,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001a5c,00000000,0000002b,00000037,00000035,00000314,000003e7,00000234,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000003e7,00000209,00000047,00000060,00001a68,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,0000041e,00000269,00000047,0000002b,00001a74,00000000,00000035,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000042e,00000234,00000037,00000035,00001a74,00000010,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000022db ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000022db ret=01004881 0009:Call gdi32.BitBlt(00001a74,00000000,00000036,00000047,0000002a,00001a5c,00000000,00000036,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001a74,00000010,00000000,00000037,00000036,00001a5c,00000010,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001a5c,00000037,0000002a,00000011,00000037,00001a5c,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001a5c,00000000,00000000,00000047,0000002a,00000314,000003b0,000001df,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001a5c,00000000,0000002a,00000037,00000036,00000314,000003b0,00000209,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000003b0,000001df,00000047,00000060,00001a68,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000003e7,0000023f,00000047,0000002a,00001a74,00000000,00000036,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,000003f7,00000209,00000037,00000036,00001a74,00000010,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000022e3 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000022e3 ret=01004881 0009:Call gdi32.BitBlt(00001a74,00000000,00000036,00000047,0000002a,00001a5c,00000000,00000036,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001a74,00000010,00000000,00000037,00000036,00001a5c,00000010,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001a5c,00000037,0000002a,00000011,00000037,00001a5c,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001a5c,00000000,00000000,00000047,0000002a,00000314,00000379,000001b5,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001a5c,00000000,0000002a,00000037,00000036,00000314,00000379,000001df,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000379,000001b5,00000047,00000060,00001a68,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000003b0,00000215,00000047,0000002a,00001a74,00000000,00000036,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,000003c0,000001df,00000037,00000036,00001a74,00000010,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000022eb ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000022eb ret=01004881 0009:Call gdi32.BitBlt(00001a74,00000000,00000036,00000047,0000002a,00001a5c,00000000,00000036,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001a74,00000011,00000000,00000036,00000036,00001a5c,00000011,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001a5c,00000036,0000002a,00000012,00000037,00001a5c,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001a5c,00000000,00000000,00000047,0000002a,00000314,00000343,0000018b,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001a5c,00000000,0000002a,00000036,00000036,00000314,00000343,000001b5,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000343,0000018b,00000047,00000060,00001a68,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000379,000001eb,00000047,0000002a,00001a74,00000000,00000036,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000038a,000001b5,00000036,00000036,00001a74,00000011,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000022f3 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000022f3 ret=01004881 0009:Call gdi32.BitBlt(00001a74,00000000,00000036,00000047,0000002a,00001a5c,00000000,00000036,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001a74,00000010,00000000,00000037,00000036,00001a5c,00000010,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001a5c,00000037,0000002a,00000011,00000037,00001a5c,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001a5c,00000000,00000000,00000047,0000002a,00000314,0000030c,00000161,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001a5c,00000000,0000002a,00000037,00000036,00000314,0000030c,0000018b,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,0000030c,00000161,00000047,00000060,00001a68,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000343,000001c1,00000047,0000002a,00001a74,00000000,00000036,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000353,0000018b,00000037,00000036,00001a74,00000010,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000022fb ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000022fb ret=01004881 0009:Call gdi32.BitBlt(00001a74,00000000,00000036,00000047,0000002a,00001a5c,00000000,00000036,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001a74,00000010,00000000,00000037,00000036,00001a5c,00000010,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001a5c,00000037,0000002a,00000011,00000037,00001a5c,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001a5c,00000000,00000000,00000047,0000002a,00000314,000002d5,00000137,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001a5c,00000000,0000002a,00000037,00000036,00000314,000002d5,00000161,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000002d5,00000137,00000047,00000060,00001a68,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,0000030c,00000197,00000047,0000002a,00001a74,00000000,00000036,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000031c,00000161,00000037,00000036,00001a74,00000010,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00002303 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00002303 ret=01004881 0009:Call gdi32.BitBlt(00001a74,00000000,00000035,00000047,0000002b,00001a5c,00000000,00000035,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001a74,00000011,00000000,00000036,00000035,00001a5c,00000011,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001a5c,00000036,0000002b,00000012,00000036,00001a5c,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001a5c,00000000,00000000,00000047,0000002b,00000314,0000029f,0000010c,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001a5c,00000000,0000002b,00000036,00000035,00000314,0000029f,00000137,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,0000029f,0000010c,00000047,00000060,00001a68,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000002d5,0000016c,00000047,0000002b,00001a74,00000000,00000035,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,000002e6,00000137,00000036,00000035,00001a74,00000011,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=0000230b ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=0000230b ret=01004881 0009:Call gdi32.BitBlt(00001a74,00000000,00000036,00000047,0000002a,00001a5c,00000000,00000036,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001a74,00000010,00000000,00000037,00000036,00001a5c,00000010,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001a5c,00000037,0000002a,00000011,00000037,00001a5c,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001a5c,00000000,00000000,00000047,0000002a,00000314,00000268,000000e2,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001a5c,00000000,0000002a,00000037,00000036,00000314,00000268,0000010c,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000268,000000e2,00000047,00000060,00001a68,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,0000029f,00000142,00000047,0000002a,00001a74,00000000,00000036,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,000002af,0000010c,00000037,00000036,00001a74,00000010,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00002313 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00002313 ret=01004881 0009:Call gdi32.BitBlt(00001a74,00000000,00000036,00000047,0000002a,00001a5c,00000000,00000036,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001a74,00000010,00000000,00000037,00000036,00001a5c,00000010,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001a5c,00000037,0000002a,00000011,00000037,00001a5c,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001a5c,00000000,00000000,00000047,0000002a,00000314,00000231,000000b8,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001a5c,00000000,0000002a,00000037,00000036,00000314,00000231,000000e2,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000231,000000b8,00000047,00000060,00001a68,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000268,00000118,00000047,0000002a,00001a74,00000000,00000036,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000278,000000e2,00000037,00000036,00001a74,00000010,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=0000231b ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=0000231b ret=01004881 0009:Call gdi32.BitBlt(00001a74,00000000,00000036,00000047,0000002a,00001a5c,00000000,00000036,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001a74,00000010,00000000,00000037,00000036,00001a5c,00000010,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001a5c,00000037,0000002a,00000011,00000037,00001a5c,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001a5c,00000000,00000000,00000047,0000002a,00000314,000001fa,0000008e,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001a5c,00000000,0000002a,00000037,00000036,00000314,000001fa,000000b8,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000001fa,0000008e,00000047,00000060,00001a68,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000231,000000ee,00000047,0000002a,00001a74,00000000,00000036,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000241,000000b8,00000037,00000036,00001a74,00000010,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00002323 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00002323 ret=01004881 0009:Call gdi32.BitBlt(00001a74,00000000,00000036,00000047,0000002a,00001a5c,00000000,00000036,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001a74,00000011,00000000,00000036,00000036,00001a5c,00000011,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001a5c,00000036,0000002a,00000012,00000037,00001a5c,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001a5c,00000000,00000000,00000047,0000002a,00000314,000001c4,00000064,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001a5c,00000000,0000002a,00000036,00000036,00000314,000001c4,0000008e,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000001c4,00000064,00000047,00000060,00001a68,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000001fa,000000c4,00000047,0000002a,00001a74,00000000,00000036,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000020b,0000008e,00000036,00000036,00001a74,00000011,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=0000232b ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=0000232b ret=01004881 0009:Call gdi32.BitBlt(00001a74,00000000,00000045,00000047,0000001b,00001a5c,00000000,00000045,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001a74,00000024,00000000,00000023,00000045,00001a5c,00000024,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001a5c,00000023,0000001b,00000025,00000046,00001a5c,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001a5c,00000000,00000000,00000047,0000001b,00000314,000001a1,00000049,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001a5c,00000000,0000001b,00000023,00000045,00000314,000001a1,00000064,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000001a1,00000049,00000047,00000060,00001a68,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000001c4,000000a9,00000047,0000001b,00001a74,00000000,00000045,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,000001e8,00000064,00000023,00000045,00001a74,00000024,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call gdi32.SelectObject(00001a5c,0000006c) ret=01005316 0009:Ret gdi32.SelectObject() retval=00001a80 ret=01005316 0009:Call gdi32.SelectObject(00001a68,0000006c) ret=01005324 0009:Ret gdi32.SelectObject() retval=00001a84 ret=01005324 0009:Call gdi32.SelectObject(00001a74,0000006c) ret=01005332 0009:Ret gdi32.SelectObject() retval=00001a88 ret=01005332 0009:Call gdi32.DeleteObject(00001a80) ret=01005340 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005340 0009:Call gdi32.DeleteObject(00001a84) ret=01005348 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005348 0009:Call gdi32.DeleteObject(00001a88) ret=01005350 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005350 0009:Call gdi32.DeleteDC(00001a5c) ret=0100535e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100535e 0009:Call gdi32.DeleteDC(00001a68) ret=01005366 0009:Ret gdi32.DeleteDC() retval=00000001 ret=01005366 0009:Call gdi32.DeleteDC(00001a74) ret=0100536e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100536e 0009:Call user32.ReleaseDC(00010030,00000314) ret=0100537c 0009:Ret user32.ReleaseDC() retval=00000001 ret=0100537c 0009:Call user32.InvalidateRect(00010030,0033f618,00000000) ret=0100538a 0009:Ret user32.InvalidateRect() retval=00000001 ret=0100538a 0009:Call KERNEL32.GetModuleHandleW(00000000) ret=01006a97 0009:Ret KERNEL32.GetModuleHandleW() retval=01000000 ret=01006a97 0009:Call winmm.PlaySoundW(0000007c,01000000,00040007) ret=01006aa0 0009:Call ntdll.RtlAllocateHeap(00110000,00000008,0000001c) ret=7e7356bc 0009:Ret ntdll.RtlAllocateHeap() retval=0014cad8 ret=7e7356bc 0009:Call KERNEL32.ResetEvent(00000040) ret=7e735513 0009:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e735513 0009:Call KERNEL32.SetEvent(00000038) ret=7e735520 0009:Ret KERNEL32.SetEvent() retval=00000001 ret=7e735520 0009:Call msacm32.drv.wodMessage(0000ffff,0000000c,00148b18,00000000,00000000) ret=7e728e1f 0009:Call winmm.waveOutReset(00008001) ret=7e0c0180 0009:Call winealsa.drv.wodMessage(00000000,0000000c,7e72ab2b,00000000,00000000) ret=7e728e1f 0009:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1b2580 0009:Ret KERNEL32.CreateEventW() retval=00000070 ret=7e1b2580 0009:Call KERNEL32.WaitForSingleObject(00000070,ffffffff) ret=7e1b2635 0033:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bd,00148b18,0014d3a0,00000000) ret=7e1c4643 0033:Call KERNEL32.IsBadReadPtr(00148b18,0000002c) ret=7e0bdbc9 0033:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 0033:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bd,007ceaa4,0014d3a0,00000000) ret=7e0bdf33 0033:Call KERNEL32.SetEvent(00000068) ret=7e7341f6 0033:Ret KERNEL32.SetEvent() retval=00000001 ret=7e7341f6 0033:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 0033:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 0033:Call KERNEL32.SetEvent(00000070) ret=7e1c4f3d 0033:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c4f3d 0032:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e73429b 0032:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 0032:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 0032:Call msacm32.drv.wodMessage(0000ffff,0000000c,00148b18,00000000,00000000) ret=7e728e1f 0032:Call winmm.waveOutReset(00008001) ret=7e0c0180 0032:Call winealsa.drv.wodMessage(00000000,0000000c,7e72ab2b,00000000,00000000) ret=7e728e1f 0032:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1b2580 0032:Ret KERNEL32.CreateEventW() retval=000000a8 ret=7e1b2580 0032:Call KERNEL32.WaitForSingleObject(000000a8,ffffffff) ret=7e1b2635 0033:Call KERNEL32.SetEvent(000000a8) ret=7e1c4f3d 0033:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c4f3d 0032:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1b2635 0032:Call KERNEL32.CloseHandle(000000a8) ret=7e1b2640 0032:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1b2640 0032:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0032:Ret winmm.waveOutReset() retval=00000000 ret=7e0c0180 0032:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0032:Call msacm32.drv.wodMessage(0000ffff,00000008,00148b18,0014d3a0,00000020) ret=7e728e1f 0032:Call winmm.waveOutUnprepareHeader(00008001,0014d3a0,00000020) ret=7e0c00b6 0032:Call winealsa.drv.wodMessage(00000000,00000008,7e72ab2b,0014d3a0,00000020) ret=7e728e1f 0032:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 0032:Ret winmm.waveOutUnprepareHeader() retval=00000000 ret=7e0c00b6 0032:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0032:Call msacm32.drv.wodMessage(0000ffff,00000008,00148b18,0014d3c0,00000020) ret=7e728e1f 0032:Call winmm.waveOutUnprepareHeader(00008001,0014d3c0,00000020) ret=7e0c00b6 0032:Call winealsa.drv.wodMessage(00000000,00000008,7e72ab2b,0014d3c0,00000020) ret=7e728e1f 0032:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 0032:Ret winmm.waveOutUnprepareHeader() retval=00000000 ret=7e0c00b6 0032:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0032:Call KERNEL32.CloseHandle(00000068) ret=7e7349fd 0032:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e7349fd 0032:Call ntdll.RtlFreeHeap(00110000,00000000,0014d3a0) ret=7e734a23 0032:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e734a23 0032:Call ntdll.RtlFreeHeap(00110000,00000000,00148cb8) ret=7e734a49 0032:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e734a49 0032:Call msacm32.drv.wodMessage(0000ffff,00000006,00148b18,00000000,00000000) ret=7e728e1f 0032:Call winmm.waveOutClose(00008001) ret=7e0c01a5 0032:Call winealsa.drv.wodMessage(00000000,00000006,7e72ab2b,00000000,00000000) ret=7e728e1f 0032:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1b2580 0032:Ret KERNEL32.CreateEventW() retval=00000068 ret=7e1b2580 0032:Call KERNEL32.WaitForSingleObject(00000068,ffffffff) ret=7e1b2635 0033:Call KERNEL32.SetEvent(00000068) ret=7e1c4ea1 0033:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c4ea1 0033:Call KERNEL32.ExitThread(00000000) ret=7e1c4eb0 0033:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) 0033:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0033:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) 0033:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0033:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) 0033:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0033:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) 0033:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) retval=1 0033:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) 0033:Call KERNEL32.TlsGetValue(00000000) ret=7e3f4071 0033:Ret KERNEL32.TlsGetValue() retval=00000000 ret=7e3f4071 0033:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0033:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) 0033:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0032:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1b2635 0032:Call KERNEL32.CloseHandle(00000068) ret=7e1b2640 0032:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1b2640 0032:Call ntdll.RtlFreeHeap(00110000,00000000,0014c7d0) ret=7e1b24dc 0032:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e1b24dc 0032:Call ntdll.RtlDeleteCriticalSection(0013cefc) ret=7e1b24fb 0032:Ret ntdll.RtlDeleteCriticalSection() retval=00000000 ret=7e1b24fb 0032:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bc,00148b18,00000000,00000000) ret=7e1c4643 0032:Call KERNEL32.IsBadReadPtr(00148b18,0000002c) ret=7e0bdbc9 0032:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 0032:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bc,007ceaa4,00000000,00000000) ret=7e0bdf33 0032:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 0032:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 0032:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0032:Call ntdll.RtlFreeHeap(00110000,00000000,00148b50) ret=7e72ae0b 0032:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e72ae0b 0032:Ret winmm.waveOutClose() retval=00000000 ret=7e0c01a5 0032:Call ntdll.RtlFreeHeap(00110000,00000000,00148b18) ret=7e0c01f7 0032:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e0c01f7 0032:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0032:Call ntdll.RtlFreeHeap(00110000,00000000,00148bd8) ret=7e72ae0b 0032:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e72ae0b 0009:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1b2635 0009:Call KERNEL32.CloseHandle(00000070) ret=7e1b2640 0009:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1b2640 0009:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0009:Ret winmm.waveOutReset() retval=00000000 ret=7e0c0180 0009:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0009:Call KERNEL32.WaitForSingleObject(00000040,ffffffff) ret=7e73555a 0032:Call ntdll.RtlFreeHeap(00110000,00000000,00148c28) ret=7e731f79 0032:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e731f79 0032:Call KERNEL32.SetEvent(00000040) ret=7e7343a0 0032:Ret KERNEL32.SetEvent() retval=00000001 ret=7e7343a0 0032:Call KERNEL32.CloseHandle(00000064) ret=7e734340 0032:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e734340 0032:Call ntdll.RtlFreeHeap(00110000,00000000,00148bb0) ret=7e734360 0032:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e734360 0032:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) 0032:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0032:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) 0032:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0032:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) 0032:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0032:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) 0032:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) retval=1 0032:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) 0032:Call KERNEL32.TlsGetValue(00000000) ret=7e3f4071 0032:Ret KERNEL32.TlsGetValue() retval=00000000 ret=7e3f4071 0032:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0032:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) 0032:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0009:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e73555a 0009:Call KERNEL32.ResetEvent(00000038) ret=7e735572 0009:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e735572 0009:Call KERNEL32.CreateThread(00000000,00000000,7e7348a0,0014cad8,00000000,0033f598) ret=7e73560c 0034:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) 0034:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0034:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) 0034:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0034:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) 0034:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) retval=1 0034:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) 0034:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0034:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) 0034:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0034:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) 0034:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0034:Starting thread proc 0x7e7348a0 (arg=0x14cad8) 0034:Call KERNEL32.FindResourceW(01000000,0000007c,7e741bde L"WAVE") ret=7e734ca3 0034:Ret KERNEL32.FindResourceW() retval=01014c40 ret=7e734ca3 0034:Call KERNEL32.LoadResource(01000000,01014c40) ret=7e734cb9 0034:Ret KERNEL32.LoadResource() retval=0104d668 ret=7e734cb9 0034:Call KERNEL32.LockResource(0104d668) ret=7e734cce 0034:Ret KERNEL32.LockResource() retval=0104d668 ret=7e734cce 0034:Call KERNEL32.FreeResource(0104d668) ret=7e734ce9 0034:Ret KERNEL32.FreeResource() retval=00000000 ret=7e734ce9 0034:Call ntdll.RtlAllocateHeap(00110000,00000008,0000005c) ret=7e733960 0034:Ret ntdll.RtlAllocateHeap() retval=00148c28 ret=7e733960 0034:Call KERNEL32.GetFileSize(ffffffff,00000000) ret=7e733ab9 0034:Ret KERNEL32.GetFileSize() retval=ffffffff ret=7e733ab9 0034:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7e733cf0 0034:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e733cf0 0034:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7e734e1c 0034:Ret ntdll.RtlAllocateHeap() retval=00148cb8 ret=7e734e1c 0034:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e734f1f 0034:Ret KERNEL32.CreateEventW() retval=00000068 ret=7e734f1f 0034:Call ntdll.RtlAllocateHeap(00110000,00000008,0000001c) ret=7e72abbe 0034:Ret ntdll.RtlAllocateHeap() retval=0014cb00 ret=7e72abbe 0034:Call msacm32.drv.wodMessage(0000ffff,00000005,008ce918,008ce970,00030000) ret=7e728e1f 0034:Call ntdll.RtlAllocateHeap(00110000,00000000,0000002c) ret=7e0bfd8c 0034:Ret ntdll.RtlAllocateHeap() retval=0014cb28 ret=7e0bfd8c 0034:Call winmm.waveOutGetNumDevs() ret=7e0bfdb5 0034:Ret winmm.waveOutGetNumDevs() retval=00000002 ret=7e0bfdb5 0034:Call winmm.waveOutOpen(0014cb30,00000000,00148cb8,7e0bde60,0014cb28,00030008) ret=7e0c0313 0034:Call ntdll.RtlAllocateHeap(00110000,00000008,0000001c) ret=7e72abbe 0034:Ret ntdll.RtlAllocateHeap() retval=0014cb60 ret=7e72abbe 0034:Call winealsa.drv.wodMessage(00000000,00000005,008ce5b8,008ce610,00030008) ret=7e728e1f 0034:Call ntdll.RtlAllocateHeap(00110000,00000008,00000068) ret=7e1c6c82 0034:Ret ntdll.RtlAllocateHeap() retval=00148b18 ret=7e1c6c82 0034:Call ntdll.RtlAllocateHeap(00110000,00000008,00000300) ret=7e1b2459 0034:Ret ntdll.RtlAllocateHeap() retval=0014c7d0 ret=7e1b2459 0034:Call KERNEL32.InitializeCriticalSection(0013cefc) ret=7e1b2469 0034:Ret KERNEL32.InitializeCriticalSection() retval=00000001 ret=7e1b2469 0034:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1c73ab 0034:Ret KERNEL32.CreateEventW() retval=00000070 ret=7e1c73ab 0034:Call KERNEL32.CreateThread(00000000,00000000,7e1c5570,00000000,00000000,0013cedc) ret=7e1c73ef 0009:Ret KERNEL32.CreateThread() retval=00000064 ret=7e73560c 0009:Call KERNEL32.SetThreadPriority(00000064,0000000f) ret=7e73562d 0009:Ret KERNEL32.SetThreadPriority() retval=00000001 ret=7e73562d 0009:Ret winmm.PlaySoundW() retval=00000001 ret=01006aa0 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,0000000c) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c5820 ret=0100a7d2 0009:Call user32.GetClientRect(00010030,0033f608) ret=01005145 0009:Ret user32.GetClientRect() retval=00000001 ret=01005145 0009:Call user32.GetDC(00010030) ret=010051ad 0009:Ret user32.GetDC() retval=00000314 ret=010051ad 0009:Call gdi32.CreateCompatibleDC(00000314) ret=010051bc 0009:Ret gdi32.CreateCompatibleDC() retval=00001ae8 ret=010051bc 0009:Call gdi32.CreateCompatibleDC(00000314) ret=010051ca 0009:Ret gdi32.CreateCompatibleDC() retval=00001af4 ret=010051ca 0009:Call gdi32.CreateCompatibleDC(00000314) ret=010051d8 0009:Ret gdi32.CreateCompatibleDC() retval=00001b00 ret=010051d8 0009:Call gdi32.CreateCompatibleBitmap(00000314,00000047,00000060) ret=010051f8 0009:Ret gdi32.CreateCompatibleBitmap() retval=00001b0c ret=010051f8 0009:Call gdi32.CreateCompatibleBitmap(00000314,00000047,00000060) ret=01005212 0009:Ret gdi32.CreateCompatibleBitmap() retval=00001b10 ret=01005212 0009:Call gdi32.CreateCompatibleBitmap(00000314,00000047,00000060) ret=0100522c 0009:Ret gdi32.CreateCompatibleBitmap() retval=00001b14 ret=0100522c 0009:Call gdi32.SelectObject(00001ae8,00001b0c) ret=01005246 0009:Ret gdi32.SelectObject() retval=0000006c ret=01005246 0009:Call gdi32.SelectObject(00001af4,00001b10) ret=0100525a 0009:Ret gdi32.SelectObject() retval=0000006c ret=0100525a 0009:Call gdi32.SelectObject(00001b00,00001b14) ret=0100526e 0009:Ret gdi32.SelectObject() retval=0000006c ret=0100526e 0009:Call user32.LoadBitmapW(01000000,0033f5a0 L"CARD48") ret=010028ff 0035:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) 0035:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0035:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) 0035:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0035:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) 0035:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) retval=1 0035:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) 0035:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0035:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) 0035:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0035:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) 0035:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0035:Starting thread proc 0x7e1c5570 (arg=(nil)) 0035:Call KERNEL32.SetEvent(00000070) ret=7e1c55aa 0035:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c55aa 0034:Ret KERNEL32.CreateThread() retval=000000a8 ret=7e1c73ef 0034:Call KERNEL32.SetThreadPriority(000000a8,0000000f) ret=7e1c7413 0034:Ret KERNEL32.SetThreadPriority() retval=00000001 ret=7e1c7413 0034:Call KERNEL32.WaitForSingleObject(00000070,ffffffff) ret=7e1c742f 0034:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1c742f 0034:Call KERNEL32.CloseHandle(00000070) ret=7e1c7443 0034:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1c7443 0034:Call ntdll.RtlFreeHeap(00110000,00000000,00148b18) ret=7e1c7479 0034:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e1c7479 0034:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bb,0014cb28,00000000,00000000) ret=7e1c4643 0034:Call KERNEL32.IsBadReadPtr(0014cb28,0000002c) ret=7e0bdbc9 0034:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 0034:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bb,008ceaa4,00000000,00000000) ret=7e0bdf33 0034:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 0034:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 0034:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0034:Ret winmm.waveOutOpen() retval=00000000 ret=7e0c0313 0034:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0034:Call ntdll.RtlAllocateHeap(00110000,00000000,000039ac) ret=7e73520d 0034:Ret ntdll.RtlAllocateHeap() retval=0014d3a0 ret=7e73520d 0034:Call msacm32.drv.wodMessage(0000ffff,00000007,0014cb28,0014d3a0,00000020) ret=7e728e1f 0034:Call winmm.waveOutPrepareHeader(00008001,0014d3a0,00000020) ret=7e0c09d8 0034:Call winealsa.drv.wodMessage(00000000,00000007,7e72ab2b,0014d3a0,00000020) ret=7e728e1f 0034:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 0034:Ret winmm.waveOutPrepareHeader() retval=00000000 ret=7e0c09d8 0034:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0034:Call msacm32.drv.wodMessage(0000ffff,00000007,0014cb28,0014d3c0,00000020) ret=7e728e1f 0034:Call winmm.waveOutPrepareHeader(00008001,0014d3c0,00000020) ret=7e0c09d8 0034:Call winealsa.drv.wodMessage(00000000,00000007,7e72ab2b,0014d3c0,00000020) ret=7e728e1f 0034:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 0034:Ret winmm.waveOutPrepareHeader() retval=00000000 ret=7e0c09d8 0034:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0034:Call KERNEL32.WaitForSingleObject(00000038,00000000) ret=7e735343 0034:Ret KERNEL32.WaitForSingleObject() retval=00000102 ret=7e735343 0034:Call msacm32.drv.wodMessage(0000ffff,00000009,0014cb28,0014d3a0,00000020) ret=7e728e1f 0034:Call winmm.waveOutWrite(00008001,0014d3a0,00000020) ret=7e0c09b5 0034:Call winealsa.drv.wodMessage(00000000,00000009,7e72ab2b,0014d3a0,00000020) ret=7e728e1f 0034:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0034:Ret winmm.waveOutWrite() retval=00000000 ret=7e0c09b5 0034:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0034:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 0034:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 0034:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 0034:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 0034:Call KERNEL32.WaitForSingleObject(00000068,ffffffff) ret=7e73429b 0009:Ret user32.LoadBitmapW() retval=00001b24 ret=010028ff 0009:Call gdi32.CreateCompatibleDC(00001af4) ret=01002909 0009:Ret gdi32.CreateCompatibleDC() retval=00001b38 ret=01002909 0009:Call gdi32.SelectObject(00001b38,00001b24) ret=01002917 0009:Ret gdi32.SelectObject() retval=0000006c ret=01002917 0009:Call gdi32.BitBlt(00001af4,00000000,00000000,00000047,00000060,00001b38,00000000,00000000,00cc0020) ret=01002938 0009:Ret gdi32.BitBlt() retval=00000001 ret=01002938 0009:Call gdi32.SelectObject(00001b38,0000006c) ret=0100293e 0009:Ret gdi32.SelectObject() retval=00001b24 ret=0100293e 0009:Call gdi32.DeleteObject(00001b24) ret=01002947 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01002947 0009:Call gdi32.DeleteDC(00001b38) ret=0100294e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100294e 0009:Call gdi32.SetPixel(00001af4,00000000,00000000,00008000) ret=01002969 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002969 0009:Call gdi32.SetPixel(00001af4,00000001,00000000,00008000) ret=01002976 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002976 0009:Call gdi32.SetPixel(00001af4,00000000,00000001,00008000) ret=01002982 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002982 0009:Call gdi32.SetPixel(00001af4,00000046,00000000,00008000) ret=0100298f 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100298f 0009:Call gdi32.SetPixel(00001af4,00000045,00000000,00008000) ret=0100299c 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100299c 0009:Call gdi32.SetPixel(00001af4,00000046,00000001,00008000) ret=010029ab 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ab 0009:Call gdi32.SetPixel(00001af4,00000000,0000005f,00008000) ret=010029bf 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029bf 0009:Call gdi32.SetPixel(00001af4,00000001,0000005f,00008000) ret=010029d0 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029d0 0009:Call gdi32.SetPixel(00001af4,00000000,0000005e,00008000) ret=010029de 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029de 0009:Call gdi32.SetPixel(00001af4,00000046,0000005f,00008000) ret=010029ef 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ef 0009:Call gdi32.SetPixel(00001af4,00000045,0000005f,00008000) ret=01002a00 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a00 0009:Call gdi32.SetPixel(00001af4,00000046,0000005e,00008000) ret=01002a11 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a11 0009:Call user32.LoadBitmapW(01000000,010012c8 L"CARDBACK") ret=010028ff 0009:Ret user32.LoadBitmapW() retval=00001b50 ret=010028ff 0009:Call gdi32.CreateCompatibleDC(00001ae8) ret=01002909 0009:Ret gdi32.CreateCompatibleDC() retval=00001b64 ret=01002909 0009:Call gdi32.SelectObject(00001b64,00001b50) ret=01002917 0009:Ret gdi32.SelectObject() retval=0000006c ret=01002917 0009:Call gdi32.BitBlt(00001ae8,00000000,00000000,00000047,00000060,00001b64,00000000,00000000,00cc0020) ret=01002938 0009:Ret gdi32.BitBlt() retval=00000001 ret=01002938 0009:Call gdi32.SelectObject(00001b64,0000006c) ret=0100293e 0009:Ret gdi32.SelectObject() retval=00001b50 ret=0100293e 0009:Call gdi32.DeleteObject(00001b50) ret=01002947 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01002947 0009:Call gdi32.DeleteDC(00001b64) ret=0100294e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100294e 0009:Call gdi32.SetPixel(00001ae8,00000000,00000000,00008000) ret=01002969 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002969 0009:Call gdi32.SetPixel(00001ae8,00000001,00000000,00008000) ret=01002976 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002976 0009:Call gdi32.SetPixel(00001ae8,00000000,00000001,00008000) ret=01002982 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002982 0009:Call gdi32.SetPixel(00001ae8,00000046,00000000,00008000) ret=0100298f 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100298f 0009:Call gdi32.SetPixel(00001ae8,00000045,00000000,00008000) ret=0100299c 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100299c 0009:Call gdi32.SetPixel(00001ae8,00000046,00000001,00008000) ret=010029ab 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ab 0009:Call gdi32.SetPixel(00001ae8,00000000,0000005f,00008000) ret=010029bf 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029bf 0009:Call gdi32.SetPixel(00001ae8,00000001,0000005f,00008000) ret=010029d0 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029d0 0009:Call gdi32.SetPixel(00001ae8,00000000,0000005e,00008000) ret=010029de 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029de 0009:Call gdi32.SetPixel(00001ae8,00000046,0000005f,00008000) ret=010029ef 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ef 0009:Call gdi32.SetPixel(00001ae8,00000045,0000005f,00008000) ret=01002a00 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a00 0009:Call gdi32.SetPixel(00001ae8,00000046,0000005e,00008000) ret=01002a11 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a11 0009:Call winmm.timeGetTime() ret=010047d1 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=0000235d ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=0000235d ret=010047d1 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=0000235d ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=0000235d ret=01004881 0009:Call gdi32.BitBlt(00001ae8,00000000,00000000,00000048,00000061,00001ae8,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00000314,0000044d,00000258,00000047,00000060,00001af4,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00002363 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00002363 ret=01004881 0009:Call gdi32.BitBlt(00001b00,00000000,00000040,00000047,00000020,00001ae8,00000000,00000040,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001b00,00000026,00000000,00000021,00000040,00001ae8,00000026,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001ae8,00000021,00000020,00000027,00000041,00001ae8,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001ae8,00000000,00000000,00000047,00000020,00000314,0000042c,00000238,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001ae8,00000000,00000020,00000021,00000040,00000314,0000042c,00000258,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,0000042c,00000238,00000047,00000060,00001af4,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,0000044d,00000298,00000047,00000020,00001b00,00000000,00000040,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000473,00000258,00000021,00000040,00001b00,00000026,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=0000236b ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=0000236b ret=01004881 0009:Call gdi32.BitBlt(00001b00,00000000,00000036,00000047,0000002a,00001ae8,00000000,00000036,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001b00,0000001a,00000000,0000002d,00000036,00001ae8,0000001a,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001ae8,0000002d,0000002a,0000001b,00000037,00001ae8,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001ae8,00000000,00000000,00000047,0000002a,00000314,000003ff,0000020e,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001ae8,00000000,0000002a,0000002d,00000036,00000314,000003ff,00000238,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000003ff,0000020e,00000047,00000060,00001af4,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,0000042c,0000026e,00000047,0000002a,00001b00,00000000,00000036,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000446,00000238,0000002d,00000036,00001b00,0000001a,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00002373 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00002373 ret=01004881 0009:Call gdi32.BitBlt(00001b00,00000000,00000035,00000047,0000002b,00001ae8,00000000,00000035,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001b00,0000001a,00000000,0000002d,00000035,00001ae8,0000001a,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001ae8,0000002d,0000002b,0000001b,00000036,00001ae8,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001ae8,00000000,00000000,00000047,0000002b,00000314,000003d2,000001e3,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001ae8,00000000,0000002b,0000002d,00000035,00000314,000003d2,0000020e,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000003d2,000001e3,00000047,00000060,00001af4,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000003ff,00000243,00000047,0000002b,00001b00,00000000,00000035,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000419,0000020e,0000002d,00000035,00001b00,0000001a,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=0000237b ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=0000237b ret=01004881 0009:Call gdi32.BitBlt(00001b00,00000000,00000035,00000047,0000002b,00001ae8,00000000,00000035,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001b00,0000001a,00000000,0000002d,00000035,00001ae8,0000001a,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001ae8,0000002d,0000002b,0000001b,00000036,00001ae8,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001ae8,00000000,00000000,00000047,0000002b,00000314,000003a5,000001b8,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001ae8,00000000,0000002b,0000002d,00000035,00000314,000003a5,000001e3,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000003a5,000001b8,00000047,00000060,00001af4,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000003d2,00000218,00000047,0000002b,00001b00,00000000,00000035,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,000003ec,000001e3,0000002d,00000035,00001b00,0000001a,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00002383 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00002383 ret=01004881 0009:Call gdi32.BitBlt(00001b00,00000000,00000036,00000047,0000002a,00001ae8,00000000,00000036,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001b00,0000001a,00000000,0000002d,00000036,00001ae8,0000001a,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001ae8,0000002d,0000002a,0000001b,00000037,00001ae8,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001ae8,00000000,00000000,00000047,0000002a,00000314,00000378,0000018e,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001ae8,00000000,0000002a,0000002d,00000036,00000314,00000378,000001b8,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000378,0000018e,00000047,00000060,00001af4,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000003a5,000001ee,00000047,0000002a,00001b00,00000000,00000036,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,000003bf,000001b8,0000002d,00000036,00001b00,0000001a,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=0000238c ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=0000238c ret=01004881 0009:Call gdi32.BitBlt(00001b00,00000000,00000030,00000047,00000030,00001ae8,00000000,00000030,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001b00,00000014,00000000,00000033,00000030,00001ae8,00000014,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001ae8,00000033,00000030,00000015,00000031,00001ae8,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001ae8,00000000,00000000,00000047,00000030,00000314,00000345,0000015e,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001ae8,00000000,00000030,00000033,00000030,00000314,00000345,0000018e,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000345,0000015e,00000047,00000060,00001af4,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000378,000001be,00000047,00000030,00001b00,00000000,00000030,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000038c,0000018e,00000033,00000030,00001b00,00000014,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00002393 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00002393 ret=01004881 0009:Call gdi32.BitBlt(00001b00,00000000,0000003a,00000047,00000026,00001ae8,00000000,0000003a,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001b00,00000020,00000000,00000027,0000003a,00001ae8,00000020,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001ae8,00000027,00000026,00000021,0000003b,00001ae8,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001ae8,00000000,00000000,00000047,00000026,00000314,0000031e,00000138,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001ae8,00000000,00000026,00000027,0000003a,00000314,0000031e,0000015e,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,0000031e,00000138,00000047,00000060,00001af4,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000345,00000198,00000047,00000026,00001b00,00000000,0000003a,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000365,0000015e,00000027,0000003a,00001b00,00000020,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=0000239b ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=0000239b ret=01004881 0009:Call gdi32.BitBlt(00001b00,00000000,00000035,00000047,0000002b,00001ae8,00000000,00000035,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001b00,0000001a,00000000,0000002d,00000035,00001ae8,0000001a,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001ae8,0000002d,0000002b,0000001b,00000036,00001ae8,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001ae8,00000000,00000000,00000047,0000002b,00000314,000002f1,0000010d,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001ae8,00000000,0000002b,0000002d,00000035,00000314,000002f1,00000138,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000002f1,0000010d,00000047,00000060,00001af4,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,0000031e,0000016d,00000047,0000002b,00001b00,00000000,00000035,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000338,00000138,0000002d,00000035,00001b00,0000001a,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000023a3 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000023a3 ret=01004881 0009:Call gdi32.BitBlt(00001b00,00000000,00000036,00000047,0000002a,00001ae8,00000000,00000036,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001b00,0000001a,00000000,0000002d,00000036,00001ae8,0000001a,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001ae8,0000002d,0000002a,0000001b,00000037,00001ae8,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001ae8,00000000,00000000,00000047,0000002a,00000314,000002c4,000000e3,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001ae8,00000000,0000002a,0000002d,00000036,00000314,000002c4,0000010d,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000002c4,000000e3,00000047,00000060,00001af4,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000002f1,00000143,00000047,0000002a,00001b00,00000000,00000036,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000030b,0000010d,0000002d,00000036,00001b00,0000001a,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000023ab ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000023ab ret=01004881 0009:Call gdi32.BitBlt(00001b00,00000000,00000035,00000047,0000002b,00001ae8,00000000,00000035,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001b00,0000001a,00000000,0000002d,00000035,00001ae8,0000001a,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001ae8,0000002d,0000002b,0000001b,00000036,00001ae8,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001ae8,00000000,00000000,00000047,0000002b,00000314,00000297,000000b8,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001ae8,00000000,0000002b,0000002d,00000035,00000314,00000297,000000e3,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000297,000000b8,00000047,00000060,00001af4,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000002c4,00000118,00000047,0000002b,00001b00,00000000,00000035,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,000002de,000000e3,0000002d,00000035,00001b00,0000001a,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000023b3 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000023b3 ret=01004881 0009:Call gdi32.BitBlt(00001b00,00000000,00000035,00000047,0000002b,00001ae8,00000000,00000035,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001b00,0000001a,00000000,0000002d,00000035,00001ae8,0000001a,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001ae8,0000002d,0000002b,0000001b,00000036,00001ae8,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001ae8,00000000,00000000,00000047,0000002b,00000314,0000026a,0000008d,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001ae8,00000000,0000002b,0000002d,00000035,00000314,0000026a,000000b8,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,0000026a,0000008d,00000047,00000060,00001af4,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000297,000000ed,00000047,0000002b,00001b00,00000000,00000035,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,000002b1,000000b8,0000002d,00000035,00001b00,0000001a,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000023bb ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000023bb ret=01004881 0009:Call gdi32.BitBlt(00001b00,00000000,00000036,00000047,0000002a,00001ae8,00000000,00000036,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001b00,0000001a,00000000,0000002d,00000036,00001ae8,0000001a,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001ae8,0000002d,0000002a,0000001b,00000037,00001ae8,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001ae8,00000000,00000000,00000047,0000002a,00000314,0000023d,00000063,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001ae8,00000000,0000002a,0000002d,00000036,00000314,0000023d,0000008d,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,0000023d,00000063,00000047,00000060,00001af4,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,0000026a,000000c3,00000047,0000002a,00001b00,00000000,00000036,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000284,0000008d,0000002d,00000036,00001b00,0000001a,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000023c3 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000023c3 ret=01004881 0009:Call gdi32.BitBlt(00001b00,00000000,0000003f,00000047,00000021,00001ae8,00000000,0000003f,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001b00,00000025,00000000,00000022,0000003f,00001ae8,00000025,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001ae8,00000022,00000021,00000026,00000040,00001ae8,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001ae8,00000000,00000000,00000047,00000021,00000314,0000021b,00000042,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001ae8,00000000,00000021,00000022,0000003f,00000314,0000021b,00000063,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,0000021b,00000042,00000047,00000060,00001af4,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,0000023d,000000a2,00000047,00000021,00001b00,00000000,0000003f,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000262,00000063,00000022,0000003f,00001b00,00000025,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call gdi32.SelectObject(00001ae8,0000006c) ret=01005316 0009:Ret gdi32.SelectObject() retval=00001b0c ret=01005316 0009:Call gdi32.SelectObject(00001af4,0000006c) ret=01005324 0009:Ret gdi32.SelectObject() retval=00001b10 ret=01005324 0009:Call gdi32.SelectObject(00001b00,0000006c) ret=01005332 0009:Ret gdi32.SelectObject() retval=00001b14 ret=01005332 0009:Call gdi32.DeleteObject(00001b0c) ret=01005340 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005340 0009:Call gdi32.DeleteObject(00001b10) ret=01005348 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005348 0009:Call gdi32.DeleteObject(00001b14) ret=01005350 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005350 0009:Call gdi32.DeleteDC(00001ae8) ret=0100535e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100535e 0009:Call gdi32.DeleteDC(00001af4) ret=01005366 0009:Ret gdi32.DeleteDC() retval=00000001 ret=01005366 0009:Call gdi32.DeleteDC(00001b00) ret=0100536e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100536e 0009:Call user32.ReleaseDC(00010030,00000314) ret=0100537c 0009:Ret user32.ReleaseDC() retval=00000001 ret=0100537c 0009:Call user32.InvalidateRect(00010030,0033f618,00000000) ret=0100538a 0009:Ret user32.InvalidateRect() retval=00000001 ret=0100538a 0009:Call KERNEL32.GetModuleHandleW(00000000) ret=01006a97 0009:Ret KERNEL32.GetModuleHandleW() retval=01000000 ret=01006a97 0009:Call winmm.PlaySoundW(0000007c,01000000,00040007) ret=01006aa0 0009:Call ntdll.RtlAllocateHeap(00110000,00000008,0000001c) ret=7e7356bc 0009:Ret ntdll.RtlAllocateHeap() retval=00148bb0 ret=7e7356bc 0009:Call KERNEL32.ResetEvent(00000040) ret=7e735513 0009:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e735513 0009:Call KERNEL32.SetEvent(00000038) ret=7e735520 0009:Ret KERNEL32.SetEvent() retval=00000001 ret=7e735520 0009:Call msacm32.drv.wodMessage(0000ffff,0000000c,0014cb28,00000000,00000000) ret=7e728e1f 0009:Call winmm.waveOutReset(00008001) ret=7e0c0180 0009:Call winealsa.drv.wodMessage(00000000,0000000c,7e72ab2b,00000000,00000000) ret=7e728e1f 0009:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1b2580 0009:Ret KERNEL32.CreateEventW() retval=00000070 ret=7e1b2580 0035:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bd,0014cb28,0014d3a0,00000000) ret=7e1c4643 0035:Call KERNEL32.IsBadReadPtr(0014cb28,0000002c) ret=7e0bdbc9 0035:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 0035:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bd,008ceaa4,0014d3a0,00000000) ret=7e0bdf33 0035:Call KERNEL32.SetEvent(00000068) ret=7e7341f6 0035:Ret KERNEL32.SetEvent() retval=00000001 ret=7e7341f6 0035:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 0035:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 0035:Call KERNEL32.SetEvent(00000070) ret=7e1c4f3d 0035:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c4f3d 0034:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e73429b 0034:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 0034:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 0034:Call msacm32.drv.wodMessage(0000ffff,0000000c,0014cb28,00000000,00000000) ret=7e728e1f 0034:Call winmm.waveOutReset(00008001) ret=7e0c0180 0034:Call winealsa.drv.wodMessage(00000000,0000000c,7e72ab2b,00000000,00000000) ret=7e728e1f 0034:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1b2580 0034:Ret KERNEL32.CreateEventW() retval=000000ac ret=7e1b2580 0034:Call KERNEL32.WaitForSingleObject(000000ac,ffffffff) ret=7e1b2635 0035:Call KERNEL32.SetEvent(000000ac) ret=7e1c4f3d 0035:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c4f3d 0034:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1b2635 0034:Call KERNEL32.CloseHandle(000000ac) ret=7e1b2640 0034:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1b2640 0034:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0034:Ret winmm.waveOutReset() retval=00000000 ret=7e0c0180 0034:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0034:Call msacm32.drv.wodMessage(0000ffff,00000008,0014cb28,0014d3a0,00000020) ret=7e728e1f 0034:Call winmm.waveOutUnprepareHeader(00008001,0014d3a0,00000020) ret=7e0c00b6 0034:Call winealsa.drv.wodMessage(00000000,00000008,7e72ab2b,0014d3a0,00000020) ret=7e728e1f 0034:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 0034:Ret winmm.waveOutUnprepareHeader() retval=00000000 ret=7e0c00b6 0034:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0034:Call msacm32.drv.wodMessage(0000ffff,00000008,0014cb28,0014d3c0,00000020) ret=7e728e1f 0034:Call winmm.waveOutUnprepareHeader(00008001,0014d3c0,00000020) ret=7e0c00b6 0034:Call winealsa.drv.wodMessage(00000000,00000008,7e72ab2b,0014d3c0,00000020) ret=7e728e1f 0034:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 0034:Ret winmm.waveOutUnprepareHeader() retval=00000000 ret=7e0c00b6 0034:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0034:Call KERNEL32.CloseHandle(00000068) ret=7e7349fd 0034:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e7349fd 0034:Call ntdll.RtlFreeHeap(00110000,00000000,0014d3a0) ret=7e734a23 0034:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e734a23 0034:Call ntdll.RtlFreeHeap(00110000,00000000,00148cb8) ret=7e734a49 0034:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e734a49 0034:Call msacm32.drv.wodMessage(0000ffff,00000006,0014cb28,00000000,00000000) ret=7e728e1f 0034:Call winmm.waveOutClose(00008001) ret=7e0c01a5 0034:Call winealsa.drv.wodMessage(00000000,00000006,7e72ab2b,00000000,00000000) ret=7e728e1f 0034:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1b2580 0034:Ret KERNEL32.CreateEventW() retval=00000068 ret=7e1b2580 0034:Call KERNEL32.WaitForSingleObject(00000068,ffffffff) ret=7e1b2635 0035:Call KERNEL32.SetEvent(00000068) ret=7e1c4ea1 0035:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c4ea1 0035:Call KERNEL32.ExitThread(00000000) ret=7e1c4eb0 0035:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) 0035:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0035:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) 0035:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0035:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) 0035:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0035:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) 0035:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) retval=1 0035:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) 0035:Call KERNEL32.TlsGetValue(00000000) ret=7e3f4071 0035:Ret KERNEL32.TlsGetValue() retval=00000000 ret=7e3f4071 0035:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0035:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) 0035:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0034:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1b2635 0034:Call KERNEL32.CloseHandle(00000068) ret=7e1b2640 0034:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1b2640 0034:Call ntdll.RtlFreeHeap(00110000,00000000,0014c7d0) ret=7e1b24dc 0034:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e1b24dc 0034:Call ntdll.RtlDeleteCriticalSection(0013cefc) ret=7e1b24fb 0034:Ret ntdll.RtlDeleteCriticalSection() retval=00000000 ret=7e1b24fb 0034:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bc,0014cb28,00000000,00000000) ret=7e1c4643 0034:Call KERNEL32.IsBadReadPtr(0014cb28,0000002c) ret=7e0bdbc9 0034:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 0034:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bc,008ceaa4,00000000,00000000) ret=7e0bdf33 0034:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 0034:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 0034:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0034:Call ntdll.RtlFreeHeap(00110000,00000000,0014cb60) ret=7e72ae0b 0034:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e72ae0b 0034:Ret winmm.waveOutClose() retval=00000000 ret=7e0c01a5 0034:Call ntdll.RtlFreeHeap(00110000,00000000,0014cb28) ret=7e0c01f7 0034:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e0c01f7 0034:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0034:Call ntdll.RtlFreeHeap(00110000,00000000,0014cb00) ret=7e72ae0b 0034:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e72ae0b 0009:Call KERNEL32.WaitForSingleObject(00000070,ffffffff) ret=7e1b2635 0009:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1b2635 0009:Call KERNEL32.CloseHandle(00000070) ret=7e1b2640 0009:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1b2640 0009:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0009:Ret winmm.waveOutReset() retval=00000000 ret=7e0c0180 0009:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0009:Call KERNEL32.WaitForSingleObject(00000040,ffffffff) ret=7e73555a 0034:Call ntdll.RtlFreeHeap(00110000,00000000,00148c28) ret=7e731f79 0034:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e731f79 0034:Call KERNEL32.SetEvent(00000040) ret=7e7343a0 0034:Ret KERNEL32.SetEvent() retval=00000001 ret=7e7343a0 0034:Call KERNEL32.CloseHandle(00000064) ret=7e734340 0034:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e734340 0034:Call ntdll.RtlFreeHeap(00110000,00000000,0014cad8) ret=7e734360 0034:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e734360 0034:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) 0034:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0034:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) 0034:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0034:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) 0034:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0034:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) 0034:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) retval=1 0034:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) 0034:Call KERNEL32.TlsGetValue(00000000) ret=7e3f4071 0034:Ret KERNEL32.TlsGetValue() retval=00000000 ret=7e3f4071 0034:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0034:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) 0034:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0009:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e73555a 0009:Call KERNEL32.ResetEvent(00000038) ret=7e735572 0009:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e735572 0009:Call KERNEL32.CreateThread(00000000,00000000,7e7348a0,00148bb0,00000000,0033f598) ret=7e73560c 0036:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) 0036:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0036:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) 0036:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0036:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) 0036:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) retval=1 0036:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) 0036:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0036:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) 0036:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0036:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) 0036:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0036:Starting thread proc 0x7e7348a0 (arg=0x148bb0) 0036:Call KERNEL32.FindResourceW(01000000,0000007c,7e741bde L"WAVE") ret=7e734ca3 0036:Ret KERNEL32.FindResourceW() retval=01014c40 ret=7e734ca3 0036:Call KERNEL32.LoadResource(01000000,01014c40) ret=7e734cb9 0036:Ret KERNEL32.LoadResource() retval=0104d668 ret=7e734cb9 0036:Call KERNEL32.LockResource(0104d668) ret=7e734cce 0036:Ret KERNEL32.LockResource() retval=0104d668 ret=7e734cce 0036:Call KERNEL32.FreeResource(0104d668) ret=7e734ce9 0036:Ret KERNEL32.FreeResource() retval=00000000 ret=7e734ce9 0036:Call ntdll.RtlAllocateHeap(00110000,00000008,0000005c) ret=7e733960 0036:Ret ntdll.RtlAllocateHeap() retval=00148c28 ret=7e733960 0036:Call KERNEL32.GetFileSize(ffffffff,00000000) ret=7e733ab9 0036:Ret KERNEL32.GetFileSize() retval=ffffffff ret=7e733ab9 0036:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7e733cf0 0036:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e733cf0 0036:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7e734e1c 0036:Ret ntdll.RtlAllocateHeap() retval=00148cb8 ret=7e734e1c 0036:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e734f1f 0036:Ret KERNEL32.CreateEventW() retval=00000068 ret=7e734f1f 0036:Call ntdll.RtlAllocateHeap(00110000,00000008,0000001c) ret=7e72abbe 0036:Ret ntdll.RtlAllocateHeap() retval=00148bd8 ret=7e72abbe 0036:Call msacm32.drv.wodMessage(0000ffff,00000005,007ce918,007ce970,00030000) ret=7e728e1f 0036:Call ntdll.RtlAllocateHeap(00110000,00000000,0000002c) ret=7e0bfd8c 0036:Ret ntdll.RtlAllocateHeap() retval=00148b18 ret=7e0bfd8c 0036:Call winmm.waveOutGetNumDevs() ret=7e0bfdb5 0036:Ret winmm.waveOutGetNumDevs() retval=00000002 ret=7e0bfdb5 0036:Call winmm.waveOutOpen(00148b20,00000000,00148cb8,7e0bde60,00148b18,00030008) ret=7e0c0313 0036:Call ntdll.RtlAllocateHeap(00110000,00000008,0000001c) ret=7e72abbe 0036:Ret ntdll.RtlAllocateHeap() retval=00148b50 ret=7e72abbe 0036:Call winealsa.drv.wodMessage(00000000,00000005,007ce5b8,007ce610,00030008) ret=7e728e1f 0036:Call ntdll.RtlAllocateHeap(00110000,00000008,00000068) ret=7e1c6c82 0036:Ret ntdll.RtlAllocateHeap() retval=0014bef8 ret=7e1c6c82 0036:Call ntdll.RtlAllocateHeap(00110000,00000008,00000300) ret=7e1b2459 0036:Ret ntdll.RtlAllocateHeap() retval=0014c7d0 ret=7e1b2459 0036:Call KERNEL32.InitializeCriticalSection(0013cefc) ret=7e1b2469 0036:Ret KERNEL32.InitializeCriticalSection() retval=00000001 ret=7e1b2469 0036:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1c73ab 0036:Ret KERNEL32.CreateEventW() retval=00000070 ret=7e1c73ab 0036:Call KERNEL32.CreateThread(00000000,00000000,7e1c5570,00000000,00000000,0013cedc) ret=7e1c73ef 0009:Ret KERNEL32.CreateThread() retval=00000064 ret=7e73560c 0009:Call KERNEL32.SetThreadPriority(00000064,0000000f) ret=7e73562d 0009:Ret KERNEL32.SetThreadPriority() retval=00000001 ret=7e73562d 0009:Ret winmm.PlaySoundW() retval=00000001 ret=01006aa0 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,0000000c) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c5838 ret=0100a7d2 0009:Call user32.GetClientRect(00010030,0033f608) ret=01005145 0009:Ret user32.GetClientRect() retval=00000001 ret=01005145 0009:Call user32.GetDC(00010030) ret=010051ad 0009:Ret user32.GetDC() retval=00000314 ret=010051ad 0009:Call gdi32.CreateCompatibleDC(00000314) ret=010051bc 0009:Ret gdi32.CreateCompatibleDC() retval=00001b74 ret=010051bc 0009:Call gdi32.CreateCompatibleDC(00000314) ret=010051ca 0009:Ret gdi32.CreateCompatibleDC() retval=00001b80 ret=010051ca 0009:Call gdi32.CreateCompatibleDC(00000314) ret=010051d8 0009:Ret gdi32.CreateCompatibleDC() retval=00001b8c ret=010051d8 0009:Call gdi32.CreateCompatibleBitmap(00000314,00000047,00000060) ret=010051f8 0009:Ret gdi32.CreateCompatibleBitmap() retval=00001b98 ret=010051f8 0009:Call gdi32.CreateCompatibleBitmap(00000314,00000047,00000060) ret=01005212 0009:Ret gdi32.CreateCompatibleBitmap() retval=00001b9c ret=01005212 0009:Call gdi32.CreateCompatibleBitmap(00000314,00000047,00000060) ret=0100522c 0009:Ret gdi32.CreateCompatibleBitmap() retval=00001ba0 ret=0100522c 0009:Call gdi32.SelectObject(00001b74,00001b98) ret=01005246 0009:Ret gdi32.SelectObject() retval=0000006c ret=01005246 0009:Call gdi32.SelectObject(00001b80,00001b9c) ret=0100525a 0009:Ret gdi32.SelectObject() retval=0000006c ret=0100525a 0009:Call gdi32.SelectObject(00001b8c,00001ba0) ret=0100526e 0009:Ret gdi32.SelectObject() retval=0000006c ret=0100526e 0009:Call user32.LoadBitmapW(01000000,0033f5a0 L"CARD44") ret=010028ff 0037:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) 0037:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0037:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) 0037:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0037:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) 0037:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) retval=1 0037:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) 0037:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0037:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) 0037:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0037:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) 0037:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0037:Starting thread proc 0x7e1c5570 (arg=(nil)) 0037:Call KERNEL32.SetEvent(00000070) ret=7e1c55aa 0037:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c55aa 0036:Ret KERNEL32.CreateThread() retval=000000ac ret=7e1c73ef 0036:Call KERNEL32.SetThreadPriority(000000ac,0000000f) ret=7e1c7413 0036:Ret KERNEL32.SetThreadPriority() retval=00000001 ret=7e1c7413 0036:Call KERNEL32.WaitForSingleObject(00000070,ffffffff) ret=7e1c742f 0036:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1c742f 0036:Call KERNEL32.CloseHandle(00000070) ret=7e1c7443 0036:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1c7443 0036:Call ntdll.RtlFreeHeap(00110000,00000000,0014bef8) ret=7e1c7479 0036:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e1c7479 0036:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bb,00148b18,00000000,00000000) ret=7e1c4643 0036:Call KERNEL32.IsBadReadPtr(00148b18,0000002c) ret=7e0bdbc9 0036:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 0036:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bb,007ceaa4,00000000,00000000) ret=7e0bdf33 0036:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 0036:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 0036:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0036:Ret winmm.waveOutOpen() retval=00000000 ret=7e0c0313 0036:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0036:Call ntdll.RtlAllocateHeap(00110000,00000000,000039ac) ret=7e73520d 0036:Ret ntdll.RtlAllocateHeap() retval=0014d3a0 ret=7e73520d 0036:Call msacm32.drv.wodMessage(0000ffff,00000007,00148b18,0014d3a0,00000020) ret=7e728e1f 0036:Call winmm.waveOutPrepareHeader(00008001,0014d3a0,00000020) ret=7e0c09d8 0036:Call winealsa.drv.wodMessage(00000000,00000007,7e72ab2b,0014d3a0,00000020) ret=7e728e1f 0036:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 0036:Ret winmm.waveOutPrepareHeader() retval=00000000 ret=7e0c09d8 0036:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0036:Call msacm32.drv.wodMessage(0000ffff,00000007,00148b18,0014d3c0,00000020) ret=7e728e1f 0036:Call winmm.waveOutPrepareHeader(00008001,0014d3c0,00000020) ret=7e0c09d8 0036:Call winealsa.drv.wodMessage(00000000,00000007,7e72ab2b,0014d3c0,00000020) ret=7e728e1f 0036:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 0036:Ret winmm.waveOutPrepareHeader() retval=00000000 ret=7e0c09d8 0036:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0036:Call KERNEL32.WaitForSingleObject(00000038,00000000) ret=7e735343 0036:Ret KERNEL32.WaitForSingleObject() retval=00000102 ret=7e735343 0036:Call msacm32.drv.wodMessage(0000ffff,00000009,00148b18,0014d3a0,00000020) ret=7e728e1f 0036:Call winmm.waveOutWrite(00008001,0014d3a0,00000020) ret=7e0c09b5 0036:Call winealsa.drv.wodMessage(00000000,00000009,7e72ab2b,0014d3a0,00000020) ret=7e728e1f 0036:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0036:Ret winmm.waveOutWrite() retval=00000000 ret=7e0c09b5 0036:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0036:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 0036:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 0036:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 0036:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 0036:Call KERNEL32.WaitForSingleObject(00000068,ffffffff) ret=7e73429b 0009:Ret user32.LoadBitmapW() retval=00001bb0 ret=010028ff 0009:Call gdi32.CreateCompatibleDC(00001b80) ret=01002909 0009:Ret gdi32.CreateCompatibleDC() retval=00001bc4 ret=01002909 0009:Call gdi32.SelectObject(00001bc4,00001bb0) ret=01002917 0009:Ret gdi32.SelectObject() retval=0000006c ret=01002917 0009:Call gdi32.BitBlt(00001b80,00000000,00000000,00000047,00000060,00001bc4,00000000,00000000,00cc0020) ret=01002938 0009:Ret gdi32.BitBlt() retval=00000001 ret=01002938 0009:Call gdi32.SelectObject(00001bc4,0000006c) ret=0100293e 0009:Ret gdi32.SelectObject() retval=00001bb0 ret=0100293e 0009:Call gdi32.DeleteObject(00001bb0) ret=01002947 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01002947 0009:Call gdi32.DeleteDC(00001bc4) ret=0100294e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100294e 0009:Call gdi32.SetPixel(00001b80,00000000,00000000,00008000) ret=01002969 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002969 0009:Call gdi32.SetPixel(00001b80,00000001,00000000,00008000) ret=01002976 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002976 0009:Call gdi32.SetPixel(00001b80,00000000,00000001,00008000) ret=01002982 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002982 0009:Call gdi32.SetPixel(00001b80,00000046,00000000,00008000) ret=0100298f 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100298f 0009:Call gdi32.SetPixel(00001b80,00000045,00000000,00008000) ret=0100299c 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100299c 0009:Call gdi32.SetPixel(00001b80,00000046,00000001,00008000) ret=010029ab 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ab 0009:Call gdi32.SetPixel(00001b80,00000000,0000005f,00008000) ret=010029bf 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029bf 0009:Call gdi32.SetPixel(00001b80,00000001,0000005f,00008000) ret=010029d0 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029d0 0009:Call gdi32.SetPixel(00001b80,00000000,0000005e,00008000) ret=010029de 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029de 0009:Call gdi32.SetPixel(00001b80,00000046,0000005f,00008000) ret=010029ef 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ef 0009:Call gdi32.SetPixel(00001b80,00000045,0000005f,00008000) ret=01002a00 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a00 0009:Call gdi32.SetPixel(00001b80,00000046,0000005e,00008000) ret=01002a11 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a11 0009:Call user32.LoadBitmapW(01000000,010012c8 L"CARDBACK") ret=010028ff 0009:Ret user32.LoadBitmapW() retval=00001bdc ret=010028ff 0009:Call gdi32.CreateCompatibleDC(00001b74) ret=01002909 0009:Ret gdi32.CreateCompatibleDC() retval=00001bf0 ret=01002909 0009:Call gdi32.SelectObject(00001bf0,00001bdc) ret=01002917 0009:Ret gdi32.SelectObject() retval=0000006c ret=01002917 0009:Call gdi32.BitBlt(00001b74,00000000,00000000,00000047,00000060,00001bf0,00000000,00000000,00cc0020) ret=01002938 0009:Ret gdi32.BitBlt() retval=00000001 ret=01002938 0009:Call gdi32.SelectObject(00001bf0,0000006c) ret=0100293e 0009:Ret gdi32.SelectObject() retval=00001bdc ret=0100293e 0009:Call gdi32.DeleteObject(00001bdc) ret=01002947 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01002947 0009:Call gdi32.DeleteDC(00001bf0) ret=0100294e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100294e 0009:Call gdi32.SetPixel(00001b74,00000000,00000000,00008000) ret=01002969 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002969 0009:Call gdi32.SetPixel(00001b74,00000001,00000000,00008000) ret=01002976 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002976 0009:Call gdi32.SetPixel(00001b74,00000000,00000001,00008000) ret=01002982 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002982 0009:Call gdi32.SetPixel(00001b74,00000046,00000000,00008000) ret=0100298f 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100298f 0009:Call gdi32.SetPixel(00001b74,00000045,00000000,00008000) ret=0100299c 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100299c 0009:Call gdi32.SetPixel(00001b74,00000046,00000001,00008000) ret=010029ab 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ab 0009:Call gdi32.SetPixel(00001b74,00000000,0000005f,00008000) ret=010029bf 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029bf 0009:Call gdi32.SetPixel(00001b74,00000001,0000005f,00008000) ret=010029d0 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029d0 0009:Call gdi32.SetPixel(00001b74,00000000,0000005e,00008000) ret=010029de 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029de 0009:Call gdi32.SetPixel(00001b74,00000046,0000005f,00008000) ret=010029ef 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ef 0009:Call gdi32.SetPixel(00001b74,00000045,0000005f,00008000) ret=01002a00 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a00 0009:Call gdi32.SetPixel(00001b74,00000046,0000005e,00008000) ret=01002a11 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a11 0009:Call winmm.timeGetTime() ret=010047d1 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000023f3 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000023f3 ret=010047d1 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000023f3 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000023f3 ret=01004881 0009:Call gdi32.BitBlt(00001b74,00000000,00000000,00000048,00000061,00001b74,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00000314,0000044d,00000258,00000047,00000060,00001b80,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000023fb ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000023fb ret=01004881 0009:Call gdi32.BitBlt(00001b8c,00000000,00000036,00000047,0000002a,00001b74,00000000,00000036,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001b8c,00000024,00000000,00000023,00000036,00001b74,00000024,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001b74,00000023,0000002a,00000025,00000037,00001b74,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001b74,00000000,00000000,00000047,0000002a,00000314,0000042a,0000022e,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001b74,00000000,0000002a,00000023,00000036,00000314,0000042a,00000258,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,0000042a,0000022e,00000047,00000060,00001b80,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,0000044d,0000028e,00000047,0000002a,00001b8c,00000000,00000036,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000471,00000258,00000023,00000036,00001b8c,00000024,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00002403 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00002403 ret=01004881 0009:Call gdi32.BitBlt(00001b8c,00000000,00000035,00000047,0000002b,00001b74,00000000,00000035,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001b8c,00000024,00000000,00000023,00000035,00001b74,00000024,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001b74,00000023,0000002b,00000025,00000036,00001b74,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001b74,00000000,00000000,00000047,0000002b,00000314,00000407,00000203,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001b74,00000000,0000002b,00000023,00000035,00000314,00000407,0000022e,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000407,00000203,00000047,00000060,00001b80,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,0000042a,00000263,00000047,0000002b,00001b8c,00000000,00000035,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000044e,0000022e,00000023,00000035,00001b8c,00000024,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=0000240b ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=0000240b ret=01004881 0009:Call gdi32.BitBlt(00001b8c,00000000,00000035,00000047,0000002b,00001b74,00000000,00000035,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001b8c,00000024,00000000,00000023,00000035,00001b74,00000024,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001b74,00000023,0000002b,00000025,00000036,00001b74,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001b74,00000000,00000000,00000047,0000002b,00000314,000003e4,000001d8,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001b74,00000000,0000002b,00000023,00000035,00000314,000003e4,00000203,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000003e4,000001d8,00000047,00000060,00001b80,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000407,00000238,00000047,0000002b,00001b8c,00000000,00000035,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000042b,00000203,00000023,00000035,00001b8c,00000024,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00002413 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00002413 ret=01004881 0009:Call gdi32.BitBlt(00001b8c,00000000,00000036,00000047,0000002a,00001b74,00000000,00000036,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001b8c,00000024,00000000,00000023,00000036,00001b74,00000024,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001b74,00000023,0000002a,00000025,00000037,00001b74,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001b74,00000000,00000000,00000047,0000002a,00000314,000003c1,000001ae,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001b74,00000000,0000002a,00000023,00000036,00000314,000003c1,000001d8,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000003c1,000001ae,00000047,00000060,00001b80,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000003e4,0000020e,00000047,0000002a,00001b8c,00000000,00000036,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000408,000001d8,00000023,00000036,00001b8c,00000024,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=0000241b ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=0000241b ret=01004881 0009:Call gdi32.BitBlt(00001b8c,00000000,00000035,00000047,0000002b,00001b74,00000000,00000035,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001b8c,00000024,00000000,00000023,00000035,00001b74,00000024,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001b74,00000023,0000002b,00000025,00000036,00001b74,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001b74,00000000,00000000,00000047,0000002b,00000314,0000039e,00000183,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001b74,00000000,0000002b,00000023,00000035,00000314,0000039e,000001ae,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,0000039e,00000183,00000047,00000060,00001b80,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000003c1,000001e3,00000047,0000002b,00001b8c,00000000,00000035,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,000003e5,000001ae,00000023,00000035,00001b8c,00000024,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00002423 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00002423 ret=01004881 0009:Call gdi32.BitBlt(00001b8c,00000000,00000035,00000047,0000002b,00001b74,00000000,00000035,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001b8c,00000023,00000000,00000024,00000035,00001b74,00000023,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001b74,00000024,0000002b,00000024,00000036,00001b74,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001b74,00000000,00000000,00000047,0000002b,00000314,0000037a,00000158,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001b74,00000000,0000002b,00000024,00000035,00000314,0000037a,00000183,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,0000037a,00000158,00000047,00000060,00001b80,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,0000039e,000001b8,00000047,0000002b,00001b8c,00000000,00000035,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,000003c1,00000183,00000024,00000035,00001b8c,00000023,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=0000242b ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=0000242b ret=01004881 0009:Call gdi32.BitBlt(00001b8c,00000000,00000035,00000047,0000002b,00001b74,00000000,00000035,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001b8c,00000024,00000000,00000023,00000035,00001b74,00000024,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001b74,00000023,0000002b,00000025,00000036,00001b74,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001b74,00000000,00000000,00000047,0000002b,00000314,00000357,0000012d,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001b74,00000000,0000002b,00000023,00000035,00000314,00000357,00000158,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000357,0000012d,00000047,00000060,00001b80,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,0000037a,0000018d,00000047,0000002b,00001b8c,00000000,00000035,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000039e,00000158,00000023,00000035,00001b8c,00000024,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00002433 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00002433 ret=01004881 0009:Call gdi32.BitBlt(00001b8c,00000000,00000036,00000047,0000002a,00001b74,00000000,00000036,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001b8c,00000024,00000000,00000023,00000036,00001b74,00000024,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001b74,00000023,0000002a,00000025,00000037,00001b74,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001b74,00000000,00000000,00000047,0000002a,00000314,00000334,00000103,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001b74,00000000,0000002a,00000023,00000036,00000314,00000334,0000012d,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000334,00000103,00000047,00000060,00001b80,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000357,00000163,00000047,0000002a,00001b8c,00000000,00000036,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000037b,0000012d,00000023,00000036,00001b8c,00000024,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=0000243b ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=0000243b ret=01004881 0009:Call gdi32.BitBlt(00001b8c,00000000,00000035,00000047,0000002b,00001b74,00000000,00000035,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001b8c,00000024,00000000,00000023,00000035,00001b74,00000024,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001b74,00000023,0000002b,00000025,00000036,00001b74,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001b74,00000000,00000000,00000047,0000002b,00000314,00000311,000000d8,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001b74,00000000,0000002b,00000023,00000035,00000314,00000311,00000103,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000311,000000d8,00000047,00000060,00001b80,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000334,00000138,00000047,0000002b,00001b8c,00000000,00000035,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000358,00000103,00000023,00000035,00001b8c,00000024,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00002443 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00002443 ret=01004881 0009:Call gdi32.BitBlt(00001b8c,00000000,00000035,00000047,0000002b,00001b74,00000000,00000035,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001b8c,00000024,00000000,00000023,00000035,00001b74,00000024,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001b74,00000023,0000002b,00000025,00000036,00001b74,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001b74,00000000,00000000,00000047,0000002b,00000314,000002ee,000000ad,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001b74,00000000,0000002b,00000023,00000035,00000314,000002ee,000000d8,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000002ee,000000ad,00000047,00000060,00001b80,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000311,0000010d,00000047,0000002b,00001b8c,00000000,00000035,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000335,000000d8,00000023,00000035,00001b8c,00000024,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=0000244b ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=0000244b ret=01004881 0009:Call gdi32.BitBlt(00001b8c,00000000,00000036,00000047,0000002a,00001b74,00000000,00000036,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001b8c,00000023,00000000,00000024,00000036,00001b74,00000023,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001b74,00000024,0000002a,00000024,00000037,00001b74,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001b74,00000000,00000000,00000047,0000002a,00000314,000002ca,00000083,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001b74,00000000,0000002a,00000024,00000036,00000314,000002ca,000000ad,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000002ca,00000083,00000047,00000060,00001b80,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000002ee,000000e3,00000047,0000002a,00001b8c,00000000,00000036,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000311,000000ad,00000024,00000036,00001b8c,00000023,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00002453 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00002453 ret=01004881 0009:Call gdi32.BitBlt(00001b8c,00000000,00000035,00000047,0000002b,00001b74,00000000,00000035,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001b8c,00000024,00000000,00000023,00000035,00001b74,00000024,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001b74,00000023,0000002b,00000025,00000036,00001b74,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001b74,00000000,00000000,00000047,0000002b,00000314,000002a7,00000058,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001b74,00000000,0000002b,00000023,00000035,00000314,000002a7,00000083,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000002a7,00000058,00000047,00000060,00001b80,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000002ca,000000b8,00000047,0000002b,00001b8c,00000000,00000035,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,000002ee,00000083,00000023,00000035,00001b8c,00000024,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=0000245b ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=0000245b ret=01004881 0009:Call gdi32.BitBlt(00001b8c,00000000,0000004a,00000047,00000016,00001b74,00000000,0000004a,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001b8c,00000035,00000000,00000012,0000004a,00001b74,00000035,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001b74,00000012,00000016,00000036,0000004b,00001b74,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001b74,00000000,00000000,00000047,00000016,00000314,00000295,00000042,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001b74,00000000,00000016,00000012,0000004a,00000314,00000295,00000058,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000295,00000042,00000047,00000060,00001b80,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000002a7,000000a2,00000047,00000016,00001b8c,00000000,0000004a,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,000002dc,00000058,00000012,0000004a,00001b8c,00000035,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call gdi32.SelectObject(00001b74,0000006c) ret=01005316 0009:Ret gdi32.SelectObject() retval=00001b98 ret=01005316 0009:Call gdi32.SelectObject(00001b80,0000006c) ret=01005324 0009:Ret gdi32.SelectObject() retval=00001b9c ret=01005324 0009:Call gdi32.SelectObject(00001b8c,0000006c) ret=01005332 0009:Ret gdi32.SelectObject() retval=00001ba0 ret=01005332 0009:Call gdi32.DeleteObject(00001b98) ret=01005340 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005340 0009:Call gdi32.DeleteObject(00001b9c) ret=01005348 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005348 0009:Call gdi32.DeleteObject(00001ba0) ret=01005350 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005350 0009:Call gdi32.DeleteDC(00001b74) ret=0100535e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100535e 0009:Call gdi32.DeleteDC(00001b80) ret=01005366 0009:Ret gdi32.DeleteDC() retval=00000001 ret=01005366 0009:Call gdi32.DeleteDC(00001b8c) ret=0100536e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100536e 0009:Call user32.ReleaseDC(00010030,00000314) ret=0100537c 0009:Ret user32.ReleaseDC() retval=00000001 ret=0100537c 0009:Call user32.InvalidateRect(00010030,0033f618,00000000) ret=0100538a 0009:Ret user32.InvalidateRect() retval=00000001 ret=0100538a 0009:Call KERNEL32.GetModuleHandleW(00000000) ret=01006a97 0009:Ret KERNEL32.GetModuleHandleW() retval=01000000 ret=01006a97 0009:Call winmm.PlaySoundW(0000007c,01000000,00040007) ret=01006aa0 0009:Call ntdll.RtlAllocateHeap(00110000,00000008,0000001c) ret=7e7356bc 0009:Ret ntdll.RtlAllocateHeap() retval=0014cad8 ret=7e7356bc 0009:Call KERNEL32.ResetEvent(00000040) ret=7e735513 0009:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e735513 0009:Call KERNEL32.SetEvent(00000038) ret=7e735520 0009:Ret KERNEL32.SetEvent() retval=00000001 ret=7e735520 0009:Call msacm32.drv.wodMessage(0000ffff,0000000c,00148b18,00000000,00000000) ret=7e728e1f 0009:Call winmm.waveOutReset(00008001) ret=7e0c0180 0009:Call winealsa.drv.wodMessage(00000000,0000000c,7e72ab2b,00000000,00000000) ret=7e728e1f 0009:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1b2580 0009:Ret KERNEL32.CreateEventW() retval=00000070 ret=7e1b2580 0037:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bd,00148b18,0014d3a0,00000000) ret=7e1c4643 0037:Call KERNEL32.IsBadReadPtr(00148b18,0000002c) ret=7e0bdbc9 0037:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 0037:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bd,007ceaa4,0014d3a0,00000000) ret=7e0bdf33 0037:Call KERNEL32.SetEvent(00000068) ret=7e7341f6 0037:Ret KERNEL32.SetEvent() retval=00000001 ret=7e7341f6 0037:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 0037:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 0037:Call KERNEL32.SetEvent(00000070) ret=7e1c4f3d 0037:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c4f3d 0036:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e73429b 0036:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 0036:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 0036:Call msacm32.drv.wodMessage(0000ffff,0000000c,00148b18,00000000,00000000) ret=7e728e1f 0036:Call winmm.waveOutReset(00008001) ret=7e0c0180 0036:Call winealsa.drv.wodMessage(00000000,0000000c,7e72ab2b,00000000,00000000) ret=7e728e1f 0036:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1b2580 0036:Ret KERNEL32.CreateEventW() retval=000000b0 ret=7e1b2580 0036:Call KERNEL32.WaitForSingleObject(000000b0,ffffffff) ret=7e1b2635 0037:Call KERNEL32.SetEvent(000000b0) ret=7e1c4f3d 0037:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c4f3d 0036:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1b2635 0036:Call KERNEL32.CloseHandle(000000b0) ret=7e1b2640 0036:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1b2640 0036:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0036:Ret winmm.waveOutReset() retval=00000000 ret=7e0c0180 0036:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0036:Call msacm32.drv.wodMessage(0000ffff,00000008,00148b18,0014d3a0,00000020) ret=7e728e1f 0036:Call winmm.waveOutUnprepareHeader(00008001,0014d3a0,00000020) ret=7e0c00b6 0036:Call winealsa.drv.wodMessage(00000000,00000008,7e72ab2b,0014d3a0,00000020) ret=7e728e1f 0036:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 0036:Ret winmm.waveOutUnprepareHeader() retval=00000000 ret=7e0c00b6 0036:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0036:Call msacm32.drv.wodMessage(0000ffff,00000008,00148b18,0014d3c0,00000020) ret=7e728e1f 0036:Call winmm.waveOutUnprepareHeader(00008001,0014d3c0,00000020) ret=7e0c00b6 0036:Call winealsa.drv.wodMessage(00000000,00000008,7e72ab2b,0014d3c0,00000020) ret=7e728e1f 0036:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 0036:Ret winmm.waveOutUnprepareHeader() retval=00000000 ret=7e0c00b6 0036:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0036:Call KERNEL32.CloseHandle(00000068) ret=7e7349fd 0036:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e7349fd 0036:Call ntdll.RtlFreeHeap(00110000,00000000,0014d3a0) ret=7e734a23 0036:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e734a23 0036:Call ntdll.RtlFreeHeap(00110000,00000000,00148cb8) ret=7e734a49 0036:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e734a49 0036:Call msacm32.drv.wodMessage(0000ffff,00000006,00148b18,00000000,00000000) ret=7e728e1f 0036:Call winmm.waveOutClose(00008001) ret=7e0c01a5 0036:Call winealsa.drv.wodMessage(00000000,00000006,7e72ab2b,00000000,00000000) ret=7e728e1f 0036:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1b2580 0036:Ret KERNEL32.CreateEventW() retval=00000068 ret=7e1b2580 0036:Call KERNEL32.WaitForSingleObject(00000068,ffffffff) ret=7e1b2635 0037:Call KERNEL32.SetEvent(00000068) ret=7e1c4ea1 0037:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c4ea1 0037:Call KERNEL32.ExitThread(00000000) ret=7e1c4eb0 0037:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) 0037:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0037:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) 0037:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0037:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) 0037:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0037:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) 0037:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) retval=1 0037:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) 0037:Call KERNEL32.TlsGetValue(00000000) ret=7e3f4071 0037:Ret KERNEL32.TlsGetValue() retval=00000000 ret=7e3f4071 0037:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0037:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) 0037:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0036:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1b2635 0036:Call KERNEL32.CloseHandle(00000068) ret=7e1b2640 0036:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1b2640 0036:Call ntdll.RtlFreeHeap(00110000,00000000,0014c7d0) ret=7e1b24dc 0036:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e1b24dc 0036:Call ntdll.RtlDeleteCriticalSection(0013cefc) ret=7e1b24fb 0036:Ret ntdll.RtlDeleteCriticalSection() retval=00000000 ret=7e1b24fb 0036:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bc,00148b18,00000000,00000000) ret=7e1c4643 0036:Call KERNEL32.IsBadReadPtr(00148b18,0000002c) ret=7e0bdbc9 0036:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 0036:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bc,007ceaa4,00000000,00000000) ret=7e0bdf33 0036:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 0036:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 0036:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0036:Call ntdll.RtlFreeHeap(00110000,00000000,00148b50) ret=7e72ae0b 0036:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e72ae0b 0036:Ret winmm.waveOutClose() retval=00000000 ret=7e0c01a5 0036:Call ntdll.RtlFreeHeap(00110000,00000000,00148b18) ret=7e0c01f7 0036:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e0c01f7 0036:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0036:Call ntdll.RtlFreeHeap(00110000,00000000,00148bd8) ret=7e72ae0b 0036:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e72ae0b 0009:Call KERNEL32.WaitForSingleObject(00000070,ffffffff) ret=7e1b2635 0009:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1b2635 0009:Call KERNEL32.CloseHandle(00000070) ret=7e1b2640 0009:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1b2640 0009:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0009:Ret winmm.waveOutReset() retval=00000000 ret=7e0c0180 0009:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0009:Call KERNEL32.WaitForSingleObject(00000040,ffffffff) ret=7e73555a 0036:Call ntdll.RtlFreeHeap(00110000,00000000,00148c28) ret=7e731f79 0036:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e731f79 0036:Call KERNEL32.SetEvent(00000040) ret=7e7343a0 0036:Ret KERNEL32.SetEvent() retval=00000001 ret=7e7343a0 0036:Call KERNEL32.CloseHandle(00000064) ret=7e734340 0036:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e734340 0036:Call ntdll.RtlFreeHeap(00110000,00000000,00148bb0) ret=7e734360 0036:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e734360 0036:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) 0036:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0036:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) 0036:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0036:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) 0036:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0036:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) 0036:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) retval=1 0036:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) 0036:Call KERNEL32.TlsGetValue(00000000) ret=7e3f4071 0036:Ret KERNEL32.TlsGetValue() retval=00000000 ret=7e3f4071 0036:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0036:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) 0036:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0009:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e73555a 0009:Call KERNEL32.ResetEvent(00000038) ret=7e735572 0009:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e735572 0009:Call KERNEL32.CreateThread(00000000,00000000,7e7348a0,0014cad8,00000000,0033f598) ret=7e73560c 0038:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) 0038:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0038:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) 0038:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0038:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) 0038:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) retval=1 0038:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) 0038:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0038:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) 0038:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0038:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) 0038:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0038:Starting thread proc 0x7e7348a0 (arg=0x14cad8) 0038:Call KERNEL32.FindResourceW(01000000,0000007c,7e741bde L"WAVE") ret=7e734ca3 0038:Ret KERNEL32.FindResourceW() retval=01014c40 ret=7e734ca3 0038:Call KERNEL32.LoadResource(01000000,01014c40) ret=7e734cb9 0038:Ret KERNEL32.LoadResource() retval=0104d668 ret=7e734cb9 0038:Call KERNEL32.LockResource(0104d668) ret=7e734cce 0038:Ret KERNEL32.LockResource() retval=0104d668 ret=7e734cce 0038:Call KERNEL32.FreeResource(0104d668) ret=7e734ce9 0038:Ret KERNEL32.FreeResource() retval=00000000 ret=7e734ce9 0038:Call ntdll.RtlAllocateHeap(00110000,00000008,0000005c) ret=7e733960 0038:Ret ntdll.RtlAllocateHeap() retval=00148c28 ret=7e733960 0038:Call KERNEL32.GetFileSize(ffffffff,00000000) ret=7e733ab9 0038:Ret KERNEL32.GetFileSize() retval=ffffffff ret=7e733ab9 0038:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7e733cf0 0038:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e733cf0 0038:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7e734e1c 0038:Ret ntdll.RtlAllocateHeap() retval=00148cb8 ret=7e734e1c 0038:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e734f1f 0038:Ret KERNEL32.CreateEventW() retval=00000068 ret=7e734f1f 0038:Call ntdll.RtlAllocateHeap(00110000,00000008,0000001c) ret=7e72abbe 0038:Ret ntdll.RtlAllocateHeap() retval=0014cb00 ret=7e72abbe 0038:Call msacm32.drv.wodMessage(0000ffff,00000005,008ce918,008ce970,00030000) ret=7e728e1f 0038:Call ntdll.RtlAllocateHeap(00110000,00000000,0000002c) ret=7e0bfd8c 0038:Ret ntdll.RtlAllocateHeap() retval=0014cb28 ret=7e0bfd8c 0038:Call winmm.waveOutGetNumDevs() ret=7e0bfdb5 0038:Ret winmm.waveOutGetNumDevs() retval=00000002 ret=7e0bfdb5 0038:Call winmm.waveOutOpen(0014cb30,00000000,00148cb8,7e0bde60,0014cb28,00030008) ret=7e0c0313 0038:Call ntdll.RtlAllocateHeap(00110000,00000008,0000001c) ret=7e72abbe 0038:Ret ntdll.RtlAllocateHeap() retval=0014cb60 ret=7e72abbe 0038:Call winealsa.drv.wodMessage(00000000,00000005,008ce5b8,008ce610,00030008) ret=7e728e1f 0038:Call ntdll.RtlAllocateHeap(00110000,00000008,00000068) ret=7e1c6c82 0038:Ret ntdll.RtlAllocateHeap() retval=00148b18 ret=7e1c6c82 0038:Call ntdll.RtlAllocateHeap(00110000,00000008,00000300) ret=7e1b2459 0038:Ret ntdll.RtlAllocateHeap() retval=0014c7d0 ret=7e1b2459 0038:Call KERNEL32.InitializeCriticalSection(0013cefc) ret=7e1b2469 0038:Ret KERNEL32.InitializeCriticalSection() retval=00000001 ret=7e1b2469 0038:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1c73ab 0038:Ret KERNEL32.CreateEventW() retval=00000070 ret=7e1c73ab 0038:Call KERNEL32.CreateThread(00000000,00000000,7e1c5570,00000000,00000000,0013cedc) ret=7e1c73ef 0009:Ret KERNEL32.CreateThread() retval=00000064 ret=7e73560c 0009:Call KERNEL32.SetThreadPriority(00000064,0000000f) ret=7e73562d 0009:Ret KERNEL32.SetThreadPriority() retval=00000001 ret=7e73562d 0009:Ret winmm.PlaySoundW() retval=00000001 ret=01006aa0 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,0000000c) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c5850 ret=0100a7d2 0009:Call user32.GetClientRect(00010030,0033f608) ret=01005145 0009:Ret user32.GetClientRect() retval=00000001 ret=01005145 0009:Call user32.GetDC(00010030) ret=010051ad 0009:Ret user32.GetDC() retval=00000314 ret=010051ad 0009:Call gdi32.CreateCompatibleDC(00000314) ret=010051bc 0009:Ret gdi32.CreateCompatibleDC() retval=00001c00 ret=010051bc 0009:Call gdi32.CreateCompatibleDC(00000314) ret=010051ca 0009:Ret gdi32.CreateCompatibleDC() retval=00001c0c ret=010051ca 0009:Call gdi32.CreateCompatibleDC(00000314) ret=010051d8 0009:Ret gdi32.CreateCompatibleDC() retval=00001c18 ret=010051d8 0009:Call gdi32.CreateCompatibleBitmap(00000314,00000047,00000060) ret=010051f8 0009:Ret gdi32.CreateCompatibleBitmap() retval=00001c24 ret=010051f8 0009:Call gdi32.CreateCompatibleBitmap(00000314,00000047,00000060) ret=01005212 0009:Ret gdi32.CreateCompatibleBitmap() retval=00001c28 ret=01005212 0009:Call gdi32.CreateCompatibleBitmap(00000314,00000047,00000060) ret=0100522c 0009:Ret gdi32.CreateCompatibleBitmap() retval=00001c2c ret=0100522c 0009:Call gdi32.SelectObject(00001c00,00001c24) ret=01005246 0009:Ret gdi32.SelectObject() retval=0000006c ret=01005246 0009:Call gdi32.SelectObject(00001c0c,00001c28) ret=0100525a 0009:Ret gdi32.SelectObject() retval=0000006c ret=0100525a 0009:Call gdi32.SelectObject(00001c18,00001c2c) ret=0100526e 0009:Ret gdi32.SelectObject() retval=0000006c ret=0100526e 0009:Call user32.LoadBitmapW(01000000,0033f5a0 L"CARD43") ret=010028ff 0039:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) 0039:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0039:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) 0039:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0039:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) 0039:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) retval=1 0039:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) 0039:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0039:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) 0039:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0039:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) 0039:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0039:Starting thread proc 0x7e1c5570 (arg=(nil)) 0039:Call KERNEL32.SetEvent(00000070) ret=7e1c55aa 0039:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c55aa 0038:Ret KERNEL32.CreateThread() retval=000000b0 ret=7e1c73ef 0038:Call KERNEL32.SetThreadPriority(000000b0,0000000f) ret=7e1c7413 0038:Ret KERNEL32.SetThreadPriority() retval=00000001 ret=7e1c7413 0038:Call KERNEL32.WaitForSingleObject(00000070,ffffffff) ret=7e1c742f 0038:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1c742f 0038:Call KERNEL32.CloseHandle(00000070) ret=7e1c7443 0038:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1c7443 0038:Call ntdll.RtlFreeHeap(00110000,00000000,00148b18) ret=7e1c7479 0038:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e1c7479 0038:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bb,0014cb28,00000000,00000000) ret=7e1c4643 0038:Call KERNEL32.IsBadReadPtr(0014cb28,0000002c) ret=7e0bdbc9 0038:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 0038:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bb,008ceaa4,00000000,00000000) ret=7e0bdf33 0038:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 0038:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 0038:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0038:Ret winmm.waveOutOpen() retval=00000000 ret=7e0c0313 0038:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0038:Call ntdll.RtlAllocateHeap(00110000,00000000,000039ac) ret=7e73520d 0038:Ret ntdll.RtlAllocateHeap() retval=0014d3a0 ret=7e73520d 0038:Call msacm32.drv.wodMessage(0000ffff,00000007,0014cb28,0014d3a0,00000020) ret=7e728e1f 0038:Call winmm.waveOutPrepareHeader(00008001,0014d3a0,00000020) ret=7e0c09d8 0038:Call winealsa.drv.wodMessage(00000000,00000007,7e72ab2b,0014d3a0,00000020) ret=7e728e1f 0038:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 0038:Ret winmm.waveOutPrepareHeader() retval=00000000 ret=7e0c09d8 0038:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0038:Call msacm32.drv.wodMessage(0000ffff,00000007,0014cb28,0014d3c0,00000020) ret=7e728e1f 0038:Call winmm.waveOutPrepareHeader(00008001,0014d3c0,00000020) ret=7e0c09d8 0038:Call winealsa.drv.wodMessage(00000000,00000007,7e72ab2b,0014d3c0,00000020) ret=7e728e1f 0038:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 0038:Ret winmm.waveOutPrepareHeader() retval=00000000 ret=7e0c09d8 0038:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0038:Call KERNEL32.WaitForSingleObject(00000038,00000000) ret=7e735343 0038:Ret KERNEL32.WaitForSingleObject() retval=00000102 ret=7e735343 0038:Call msacm32.drv.wodMessage(0000ffff,00000009,0014cb28,0014d3a0,00000020) ret=7e728e1f 0038:Call winmm.waveOutWrite(00008001,0014d3a0,00000020) ret=7e0c09b5 0038:Call winealsa.drv.wodMessage(00000000,00000009,7e72ab2b,0014d3a0,00000020) ret=7e728e1f 0038:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0038:Ret winmm.waveOutWrite() retval=00000000 ret=7e0c09b5 0038:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0038:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 0038:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 0038:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 0038:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 0038:Call KERNEL32.WaitForSingleObject(00000068,ffffffff) ret=7e73429b 0009:Ret user32.LoadBitmapW() retval=00001c3c ret=010028ff 0009:Call gdi32.CreateCompatibleDC(00001c0c) ret=01002909 0009:Ret gdi32.CreateCompatibleDC() retval=00001c50 ret=01002909 0009:Call gdi32.SelectObject(00001c50,00001c3c) ret=01002917 0009:Ret gdi32.SelectObject() retval=0000006c ret=01002917 0009:Call gdi32.BitBlt(00001c0c,00000000,00000000,00000047,00000060,00001c50,00000000,00000000,00cc0020) ret=01002938 0009:Ret gdi32.BitBlt() retval=00000001 ret=01002938 0009:Call gdi32.SelectObject(00001c50,0000006c) ret=0100293e 0009:Ret gdi32.SelectObject() retval=00001c3c ret=0100293e 0009:Call gdi32.DeleteObject(00001c3c) ret=01002947 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01002947 0009:Call gdi32.DeleteDC(00001c50) ret=0100294e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100294e 0009:Call gdi32.SetPixel(00001c0c,00000000,00000000,00008000) ret=01002969 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002969 0009:Call gdi32.SetPixel(00001c0c,00000001,00000000,00008000) ret=01002976 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002976 0009:Call gdi32.SetPixel(00001c0c,00000000,00000001,00008000) ret=01002982 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002982 0009:Call gdi32.SetPixel(00001c0c,00000046,00000000,00008000) ret=0100298f 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100298f 0009:Call gdi32.SetPixel(00001c0c,00000045,00000000,00008000) ret=0100299c 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100299c 0009:Call gdi32.SetPixel(00001c0c,00000046,00000001,00008000) ret=010029ab 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ab 0009:Call gdi32.SetPixel(00001c0c,00000000,0000005f,00008000) ret=010029bf 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029bf 0009:Call gdi32.SetPixel(00001c0c,00000001,0000005f,00008000) ret=010029d0 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029d0 0009:Call gdi32.SetPixel(00001c0c,00000000,0000005e,00008000) ret=010029de 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029de 0009:Call gdi32.SetPixel(00001c0c,00000046,0000005f,00008000) ret=010029ef 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ef 0009:Call gdi32.SetPixel(00001c0c,00000045,0000005f,00008000) ret=01002a00 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a00 0009:Call gdi32.SetPixel(00001c0c,00000046,0000005e,00008000) ret=01002a11 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a11 0009:Call user32.LoadBitmapW(01000000,010012c8 L"CARDBACK") ret=010028ff 0009:Ret user32.LoadBitmapW() retval=00001c68 ret=010028ff 0009:Call gdi32.CreateCompatibleDC(00001c00) ret=01002909 0009:Ret gdi32.CreateCompatibleDC() retval=00001c7c ret=01002909 0009:Call gdi32.SelectObject(00001c7c,00001c68) ret=01002917 0009:Ret gdi32.SelectObject() retval=0000006c ret=01002917 0009:Call gdi32.BitBlt(00001c00,00000000,00000000,00000047,00000060,00001c7c,00000000,00000000,00cc0020) ret=01002938 0009:Ret gdi32.BitBlt() retval=00000001 ret=01002938 0009:Call gdi32.SelectObject(00001c7c,0000006c) ret=0100293e 0009:Ret gdi32.SelectObject() retval=00001c68 ret=0100293e 0009:Call gdi32.DeleteObject(00001c68) ret=01002947 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01002947 0009:Call gdi32.DeleteDC(00001c7c) ret=0100294e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100294e 0009:Call gdi32.SetPixel(00001c00,00000000,00000000,00008000) ret=01002969 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002969 0009:Call gdi32.SetPixel(00001c00,00000001,00000000,00008000) ret=01002976 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002976 0009:Call gdi32.SetPixel(00001c00,00000000,00000001,00008000) ret=01002982 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002982 0009:Call gdi32.SetPixel(00001c00,00000046,00000000,00008000) ret=0100298f 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100298f 0009:Call gdi32.SetPixel(00001c00,00000045,00000000,00008000) ret=0100299c 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100299c 0009:Call gdi32.SetPixel(00001c00,00000046,00000001,00008000) ret=010029ab 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ab 0009:Call gdi32.SetPixel(00001c00,00000000,0000005f,00008000) ret=010029bf 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029bf 0009:Call gdi32.SetPixel(00001c00,00000001,0000005f,00008000) ret=010029d0 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029d0 0009:Call gdi32.SetPixel(00001c00,00000000,0000005e,00008000) ret=010029de 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029de 0009:Call gdi32.SetPixel(00001c00,00000046,0000005f,00008000) ret=010029ef 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ef 0009:Call gdi32.SetPixel(00001c00,00000045,0000005f,00008000) ret=01002a00 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a00 0009:Call gdi32.SetPixel(00001c00,00000046,0000005e,00008000) ret=01002a11 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a11 0009:Call winmm.timeGetTime() ret=010047d1 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00002489 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00002489 ret=010047d1 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00002489 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00002489 ret=01004881 0009:Call gdi32.BitBlt(00001c00,00000000,00000000,00000048,00000061,00001c00,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00000314,0000044d,00000258,00000047,00000060,00001c0c,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=0000248f ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=0000248f ret=01004881 0009:Call gdi32.BitBlt(00001c18,00000000,00000040,00000047,00000020,00001c00,00000000,00000040,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001c18,00000034,00000000,00000013,00000040,00001c00,00000034,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001c00,00000013,00000020,00000035,00000041,00001c00,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001c00,00000000,00000000,00000047,00000020,00000314,0000043a,00000238,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001c00,00000000,00000020,00000013,00000040,00000314,0000043a,00000258,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,0000043a,00000238,00000047,00000060,00001c0c,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,0000044d,00000298,00000047,00000020,00001c18,00000000,00000040,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000481,00000258,00000013,00000040,00001c18,00000034,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00002497 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00002497 ret=01004881 0009:Call gdi32.BitBlt(00001c18,00000000,00000036,00000047,0000002a,00001c00,00000000,00000036,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001c18,0000002e,00000000,00000019,00000036,00001c00,0000002e,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001c00,00000019,0000002a,0000002f,00000037,00001c00,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001c00,00000000,00000000,00000047,0000002a,00000314,00000421,0000020e,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001c00,00000000,0000002a,00000019,00000036,00000314,00000421,00000238,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000421,0000020e,00000047,00000060,00001c0c,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,0000043a,0000026e,00000047,0000002a,00001c18,00000000,00000036,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000468,00000238,00000019,00000036,00001c18,0000002e,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=0000249f ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=0000249f ret=01004881 0009:Call gdi32.BitBlt(00001c18,00000000,00000035,00000047,0000002b,00001c00,00000000,00000035,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001c18,0000002e,00000000,00000019,00000035,00001c00,0000002e,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001c00,00000019,0000002b,0000002f,00000036,00001c00,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001c00,00000000,00000000,00000047,0000002b,00000314,00000408,000001e3,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001c00,00000000,0000002b,00000019,00000035,00000314,00000408,0000020e,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000408,000001e3,00000047,00000060,00001c0c,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000421,00000243,00000047,0000002b,00001c18,00000000,00000035,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000044f,0000020e,00000019,00000035,00001c18,0000002e,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000024a7 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000024a7 ret=01004881 0009:Call gdi32.BitBlt(00001c18,00000000,00000035,00000047,0000002b,00001c00,00000000,00000035,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001c18,0000002d,00000000,0000001a,00000035,00001c00,0000002d,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001c00,0000001a,0000002b,0000002e,00000036,00001c00,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001c00,00000000,00000000,00000047,0000002b,00000314,000003ee,000001b8,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001c00,00000000,0000002b,0000001a,00000035,00000314,000003ee,000001e3,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000003ee,000001b8,00000047,00000060,00001c0c,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000408,00000218,00000047,0000002b,00001c18,00000000,00000035,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000435,000001e3,0000001a,00000035,00001c18,0000002d,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000024af ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000024af ret=01004881 0009:Call gdi32.BitBlt(00001c18,00000000,00000036,00000047,0000002a,00001c00,00000000,00000036,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001c18,0000002e,00000000,00000019,00000036,00001c00,0000002e,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001c00,00000019,0000002a,0000002f,00000037,00001c00,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001c00,00000000,00000000,00000047,0000002a,00000314,000003d5,0000018e,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001c00,00000000,0000002a,00000019,00000036,00000314,000003d5,000001b8,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000003d5,0000018e,00000047,00000060,00001c0c,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000003ee,000001ee,00000047,0000002a,00001c18,00000000,00000036,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000041c,000001b8,00000019,00000036,00001c18,0000002e,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000024b7 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000024b7 ret=01004881 0009:Call gdi32.BitBlt(00001c18,00000000,00000035,00000047,0000002b,00001c00,00000000,00000035,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001c18,0000002d,00000000,0000001a,00000035,00001c00,0000002d,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001c00,0000001a,0000002b,0000002e,00000036,00001c00,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001c00,00000000,00000000,00000047,0000002b,00000314,000003bb,00000163,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001c00,00000000,0000002b,0000001a,00000035,00000314,000003bb,0000018e,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000003bb,00000163,00000047,00000060,00001c0c,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000003d5,000001c3,00000047,0000002b,00001c18,00000000,00000035,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000402,0000018e,0000001a,00000035,00001c18,0000002d,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000024bf ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000024bf ret=01004881 0009:Call gdi32.BitBlt(00001c18,00000000,00000035,00000047,0000002b,00001c00,00000000,00000035,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001c18,0000002e,00000000,00000019,00000035,00001c00,0000002e,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001c00,00000019,0000002b,0000002f,00000036,00001c00,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001c00,00000000,00000000,00000047,0000002b,00000314,000003a2,00000138,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001c00,00000000,0000002b,00000019,00000035,00000314,000003a2,00000163,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000003a2,00000138,00000047,00000060,00001c0c,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000003bb,00000198,00000047,0000002b,00001c18,00000000,00000035,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,000003e9,00000163,00000019,00000035,00001c18,0000002e,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000024c7 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000024c7 ret=01004881 0009:Call gdi32.BitBlt(00001c18,00000000,00000035,00000047,0000002b,00001c00,00000000,00000035,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001c18,0000002d,00000000,0000001a,00000035,00001c00,0000002d,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001c00,0000001a,0000002b,0000002e,00000036,00001c00,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001c00,00000000,00000000,00000047,0000002b,00000314,00000388,0000010d,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001c00,00000000,0000002b,0000001a,00000035,00000314,00000388,00000138,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000388,0000010d,00000047,00000060,00001c0c,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000003a2,0000016d,00000047,0000002b,00001c18,00000000,00000035,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,000003cf,00000138,0000001a,00000035,00001c18,0000002d,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000024cf ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000024cf ret=01004881 0009:Call gdi32.BitBlt(00001c18,00000000,00000036,00000047,0000002a,00001c00,00000000,00000036,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001c18,0000002e,00000000,00000019,00000036,00001c00,0000002e,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001c00,00000019,0000002a,0000002f,00000037,00001c00,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001c00,00000000,00000000,00000047,0000002a,00000314,0000036f,000000e3,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001c00,00000000,0000002a,00000019,00000036,00000314,0000036f,0000010d,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,0000036f,000000e3,00000047,00000060,00001c0c,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000388,00000143,00000047,0000002a,00001c18,00000000,00000036,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,000003b6,0000010d,00000019,00000036,00001c18,0000002e,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000024d7 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000024d7 ret=01004881 0009:Call gdi32.BitBlt(00001c18,00000000,00000035,00000047,0000002b,00001c00,00000000,00000035,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001c18,0000002d,00000000,0000001a,00000035,00001c00,0000002d,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001c00,0000001a,0000002b,0000002e,00000036,00001c00,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001c00,00000000,00000000,00000047,0000002b,00000314,00000355,000000b8,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001c00,00000000,0000002b,0000001a,00000035,00000314,00000355,000000e3,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000355,000000b8,00000047,00000060,00001c0c,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,0000036f,00000118,00000047,0000002b,00001c18,00000000,00000035,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000039c,000000e3,0000001a,00000035,00001c18,0000002d,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000024df ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000024df ret=01004881 0009:Call gdi32.BitBlt(00001c18,00000000,00000035,00000047,0000002b,00001c00,00000000,00000035,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001c18,0000002e,00000000,00000019,00000035,00001c00,0000002e,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001c00,00000019,0000002b,0000002f,00000036,00001c00,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001c00,00000000,00000000,00000047,0000002b,00000314,0000033c,0000008d,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001c00,00000000,0000002b,00000019,00000035,00000314,0000033c,000000b8,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,0000033c,0000008d,00000047,00000060,00001c0c,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000355,000000ed,00000047,0000002b,00001c18,00000000,00000035,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000383,000000b8,00000019,00000035,00001c18,0000002e,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000024e7 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000024e7 ret=01004881 0009:Call gdi32.BitBlt(00001c18,00000000,00000036,00000047,0000002a,00001c00,00000000,00000036,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001c18,0000002e,00000000,00000019,00000036,00001c00,0000002e,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001c00,00000019,0000002a,0000002f,00000037,00001c00,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001c00,00000000,00000000,00000047,0000002a,00000314,00000323,00000063,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001c00,00000000,0000002a,00000019,00000036,00000314,00000323,0000008d,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000323,00000063,00000047,00000060,00001c0c,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,0000033c,000000c3,00000047,0000002a,00001c18,00000000,00000036,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000036a,0000008d,00000019,00000036,00001c18,0000002e,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000024ef ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000024ef ret=01004881 0009:Call gdi32.BitBlt(00001c18,00000000,0000003f,00000047,00000021,00001c00,00000000,0000003f,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001c18,00000033,00000000,00000014,0000003f,00001c00,00000033,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001c00,00000014,00000021,00000034,00000040,00001c00,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001c00,00000000,00000000,00000047,00000021,00000314,0000030f,00000042,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001c00,00000000,00000021,00000014,0000003f,00000314,0000030f,00000063,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,0000030f,00000042,00000047,00000060,00001c0c,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000323,000000a2,00000047,00000021,00001c18,00000000,0000003f,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000356,00000063,00000014,0000003f,00001c18,00000033,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call gdi32.SelectObject(00001c00,0000006c) ret=01005316 0009:Ret gdi32.SelectObject() retval=00001c24 ret=01005316 0009:Call gdi32.SelectObject(00001c0c,0000006c) ret=01005324 0009:Ret gdi32.SelectObject() retval=00001c28 ret=01005324 0009:Call gdi32.SelectObject(00001c18,0000006c) ret=01005332 0009:Ret gdi32.SelectObject() retval=00001c2c ret=01005332 0009:Call gdi32.DeleteObject(00001c24) ret=01005340 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005340 0009:Call gdi32.DeleteObject(00001c28) ret=01005348 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005348 0009:Call gdi32.DeleteObject(00001c2c) ret=01005350 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005350 0009:Call gdi32.DeleteDC(00001c00) ret=0100535e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100535e 0009:Call gdi32.DeleteDC(00001c0c) ret=01005366 0009:Ret gdi32.DeleteDC() retval=00000001 ret=01005366 0009:Call gdi32.DeleteDC(00001c18) ret=0100536e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100536e 0009:Call user32.ReleaseDC(00010030,00000314) ret=0100537c 0009:Ret user32.ReleaseDC() retval=00000001 ret=0100537c 0009:Call user32.InvalidateRect(00010030,0033f618,00000000) ret=0100538a 0009:Ret user32.InvalidateRect() retval=00000001 ret=0100538a 0009:Call KERNEL32.GetModuleHandleW(00000000) ret=01006a97 0009:Ret KERNEL32.GetModuleHandleW() retval=01000000 ret=01006a97 0009:Call winmm.PlaySoundW(0000007c,01000000,00040007) ret=01006aa0 0009:Call ntdll.RtlAllocateHeap(00110000,00000008,0000001c) ret=7e7356bc 0009:Ret ntdll.RtlAllocateHeap() retval=00148bb0 ret=7e7356bc 0009:Call KERNEL32.ResetEvent(00000040) ret=7e735513 0009:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e735513 0009:Call KERNEL32.SetEvent(00000038) ret=7e735520 0009:Ret KERNEL32.SetEvent() retval=00000001 ret=7e735520 0009:Call msacm32.drv.wodMessage(0000ffff,0000000c,0014cb28,00000000,00000000) ret=7e728e1f 0009:Call winmm.waveOutReset(00008001) ret=7e0c0180 0009:Call winealsa.drv.wodMessage(00000000,0000000c,7e72ab2b,00000000,00000000) ret=7e728e1f 0009:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1b2580 0009:Ret KERNEL32.CreateEventW() retval=00000070 ret=7e1b2580 0039:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bd,0014cb28,0014d3a0,00000000) ret=7e1c4643 0039:Call KERNEL32.IsBadReadPtr(0014cb28,0000002c) ret=7e0bdbc9 0039:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 0039:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bd,008ceaa4,0014d3a0,00000000) ret=7e0bdf33 0039:Call KERNEL32.SetEvent(00000068) ret=7e7341f6 0039:Ret KERNEL32.SetEvent() retval=00000001 ret=7e7341f6 0039:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 0039:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 0039:Call KERNEL32.SetEvent(00000070) ret=7e1c4f3d 0039:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c4f3d 0038:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e73429b 0038:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 0038:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 0038:Call msacm32.drv.wodMessage(0000ffff,0000000c,0014cb28,00000000,00000000) ret=7e728e1f 0038:Call winmm.waveOutReset(00008001) ret=7e0c0180 0038:Call winealsa.drv.wodMessage(00000000,0000000c,7e72ab2b,00000000,00000000) ret=7e728e1f 0038:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1b2580 0038:Ret KERNEL32.CreateEventW() retval=000000b4 ret=7e1b2580 0038:Call KERNEL32.WaitForSingleObject(000000b4,ffffffff) ret=7e1b2635 0039:Call KERNEL32.SetEvent(000000b4) ret=7e1c4f3d 0039:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c4f3d 0038:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1b2635 0038:Call KERNEL32.CloseHandle(000000b4) ret=7e1b2640 0038:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1b2640 0038:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0038:Ret winmm.waveOutReset() retval=00000000 ret=7e0c0180 0038:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0038:Call msacm32.drv.wodMessage(0000ffff,00000008,0014cb28,0014d3a0,00000020) ret=7e728e1f 0038:Call winmm.waveOutUnprepareHeader(00008001,0014d3a0,00000020) ret=7e0c00b6 0038:Call winealsa.drv.wodMessage(00000000,00000008,7e72ab2b,0014d3a0,00000020) ret=7e728e1f 0038:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 0038:Ret winmm.waveOutUnprepareHeader() retval=00000000 ret=7e0c00b6 0038:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0038:Call msacm32.drv.wodMessage(0000ffff,00000008,0014cb28,0014d3c0,00000020) ret=7e728e1f 0038:Call winmm.waveOutUnprepareHeader(00008001,0014d3c0,00000020) ret=7e0c00b6 0038:Call winealsa.drv.wodMessage(00000000,00000008,7e72ab2b,0014d3c0,00000020) ret=7e728e1f 0038:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 0038:Ret winmm.waveOutUnprepareHeader() retval=00000000 ret=7e0c00b6 0038:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0038:Call KERNEL32.CloseHandle(00000068) ret=7e7349fd 0038:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e7349fd 0038:Call ntdll.RtlFreeHeap(00110000,00000000,0014d3a0) ret=7e734a23 0038:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e734a23 0038:Call ntdll.RtlFreeHeap(00110000,00000000,00148cb8) ret=7e734a49 0038:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e734a49 0038:Call msacm32.drv.wodMessage(0000ffff,00000006,0014cb28,00000000,00000000) ret=7e728e1f 0038:Call winmm.waveOutClose(00008001) ret=7e0c01a5 0038:Call winealsa.drv.wodMessage(00000000,00000006,7e72ab2b,00000000,00000000) ret=7e728e1f 0038:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1b2580 0038:Ret KERNEL32.CreateEventW() retval=00000068 ret=7e1b2580 0038:Call KERNEL32.WaitForSingleObject(00000068,ffffffff) ret=7e1b2635 0039:Call KERNEL32.SetEvent(00000068) ret=7e1c4ea1 0039:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c4ea1 0039:Call KERNEL32.ExitThread(00000000) ret=7e1c4eb0 0039:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) 0039:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0039:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) 0039:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0039:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) 0039:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0039:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) 0039:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) retval=1 0039:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) 0039:Call KERNEL32.TlsGetValue(00000000) ret=7e3f4071 0039:Ret KERNEL32.TlsGetValue() retval=00000000 ret=7e3f4071 0039:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0039:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) 0039:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0038:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1b2635 0038:Call KERNEL32.CloseHandle(00000068) ret=7e1b2640 0038:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1b2640 0038:Call ntdll.RtlFreeHeap(00110000,00000000,0014c7d0) ret=7e1b24dc 0038:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e1b24dc 0038:Call ntdll.RtlDeleteCriticalSection(0013cefc) ret=7e1b24fb 0038:Ret ntdll.RtlDeleteCriticalSection() retval=00000000 ret=7e1b24fb 0038:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bc,0014cb28,00000000,00000000) ret=7e1c4643 0038:Call KERNEL32.IsBadReadPtr(0014cb28,0000002c) ret=7e0bdbc9 0038:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 0038:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bc,008ceaa4,00000000,00000000) ret=7e0bdf33 0038:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 0038:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 0038:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0038:Call ntdll.RtlFreeHeap(00110000,00000000,0014cb60) ret=7e72ae0b 0038:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e72ae0b 0038:Ret winmm.waveOutClose() retval=00000000 ret=7e0c01a5 0038:Call ntdll.RtlFreeHeap(00110000,00000000,0014cb28) ret=7e0c01f7 0038:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e0c01f7 0038:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0038:Call ntdll.RtlFreeHeap(00110000,00000000,0014cb00) ret=7e72ae0b 0038:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e72ae0b 0009:Call KERNEL32.WaitForSingleObject(00000070,ffffffff) ret=7e1b2635 0009:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1b2635 0009:Call KERNEL32.CloseHandle(00000070) ret=7e1b2640 0009:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1b2640 0009:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0009:Ret winmm.waveOutReset() retval=00000000 ret=7e0c0180 0009:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0009:Call KERNEL32.WaitForSingleObject(00000040,ffffffff) ret=7e73555a 0038:Call ntdll.RtlFreeHeap(00110000,00000000,00148c28) ret=7e731f79 0038:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e731f79 0038:Call KERNEL32.SetEvent(00000040) ret=7e7343a0 0038:Ret KERNEL32.SetEvent() retval=00000001 ret=7e7343a0 0038:Call KERNEL32.CloseHandle(00000064) ret=7e734340 0038:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e734340 0038:Call ntdll.RtlFreeHeap(00110000,00000000,0014cad8) ret=7e734360 0038:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e734360 0038:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) 0038:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0038:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) 0038:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0038:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) 0038:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0038:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) 0038:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) retval=1 0038:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) 0038:Call KERNEL32.TlsGetValue(00000000) ret=7e3f4071 0038:Ret KERNEL32.TlsGetValue() retval=00000000 ret=7e3f4071 0038:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0038:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) 0038:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0009:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e73555a 0009:Call KERNEL32.ResetEvent(00000038) ret=7e735572 0009:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e735572 0009:Call KERNEL32.CreateThread(00000000,00000000,7e7348a0,00148bb0,00000000,0033f598) ret=7e73560c 003a:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) 003a:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 003a:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) 003a:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 003a:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) 003a:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) retval=1 003a:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) 003a:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 003a:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) 003a:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 003a:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) 003a:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 003a:Starting thread proc 0x7e7348a0 (arg=0x148bb0) 003a:Call KERNEL32.FindResourceW(01000000,0000007c,7e741bde L"WAVE") ret=7e734ca3 003a:Ret KERNEL32.FindResourceW() retval=01014c40 ret=7e734ca3 003a:Call KERNEL32.LoadResource(01000000,01014c40) ret=7e734cb9 003a:Ret KERNEL32.LoadResource() retval=0104d668 ret=7e734cb9 003a:Call KERNEL32.LockResource(0104d668) ret=7e734cce 003a:Ret KERNEL32.LockResource() retval=0104d668 ret=7e734cce 003a:Call KERNEL32.FreeResource(0104d668) ret=7e734ce9 003a:Ret KERNEL32.FreeResource() retval=00000000 ret=7e734ce9 003a:Call ntdll.RtlAllocateHeap(00110000,00000008,0000005c) ret=7e733960 003a:Ret ntdll.RtlAllocateHeap() retval=00148c28 ret=7e733960 003a:Call KERNEL32.GetFileSize(ffffffff,00000000) ret=7e733ab9 003a:Ret KERNEL32.GetFileSize() retval=ffffffff ret=7e733ab9 003a:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7e733cf0 003a:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e733cf0 003a:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7e734e1c 003a:Ret ntdll.RtlAllocateHeap() retval=00148cb8 ret=7e734e1c 003a:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e734f1f 003a:Ret KERNEL32.CreateEventW() retval=00000068 ret=7e734f1f 003a:Call ntdll.RtlAllocateHeap(00110000,00000008,0000001c) ret=7e72abbe 003a:Ret ntdll.RtlAllocateHeap() retval=00148bd8 ret=7e72abbe 003a:Call msacm32.drv.wodMessage(0000ffff,00000005,007ce918,007ce970,00030000) ret=7e728e1f 003a:Call ntdll.RtlAllocateHeap(00110000,00000000,0000002c) ret=7e0bfd8c 003a:Ret ntdll.RtlAllocateHeap() retval=00148b18 ret=7e0bfd8c 003a:Call winmm.waveOutGetNumDevs() ret=7e0bfdb5 003a:Ret winmm.waveOutGetNumDevs() retval=00000002 ret=7e0bfdb5 003a:Call winmm.waveOutOpen(00148b20,00000000,00148cb8,7e0bde60,00148b18,00030008) ret=7e0c0313 003a:Call ntdll.RtlAllocateHeap(00110000,00000008,0000001c) ret=7e72abbe 003a:Ret ntdll.RtlAllocateHeap() retval=00148b50 ret=7e72abbe 003a:Call winealsa.drv.wodMessage(00000000,00000005,007ce5b8,007ce610,00030008) ret=7e728e1f 003a:Call ntdll.RtlAllocateHeap(00110000,00000008,00000068) ret=7e1c6c82 003a:Ret ntdll.RtlAllocateHeap() retval=0014bef8 ret=7e1c6c82 003a:Call ntdll.RtlAllocateHeap(00110000,00000008,00000300) ret=7e1b2459 003a:Ret ntdll.RtlAllocateHeap() retval=0014c7d0 ret=7e1b2459 003a:Call KERNEL32.InitializeCriticalSection(0013cefc) ret=7e1b2469 003a:Ret KERNEL32.InitializeCriticalSection() retval=00000001 ret=7e1b2469 003a:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1c73ab 003a:Ret KERNEL32.CreateEventW() retval=00000070 ret=7e1c73ab 003a:Call KERNEL32.CreateThread(00000000,00000000,7e1c5570,00000000,00000000,0013cedc) ret=7e1c73ef 0009:Ret KERNEL32.CreateThread() retval=00000064 ret=7e73560c 0009:Call KERNEL32.SetThreadPriority(00000064,0000000f) ret=7e73562d 0009:Ret KERNEL32.SetThreadPriority() retval=00000001 ret=7e73562d 0009:Ret winmm.PlaySoundW() retval=00000001 ret=01006aa0 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,0000000c) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c5868 ret=0100a7d2 0009:Call user32.GetClientRect(00010030,0033f608) ret=01005145 0009:Ret user32.GetClientRect() retval=00000001 ret=01005145 0009:Call user32.GetDC(00010030) ret=010051ad 0009:Ret user32.GetDC() retval=00000314 ret=010051ad 0009:Call gdi32.CreateCompatibleDC(00000314) ret=010051bc 0009:Ret gdi32.CreateCompatibleDC() retval=00001c8c ret=010051bc 0009:Call gdi32.CreateCompatibleDC(00000314) ret=010051ca 0009:Ret gdi32.CreateCompatibleDC() retval=00001c98 ret=010051ca 0009:Call gdi32.CreateCompatibleDC(00000314) ret=010051d8 0009:Ret gdi32.CreateCompatibleDC() retval=00001ca4 ret=010051d8 0009:Call gdi32.CreateCompatibleBitmap(00000314,00000047,00000060) ret=010051f8 0009:Ret gdi32.CreateCompatibleBitmap() retval=00001cb0 ret=010051f8 0009:Call gdi32.CreateCompatibleBitmap(00000314,00000047,00000060) ret=01005212 0009:Ret gdi32.CreateCompatibleBitmap() retval=00001cb4 ret=01005212 0009:Call gdi32.CreateCompatibleBitmap(00000314,00000047,00000060) ret=0100522c 0009:Ret gdi32.CreateCompatibleBitmap() retval=00001cb8 ret=0100522c 0009:Call gdi32.SelectObject(00001c8c,00001cb0) ret=01005246 0009:Ret gdi32.SelectObject() retval=0000006c ret=01005246 0009:Call gdi32.SelectObject(00001c98,00001cb4) ret=0100525a 0009:Ret gdi32.SelectObject() retval=0000006c ret=0100525a 0009:Call gdi32.SelectObject(00001ca4,00001cb8) ret=0100526e 0009:Ret gdi32.SelectObject() retval=0000006c ret=0100526e 0009:Call user32.LoadBitmapW(01000000,0033f5a0 L"CARD48") ret=010028ff 003b:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) 003b:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 003b:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) 003b:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 003b:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) 003b:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) retval=1 003b:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) 003b:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 003b:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) 003b:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 003b:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) 003b:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 003b:Starting thread proc 0x7e1c5570 (arg=(nil)) 003b:Call KERNEL32.SetEvent(00000070) ret=7e1c55aa 003b:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c55aa 003a:Ret KERNEL32.CreateThread() retval=000000b4 ret=7e1c73ef 003a:Call KERNEL32.SetThreadPriority(000000b4,0000000f) ret=7e1c7413 003a:Ret KERNEL32.SetThreadPriority() retval=00000001 ret=7e1c7413 003a:Call KERNEL32.WaitForSingleObject(00000070,ffffffff) ret=7e1c742f 003a:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1c742f 003a:Call KERNEL32.CloseHandle(00000070) ret=7e1c7443 003a:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1c7443 003a:Call ntdll.RtlFreeHeap(00110000,00000000,0014bef8) ret=7e1c7479 003a:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e1c7479 003a:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bb,00148b18,00000000,00000000) ret=7e1c4643 003a:Call KERNEL32.IsBadReadPtr(00148b18,0000002c) ret=7e0bdbc9 003a:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 003a:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bb,007ceaa4,00000000,00000000) ret=7e0bdf33 003a:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 003a:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 003a:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 003a:Ret winmm.waveOutOpen() retval=00000000 ret=7e0c0313 003a:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 003a:Call ntdll.RtlAllocateHeap(00110000,00000000,000039ac) ret=7e73520d 003a:Ret ntdll.RtlAllocateHeap() retval=0014d3a0 ret=7e73520d 003a:Call msacm32.drv.wodMessage(0000ffff,00000007,00148b18,0014d3a0,00000020) ret=7e728e1f 003a:Call winmm.waveOutPrepareHeader(00008001,0014d3a0,00000020) ret=7e0c09d8 003a:Call winealsa.drv.wodMessage(00000000,00000007,7e72ab2b,0014d3a0,00000020) ret=7e728e1f 003a:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 003a:Ret winmm.waveOutPrepareHeader() retval=00000000 ret=7e0c09d8 003a:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 003a:Call msacm32.drv.wodMessage(0000ffff,00000007,00148b18,0014d3c0,00000020) ret=7e728e1f 003a:Call winmm.waveOutPrepareHeader(00008001,0014d3c0,00000020) ret=7e0c09d8 003a:Call winealsa.drv.wodMessage(00000000,00000007,7e72ab2b,0014d3c0,00000020) ret=7e728e1f 003a:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 003a:Ret winmm.waveOutPrepareHeader() retval=00000000 ret=7e0c09d8 003a:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 003a:Call KERNEL32.WaitForSingleObject(00000038,00000000) ret=7e735343 003a:Ret KERNEL32.WaitForSingleObject() retval=00000102 ret=7e735343 003a:Call msacm32.drv.wodMessage(0000ffff,00000009,00148b18,0014d3a0,00000020) ret=7e728e1f 003a:Call winmm.waveOutWrite(00008001,0014d3a0,00000020) ret=7e0c09b5 003a:Call winealsa.drv.wodMessage(00000000,00000009,7e72ab2b,0014d3a0,00000020) ret=7e728e1f 003a:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 003a:Ret winmm.waveOutWrite() retval=00000000 ret=7e0c09b5 003a:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 003a:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 003a:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 003a:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 003a:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 003a:Call KERNEL32.WaitForSingleObject(00000068,ffffffff) ret=7e73429b 0009:Ret user32.LoadBitmapW() retval=00001cc8 ret=010028ff 0009:Call gdi32.CreateCompatibleDC(00001c98) ret=01002909 0009:Ret gdi32.CreateCompatibleDC() retval=00001cdc ret=01002909 0009:Call gdi32.SelectObject(00001cdc,00001cc8) ret=01002917 0009:Ret gdi32.SelectObject() retval=0000006c ret=01002917 0009:Call gdi32.BitBlt(00001c98,00000000,00000000,00000047,00000060,00001cdc,00000000,00000000,00cc0020) ret=01002938 0009:Ret gdi32.BitBlt() retval=00000001 ret=01002938 0009:Call gdi32.SelectObject(00001cdc,0000006c) ret=0100293e 0009:Ret gdi32.SelectObject() retval=00001cc8 ret=0100293e 0009:Call gdi32.DeleteObject(00001cc8) ret=01002947 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01002947 0009:Call gdi32.DeleteDC(00001cdc) ret=0100294e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100294e 0009:Call gdi32.SetPixel(00001c98,00000000,00000000,00008000) ret=01002969 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002969 0009:Call gdi32.SetPixel(00001c98,00000001,00000000,00008000) ret=01002976 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002976 0009:Call gdi32.SetPixel(00001c98,00000000,00000001,00008000) ret=01002982 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002982 0009:Call gdi32.SetPixel(00001c98,00000046,00000000,00008000) ret=0100298f 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100298f 0009:Call gdi32.SetPixel(00001c98,00000045,00000000,00008000) ret=0100299c 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100299c 0009:Call gdi32.SetPixel(00001c98,00000046,00000001,00008000) ret=010029ab 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ab 0009:Call gdi32.SetPixel(00001c98,00000000,0000005f,00008000) ret=010029bf 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029bf 0009:Call gdi32.SetPixel(00001c98,00000001,0000005f,00008000) ret=010029d0 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029d0 0009:Call gdi32.SetPixel(00001c98,00000000,0000005e,00008000) ret=010029de 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029de 0009:Call gdi32.SetPixel(00001c98,00000046,0000005f,00008000) ret=010029ef 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ef 0009:Call gdi32.SetPixel(00001c98,00000045,0000005f,00008000) ret=01002a00 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a00 0009:Call gdi32.SetPixel(00001c98,00000046,0000005e,00008000) ret=01002a11 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a11 0009:Call user32.LoadBitmapW(01000000,010012c8 L"CARDBACK") ret=010028ff 0009:Ret user32.LoadBitmapW() retval=00001cf4 ret=010028ff 0009:Call gdi32.CreateCompatibleDC(00001c8c) ret=01002909 0009:Ret gdi32.CreateCompatibleDC() retval=00001d08 ret=01002909 0009:Call gdi32.SelectObject(00001d08,00001cf4) ret=01002917 0009:Ret gdi32.SelectObject() retval=0000006c ret=01002917 0009:Call gdi32.BitBlt(00001c8c,00000000,00000000,00000047,00000060,00001d08,00000000,00000000,00cc0020) ret=01002938 0009:Ret gdi32.BitBlt() retval=00000001 ret=01002938 0009:Call gdi32.SelectObject(00001d08,0000006c) ret=0100293e 0009:Ret gdi32.SelectObject() retval=00001cf4 ret=0100293e 0009:Call gdi32.DeleteObject(00001cf4) ret=01002947 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01002947 0009:Call gdi32.DeleteDC(00001d08) ret=0100294e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100294e 0009:Call gdi32.SetPixel(00001c8c,00000000,00000000,00008000) ret=01002969 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002969 0009:Call gdi32.SetPixel(00001c8c,00000001,00000000,00008000) ret=01002976 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002976 0009:Call gdi32.SetPixel(00001c8c,00000000,00000001,00008000) ret=01002982 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002982 0009:Call gdi32.SetPixel(00001c8c,00000046,00000000,00008000) ret=0100298f 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100298f 0009:Call gdi32.SetPixel(00001c8c,00000045,00000000,00008000) ret=0100299c 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100299c 0009:Call gdi32.SetPixel(00001c8c,00000046,00000001,00008000) ret=010029ab 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ab 0009:Call gdi32.SetPixel(00001c8c,00000000,0000005f,00008000) ret=010029bf 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029bf 0009:Call gdi32.SetPixel(00001c8c,00000001,0000005f,00008000) ret=010029d0 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029d0 0009:Call gdi32.SetPixel(00001c8c,00000000,0000005e,00008000) ret=010029de 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029de 0009:Call gdi32.SetPixel(00001c8c,00000046,0000005f,00008000) ret=010029ef 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ef 0009:Call gdi32.SetPixel(00001c8c,00000045,0000005f,00008000) ret=01002a00 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a00 0009:Call gdi32.SetPixel(00001c8c,00000046,0000005e,00008000) ret=01002a11 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a11 0009:Call winmm.timeGetTime() ret=010047d1 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=0000251a ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=0000251a ret=010047d1 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=0000251a ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=0000251a ret=01004881 0009:Call gdi32.BitBlt(00001c8c,00000000,00000000,00000048,00000061,00001c8c,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00000314,0000044d,00000258,00000047,00000060,00001c98,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=0000251f ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=0000251f ret=01004881 0009:Call gdi32.BitBlt(00001ca4,00000000,00000046,00000047,0000001a,00001c8c,00000000,00000046,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001ca4,0000003e,00000000,00000009,00000046,00001c8c,0000003e,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001c8c,00000009,0000001a,0000003f,00000047,00001c8c,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001c8c,00000000,00000000,00000047,0000001a,00000314,00000444,0000023e,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001c8c,00000000,0000001a,00000009,00000046,00000314,00000444,00000258,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000444,0000023e,00000047,00000060,00001c98,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,0000044d,0000029e,00000047,0000001a,00001ca4,00000000,00000046,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000048b,00000258,00000009,00000046,00001ca4,0000003e,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00002527 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00002527 ret=01004881 0009:Call gdi32.BitBlt(00001ca4,00000000,00000035,00000047,0000002b,00001c8c,00000000,00000035,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001ca4,00000037,00000000,00000010,00000035,00001c8c,00000037,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001c8c,00000010,0000002b,00000038,00000036,00001c8c,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001c8c,00000000,00000000,00000047,0000002b,00000314,00000434,00000213,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001c8c,00000000,0000002b,00000010,00000035,00000314,00000434,0000023e,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000434,00000213,00000047,00000060,00001c98,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000444,00000273,00000047,0000002b,00001ca4,00000000,00000035,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000047b,0000023e,00000010,00000035,00001ca4,00000037,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=0000252f ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=0000252f ret=01004881 0009:Call gdi32.BitBlt(00001ca4,00000000,00000035,00000047,0000002b,00001c8c,00000000,00000035,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001ca4,00000037,00000000,00000010,00000035,00001c8c,00000037,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001c8c,00000010,0000002b,00000038,00000036,00001c8c,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001c8c,00000000,00000000,00000047,0000002b,00000314,00000424,000001e8,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001c8c,00000000,0000002b,00000010,00000035,00000314,00000424,00000213,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000424,000001e8,00000047,00000060,00001c98,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000434,00000248,00000047,0000002b,00001ca4,00000000,00000035,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000046b,00000213,00000010,00000035,00001ca4,00000037,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00002537 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00002537 ret=01004881 0009:Call gdi32.BitBlt(00001ca4,00000000,00000036,00000047,0000002a,00001c8c,00000000,00000036,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001ca4,00000038,00000000,0000000f,00000036,00001c8c,00000038,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001c8c,0000000f,0000002a,00000039,00000037,00001c8c,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001c8c,00000000,00000000,00000047,0000002a,00000314,00000415,000001be,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001c8c,00000000,0000002a,0000000f,00000036,00000314,00000415,000001e8,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000415,000001be,00000047,00000060,00001c98,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000424,0000021e,00000047,0000002a,00001ca4,00000000,00000036,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000045c,000001e8,0000000f,00000036,00001ca4,00000038,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=0000253f ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=0000253f ret=01004881 0009:Call gdi32.BitBlt(00001ca4,00000000,00000035,00000047,0000002b,00001c8c,00000000,00000035,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001ca4,00000037,00000000,00000010,00000035,00001c8c,00000037,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001c8c,00000010,0000002b,00000038,00000036,00001c8c,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001c8c,00000000,00000000,00000047,0000002b,00000314,00000405,00000193,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001c8c,00000000,0000002b,00000010,00000035,00000314,00000405,000001be,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000405,00000193,00000047,00000060,00001c98,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000415,000001f3,00000047,0000002b,00001ca4,00000000,00000035,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000044c,000001be,00000010,00000035,00001ca4,00000037,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00002547 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00002547 ret=01004881 0009:Call gdi32.BitBlt(00001ca4,00000000,00000035,00000047,0000002b,00001c8c,00000000,00000035,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001ca4,00000037,00000000,00000010,00000035,00001c8c,00000037,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001c8c,00000010,0000002b,00000038,00000036,00001c8c,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001c8c,00000000,00000000,00000047,0000002b,00000314,000003f5,00000168,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001c8c,00000000,0000002b,00000010,00000035,00000314,000003f5,00000193,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000003f5,00000168,00000047,00000060,00001c98,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000405,000001c8,00000047,0000002b,00001ca4,00000000,00000035,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000043c,00000193,00000010,00000035,00001ca4,00000037,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=0000254f ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=0000254f ret=01004881 0009:Call gdi32.BitBlt(00001ca4,00000000,00000035,00000047,0000002b,00001c8c,00000000,00000035,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001ca4,00000038,00000000,0000000f,00000035,00001c8c,00000038,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001c8c,0000000f,0000002b,00000039,00000036,00001c8c,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001c8c,00000000,00000000,00000047,0000002b,00000314,000003e6,0000013d,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001c8c,00000000,0000002b,0000000f,00000035,00000314,000003e6,00000168,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000003e6,0000013d,00000047,00000060,00001c98,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000003f5,0000019d,00000047,0000002b,00001ca4,00000000,00000035,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000042d,00000168,0000000f,00000035,00001ca4,00000038,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00002557 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00002557 ret=01004881 0009:Call gdi32.BitBlt(00001ca4,00000000,00000036,00000047,0000002a,00001c8c,00000000,00000036,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001ca4,00000037,00000000,00000010,00000036,00001c8c,00000037,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001c8c,00000010,0000002a,00000038,00000037,00001c8c,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001c8c,00000000,00000000,00000047,0000002a,00000314,000003d6,00000113,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001c8c,00000000,0000002a,00000010,00000036,00000314,000003d6,0000013d,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000003d6,00000113,00000047,00000060,00001c98,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000003e6,00000173,00000047,0000002a,00001ca4,00000000,00000036,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000041d,0000013d,00000010,00000036,00001ca4,00000037,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=0000255f ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=0000255f ret=01004881 0009:Call gdi32.BitBlt(00001ca4,00000000,00000035,00000047,0000002b,00001c8c,00000000,00000035,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001ca4,00000037,00000000,00000010,00000035,00001c8c,00000037,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001c8c,00000010,0000002b,00000038,00000036,00001c8c,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001c8c,00000000,00000000,00000047,0000002b,00000314,000003c6,000000e8,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001c8c,00000000,0000002b,00000010,00000035,00000314,000003c6,00000113,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000003c6,000000e8,00000047,00000060,00001c98,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000003d6,00000148,00000047,0000002b,00001ca4,00000000,00000035,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000040d,00000113,00000010,00000035,00001ca4,00000037,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00002567 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00002567 ret=01004881 0009:Call gdi32.BitBlt(00001ca4,00000000,00000035,00000047,0000002b,00001c8c,00000000,00000035,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001ca4,00000038,00000000,0000000f,00000035,00001c8c,00000038,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001c8c,0000000f,0000002b,00000039,00000036,00001c8c,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001c8c,00000000,00000000,00000047,0000002b,00000314,000003b7,000000bd,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001c8c,00000000,0000002b,0000000f,00000035,00000314,000003b7,000000e8,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000003b7,000000bd,00000047,00000060,00001c98,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000003c6,0000011d,00000047,0000002b,00001ca4,00000000,00000035,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,000003fe,000000e8,0000000f,00000035,00001ca4,00000038,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=0000256f ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=0000256f ret=01004881 0009:Call gdi32.BitBlt(00001ca4,00000000,00000036,00000047,0000002a,00001c8c,00000000,00000036,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001ca4,00000037,00000000,00000010,00000036,00001c8c,00000037,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001c8c,00000010,0000002a,00000038,00000037,00001c8c,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001c8c,00000000,00000000,00000047,0000002a,00000314,000003a7,00000093,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001c8c,00000000,0000002a,00000010,00000036,00000314,000003a7,000000bd,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000003a7,00000093,00000047,00000060,00001c98,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000003b7,000000f3,00000047,0000002a,00001ca4,00000000,00000036,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,000003ee,000000bd,00000010,00000036,00001ca4,00000037,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00002577 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00002577 ret=01004881 0009:Call gdi32.BitBlt(00001ca4,00000000,00000035,00000047,0000002b,00001c8c,00000000,00000035,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001ca4,00000037,00000000,00000010,00000035,00001c8c,00000037,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001c8c,00000010,0000002b,00000038,00000036,00001c8c,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001c8c,00000000,00000000,00000047,0000002b,00000314,00000397,00000068,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001c8c,00000000,0000002b,00000010,00000035,00000314,00000397,00000093,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000397,00000068,00000047,00000060,00001c98,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000003a7,000000c8,00000047,0000002b,00001ca4,00000000,00000035,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,000003de,00000093,00000010,00000035,00001ca4,00000037,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=0000257f ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=0000257f ret=01004881 0009:Call gdi32.BitBlt(00001ca4,00000000,0000003a,00000047,00000026,00001c8c,00000000,0000003a,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001ca4,00000039,00000000,0000000e,0000003a,00001c8c,00000039,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001c8c,0000000e,00000026,0000003a,0000003b,00001c8c,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001c8c,00000000,00000000,00000047,00000026,00000314,00000389,00000042,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001c8c,00000000,00000026,0000000e,0000003a,00000314,00000389,00000068,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000389,00000042,00000047,00000060,00001c98,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000397,000000a2,00000047,00000026,00001ca4,00000000,0000003a,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,000003d0,00000068,0000000e,0000003a,00001ca4,00000039,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call gdi32.SelectObject(00001c8c,0000006c) ret=01005316 0009:Ret gdi32.SelectObject() retval=00001cb0 ret=01005316 0009:Call gdi32.SelectObject(00001c98,0000006c) ret=01005324 0009:Ret gdi32.SelectObject() retval=00001cb4 ret=01005324 0009:Call gdi32.SelectObject(00001ca4,0000006c) ret=01005332 0009:Ret gdi32.SelectObject() retval=00001cb8 ret=01005332 0009:Call gdi32.DeleteObject(00001cb0) ret=01005340 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005340 0009:Call gdi32.DeleteObject(00001cb4) ret=01005348 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005348 0009:Call gdi32.DeleteObject(00001cb8) ret=01005350 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005350 0009:Call gdi32.DeleteDC(00001c8c) ret=0100535e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100535e 0009:Call gdi32.DeleteDC(00001c98) ret=01005366 0009:Ret gdi32.DeleteDC() retval=00000001 ret=01005366 0009:Call gdi32.DeleteDC(00001ca4) ret=0100536e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100536e 0009:Call user32.ReleaseDC(00010030,00000314) ret=0100537c 0009:Ret user32.ReleaseDC() retval=00000001 ret=0100537c 0009:Call user32.InvalidateRect(00010030,0033f618,00000000) ret=0100538a 0009:Ret user32.InvalidateRect() retval=00000001 ret=0100538a 0009:Call KERNEL32.GetModuleHandleW(00000000) ret=01006a97 0009:Ret KERNEL32.GetModuleHandleW() retval=01000000 ret=01006a97 0009:Call winmm.PlaySoundW(0000007c,01000000,00040007) ret=01006aa0 0009:Call ntdll.RtlAllocateHeap(00110000,00000008,0000001c) ret=7e7356bc 0009:Ret ntdll.RtlAllocateHeap() retval=0014cad8 ret=7e7356bc 0009:Call KERNEL32.ResetEvent(00000040) ret=7e735513 0009:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e735513 0009:Call KERNEL32.SetEvent(00000038) ret=7e735520 0009:Ret KERNEL32.SetEvent() retval=00000001 ret=7e735520 0009:Call msacm32.drv.wodMessage(0000ffff,0000000c,00148b18,00000000,00000000) ret=7e728e1f 0009:Call winmm.waveOutReset(00008001) ret=7e0c0180 0009:Call winealsa.drv.wodMessage(00000000,0000000c,7e72ab2b,00000000,00000000) ret=7e728e1f 0009:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1b2580 0009:Ret KERNEL32.CreateEventW() retval=00000070 ret=7e1b2580 003b:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bd,00148b18,0014d3a0,00000000) ret=7e1c4643 003b:Call KERNEL32.IsBadReadPtr(00148b18,0000002c) ret=7e0bdbc9 003b:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 003b:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bd,007ceaa4,0014d3a0,00000000) ret=7e0bdf33 003b:Call KERNEL32.SetEvent(00000068) ret=7e7341f6 003b:Ret KERNEL32.SetEvent() retval=00000001 ret=7e7341f6 003b:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 003b:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 003b:Call KERNEL32.SetEvent(00000070) ret=7e1c4f3d 003b:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c4f3d 003a:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e73429b 003a:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 003a:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 003a:Call msacm32.drv.wodMessage(0000ffff,0000000c,00148b18,00000000,00000000) ret=7e728e1f 003a:Call winmm.waveOutReset(00008001) ret=7e0c0180 003a:Call winealsa.drv.wodMessage(00000000,0000000c,7e72ab2b,00000000,00000000) ret=7e728e1f 003a:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1b2580 003a:Ret KERNEL32.CreateEventW() retval=000000b8 ret=7e1b2580 003a:Call KERNEL32.WaitForSingleObject(000000b8,ffffffff) ret=7e1b2635 003b:Call KERNEL32.SetEvent(000000b8) ret=7e1c4f3d 003b:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c4f3d 003a:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1b2635 003a:Call KERNEL32.CloseHandle(000000b8) ret=7e1b2640 003a:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1b2640 003a:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 003a:Ret winmm.waveOutReset() retval=00000000 ret=7e0c0180 003a:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 003a:Call msacm32.drv.wodMessage(0000ffff,00000008,00148b18,0014d3a0,00000020) ret=7e728e1f 003a:Call winmm.waveOutUnprepareHeader(00008001,0014d3a0,00000020) ret=7e0c00b6 003a:Call winealsa.drv.wodMessage(00000000,00000008,7e72ab2b,0014d3a0,00000020) ret=7e728e1f 003a:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 003a:Ret winmm.waveOutUnprepareHeader() retval=00000000 ret=7e0c00b6 003a:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 003a:Call msacm32.drv.wodMessage(0000ffff,00000008,00148b18,0014d3c0,00000020) ret=7e728e1f 003a:Call winmm.waveOutUnprepareHeader(00008001,0014d3c0,00000020) ret=7e0c00b6 003a:Call winealsa.drv.wodMessage(00000000,00000008,7e72ab2b,0014d3c0,00000020) ret=7e728e1f 003a:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 003a:Ret winmm.waveOutUnprepareHeader() retval=00000000 ret=7e0c00b6 003a:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 003a:Call KERNEL32.CloseHandle(00000068) ret=7e7349fd 003a:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e7349fd 003a:Call ntdll.RtlFreeHeap(00110000,00000000,0014d3a0) ret=7e734a23 003a:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e734a23 003a:Call ntdll.RtlFreeHeap(00110000,00000000,00148cb8) ret=7e734a49 003a:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e734a49 003a:Call msacm32.drv.wodMessage(0000ffff,00000006,00148b18,00000000,00000000) ret=7e728e1f 003a:Call winmm.waveOutClose(00008001) ret=7e0c01a5 003a:Call winealsa.drv.wodMessage(00000000,00000006,7e72ab2b,00000000,00000000) ret=7e728e1f 003a:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1b2580 003a:Ret KERNEL32.CreateEventW() retval=00000068 ret=7e1b2580 003a:Call KERNEL32.WaitForSingleObject(00000068,ffffffff) ret=7e1b2635 003b:Call KERNEL32.SetEvent(00000068) ret=7e1c4ea1 003b:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c4ea1 003b:Call KERNEL32.ExitThread(00000000) ret=7e1c4eb0 003b:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) 003b:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 003b:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) 003b:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) retval=1 003b:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) 003b:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 003b:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) 003b:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) retval=1 003b:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) 003b:Call KERNEL32.TlsGetValue(00000000) ret=7e3f4071 003b:Ret KERNEL32.TlsGetValue() retval=00000000 ret=7e3f4071 003b:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 003b:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) 003b:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 003a:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1b2635 003a:Call KERNEL32.CloseHandle(00000068) ret=7e1b2640 003a:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1b2640 003a:Call ntdll.RtlFreeHeap(00110000,00000000,0014c7d0) ret=7e1b24dc 003a:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e1b24dc 003a:Call ntdll.RtlDeleteCriticalSection(0013cefc) ret=7e1b24fb 003a:Ret ntdll.RtlDeleteCriticalSection() retval=00000000 ret=7e1b24fb 003a:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bc,00148b18,00000000,00000000) ret=7e1c4643 003a:Call KERNEL32.IsBadReadPtr(00148b18,0000002c) ret=7e0bdbc9 003a:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 003a:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bc,007ceaa4,00000000,00000000) ret=7e0bdf33 003a:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 003a:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 003a:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 003a:Call ntdll.RtlFreeHeap(00110000,00000000,00148b50) ret=7e72ae0b 003a:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e72ae0b 003a:Ret winmm.waveOutClose() retval=00000000 ret=7e0c01a5 003a:Call ntdll.RtlFreeHeap(00110000,00000000,00148b18) ret=7e0c01f7 003a:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e0c01f7 003a:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 003a:Call ntdll.RtlFreeHeap(00110000,00000000,00148bd8) ret=7e72ae0b 003a:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e72ae0b 0009:Call KERNEL32.WaitForSingleObject(00000070,ffffffff) ret=7e1b2635 0009:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1b2635 0009:Call KERNEL32.CloseHandle(00000070) ret=7e1b2640 0009:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1b2640 0009:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0009:Ret winmm.waveOutReset() retval=00000000 ret=7e0c0180 0009:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0009:Call KERNEL32.WaitForSingleObject(00000040,ffffffff) ret=7e73555a 003a:Call ntdll.RtlFreeHeap(00110000,00000000,00148c28) ret=7e731f79 003a:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e731f79 003a:Call KERNEL32.SetEvent(00000040) ret=7e7343a0 003a:Ret KERNEL32.SetEvent() retval=00000001 ret=7e7343a0 003a:Call KERNEL32.CloseHandle(00000064) ret=7e734340 003a:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e734340 003a:Call ntdll.RtlFreeHeap(00110000,00000000,00148bb0) ret=7e734360 003a:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e734360 003a:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) 003a:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 003a:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) 003a:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) retval=1 003a:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) 003a:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 003a:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) 003a:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) retval=1 003a:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) 003a:Call KERNEL32.TlsGetValue(00000000) ret=7e3f4071 003a:Ret KERNEL32.TlsGetValue() retval=00000000 ret=7e3f4071 003a:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 003a:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) 003a:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0009:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e73555a 0009:Call KERNEL32.ResetEvent(00000038) ret=7e735572 0009:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e735572 0009:Call KERNEL32.CreateThread(00000000,00000000,7e7348a0,0014cad8,00000000,0033f598) ret=7e73560c 003c:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) 003c:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 003c:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) 003c:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 003c:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) 003c:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) retval=1 003c:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) 003c:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 003c:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) 003c:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 003c:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) 003c:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 003c:Starting thread proc 0x7e7348a0 (arg=0x14cad8) 003c:Call KERNEL32.FindResourceW(01000000,0000007c,7e741bde L"WAVE") ret=7e734ca3 003c:Ret KERNEL32.FindResourceW() retval=01014c40 ret=7e734ca3 003c:Call KERNEL32.LoadResource(01000000,01014c40) ret=7e734cb9 003c:Ret KERNEL32.LoadResource() retval=0104d668 ret=7e734cb9 003c:Call KERNEL32.LockResource(0104d668) ret=7e734cce 003c:Ret KERNEL32.LockResource() retval=0104d668 ret=7e734cce 003c:Call KERNEL32.FreeResource(0104d668) ret=7e734ce9 003c:Ret KERNEL32.FreeResource() retval=00000000 ret=7e734ce9 003c:Call ntdll.RtlAllocateHeap(00110000,00000008,0000005c) ret=7e733960 003c:Ret ntdll.RtlAllocateHeap() retval=00148c28 ret=7e733960 003c:Call KERNEL32.GetFileSize(ffffffff,00000000) ret=7e733ab9 003c:Ret KERNEL32.GetFileSize() retval=ffffffff ret=7e733ab9 003c:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7e733cf0 003c:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e733cf0 003c:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7e734e1c 003c:Ret ntdll.RtlAllocateHeap() retval=00148cb8 ret=7e734e1c 003c:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e734f1f 003c:Ret KERNEL32.CreateEventW() retval=00000068 ret=7e734f1f 003c:Call ntdll.RtlAllocateHeap(00110000,00000008,0000001c) ret=7e72abbe 003c:Ret ntdll.RtlAllocateHeap() retval=0014cb00 ret=7e72abbe 003c:Call msacm32.drv.wodMessage(0000ffff,00000005,008ce918,008ce970,00030000) ret=7e728e1f 003c:Call ntdll.RtlAllocateHeap(00110000,00000000,0000002c) ret=7e0bfd8c 003c:Ret ntdll.RtlAllocateHeap() retval=0014cb28 ret=7e0bfd8c 003c:Call winmm.waveOutGetNumDevs() ret=7e0bfdb5 003c:Ret winmm.waveOutGetNumDevs() retval=00000002 ret=7e0bfdb5 003c:Call winmm.waveOutOpen(0014cb30,00000000,00148cb8,7e0bde60,0014cb28,00030008) ret=7e0c0313 003c:Call ntdll.RtlAllocateHeap(00110000,00000008,0000001c) ret=7e72abbe 003c:Ret ntdll.RtlAllocateHeap() retval=0014cb60 ret=7e72abbe 003c:Call winealsa.drv.wodMessage(00000000,00000005,008ce5b8,008ce610,00030008) ret=7e728e1f 003c:Call ntdll.RtlAllocateHeap(00110000,00000008,00000068) ret=7e1c6c82 003c:Ret ntdll.RtlAllocateHeap() retval=00148b18 ret=7e1c6c82 003c:Call ntdll.RtlAllocateHeap(00110000,00000008,00000300) ret=7e1b2459 003c:Ret ntdll.RtlAllocateHeap() retval=0014c7d0 ret=7e1b2459 003c:Call KERNEL32.InitializeCriticalSection(0013cefc) ret=7e1b2469 003c:Ret KERNEL32.InitializeCriticalSection() retval=00000001 ret=7e1b2469 003c:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1c73ab 003c:Ret KERNEL32.CreateEventW() retval=00000070 ret=7e1c73ab 003c:Call KERNEL32.CreateThread(00000000,00000000,7e1c5570,00000000,00000000,0013cedc) ret=7e1c73ef 0009:Ret KERNEL32.CreateThread() retval=00000064 ret=7e73560c 0009:Call KERNEL32.SetThreadPriority(00000064,0000000f) ret=7e73562d 0009:Ret KERNEL32.SetThreadPriority() retval=00000001 ret=7e73562d 0009:Ret winmm.PlaySoundW() retval=00000001 ret=01006aa0 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,0000000c) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c5880 ret=0100a7d2 0009:Call user32.GetClientRect(00010030,0033f608) ret=01005145 0009:Ret user32.GetClientRect() retval=00000001 ret=01005145 0009:Call user32.GetDC(00010030) ret=010051ad 0009:Ret user32.GetDC() retval=00000314 ret=010051ad 0009:Call gdi32.CreateCompatibleDC(00000314) ret=010051bc 0009:Ret gdi32.CreateCompatibleDC() retval=00001d18 ret=010051bc 0009:Call gdi32.CreateCompatibleDC(00000314) ret=010051ca 0009:Ret gdi32.CreateCompatibleDC() retval=00001d24 ret=010051ca 0009:Call gdi32.CreateCompatibleDC(00000314) ret=010051d8 0009:Ret gdi32.CreateCompatibleDC() retval=00001d30 ret=010051d8 0009:Call gdi32.CreateCompatibleBitmap(00000314,00000047,00000060) ret=010051f8 0009:Ret gdi32.CreateCompatibleBitmap() retval=00001d3c ret=010051f8 0009:Call gdi32.CreateCompatibleBitmap(00000314,00000047,00000060) ret=01005212 0009:Ret gdi32.CreateCompatibleBitmap() retval=00001d40 ret=01005212 0009:Call gdi32.CreateCompatibleBitmap(00000314,00000047,00000060) ret=0100522c 0009:Ret gdi32.CreateCompatibleBitmap() retval=00001d44 ret=0100522c 0009:Call gdi32.SelectObject(00001d18,00001d3c) ret=01005246 0009:Ret gdi32.SelectObject() retval=0000006c ret=01005246 0009:Call gdi32.SelectObject(00001d24,00001d40) ret=0100525a 0009:Ret gdi32.SelectObject() retval=0000006c ret=0100525a 0009:Call gdi32.SelectObject(00001d30,00001d44) ret=0100526e 0009:Ret gdi32.SelectObject() retval=0000006c ret=0100526e 0009:Call user32.LoadBitmapW(01000000,0033f5a0 L"CARD48") ret=010028ff 003d:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) 003d:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 003d:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) 003d:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 003d:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) 003d:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) retval=1 003d:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) 003d:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 003d:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) 003d:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 003d:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) 003d:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 003d:Starting thread proc 0x7e1c5570 (arg=(nil)) 003d:Call KERNEL32.SetEvent(00000070) ret=7e1c55aa 003d:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c55aa 003c:Ret KERNEL32.CreateThread() retval=000000b8 ret=7e1c73ef 003c:Call KERNEL32.SetThreadPriority(000000b8,0000000f) ret=7e1c7413 003c:Ret KERNEL32.SetThreadPriority() retval=00000001 ret=7e1c7413 003c:Call KERNEL32.WaitForSingleObject(00000070,ffffffff) ret=7e1c742f 003c:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1c742f 003c:Call KERNEL32.CloseHandle(00000070) ret=7e1c7443 003c:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1c7443 003c:Call ntdll.RtlFreeHeap(00110000,00000000,00148b18) ret=7e1c7479 003c:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e1c7479 003c:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bb,0014cb28,00000000,00000000) ret=7e1c4643 003c:Call KERNEL32.IsBadReadPtr(0014cb28,0000002c) ret=7e0bdbc9 003c:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 003c:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bb,008ceaa4,00000000,00000000) ret=7e0bdf33 003c:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 003c:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 003c:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 003c:Ret winmm.waveOutOpen() retval=00000000 ret=7e0c0313 003c:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 003c:Call ntdll.RtlAllocateHeap(00110000,00000000,000039ac) ret=7e73520d 003c:Ret ntdll.RtlAllocateHeap() retval=0014d3a0 ret=7e73520d 003c:Call msacm32.drv.wodMessage(0000ffff,00000007,0014cb28,0014d3a0,00000020) ret=7e728e1f 003c:Call winmm.waveOutPrepareHeader(00008001,0014d3a0,00000020) ret=7e0c09d8 003c:Call winealsa.drv.wodMessage(00000000,00000007,7e72ab2b,0014d3a0,00000020) ret=7e728e1f 003c:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 003c:Ret winmm.waveOutPrepareHeader() retval=00000000 ret=7e0c09d8 003c:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 003c:Call msacm32.drv.wodMessage(0000ffff,00000007,0014cb28,0014d3c0,00000020) ret=7e728e1f 003c:Call winmm.waveOutPrepareHeader(00008001,0014d3c0,00000020) ret=7e0c09d8 003c:Call winealsa.drv.wodMessage(00000000,00000007,7e72ab2b,0014d3c0,00000020) ret=7e728e1f 003c:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 003c:Ret winmm.waveOutPrepareHeader() retval=00000000 ret=7e0c09d8 003c:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 003c:Call KERNEL32.WaitForSingleObject(00000038,00000000) ret=7e735343 003c:Ret KERNEL32.WaitForSingleObject() retval=00000102 ret=7e735343 003c:Call msacm32.drv.wodMessage(0000ffff,00000009,0014cb28,0014d3a0,00000020) ret=7e728e1f 003c:Call winmm.waveOutWrite(00008001,0014d3a0,00000020) ret=7e0c09b5 003c:Call winealsa.drv.wodMessage(00000000,00000009,7e72ab2b,0014d3a0,00000020) ret=7e728e1f 003c:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 003c:Ret winmm.waveOutWrite() retval=00000000 ret=7e0c09b5 003c:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 003c:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 003c:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 003c:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 003c:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 003c:Call KERNEL32.WaitForSingleObject(00000068,ffffffff) ret=7e73429b 0009:Ret user32.LoadBitmapW() retval=00001d54 ret=010028ff 0009:Call gdi32.CreateCompatibleDC(00001d24) ret=01002909 0009:Ret gdi32.CreateCompatibleDC() retval=00001d68 ret=01002909 0009:Call gdi32.SelectObject(00001d68,00001d54) ret=01002917 0009:Ret gdi32.SelectObject() retval=0000006c ret=01002917 0009:Call gdi32.BitBlt(00001d24,00000000,00000000,00000047,00000060,00001d68,00000000,00000000,00cc0020) ret=01002938 0009:Ret gdi32.BitBlt() retval=00000001 ret=01002938 0009:Call gdi32.SelectObject(00001d68,0000006c) ret=0100293e 0009:Ret gdi32.SelectObject() retval=00001d54 ret=0100293e 0009:Call gdi32.DeleteObject(00001d54) ret=01002947 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01002947 0009:Call gdi32.DeleteDC(00001d68) ret=0100294e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100294e 0009:Call gdi32.SetPixel(00001d24,00000000,00000000,00008000) ret=01002969 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002969 0009:Call gdi32.SetPixel(00001d24,00000001,00000000,00008000) ret=01002976 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002976 0009:Call gdi32.SetPixel(00001d24,00000000,00000001,00008000) ret=01002982 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002982 0009:Call gdi32.SetPixel(00001d24,00000046,00000000,00008000) ret=0100298f 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100298f 0009:Call gdi32.SetPixel(00001d24,00000045,00000000,00008000) ret=0100299c 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100299c 0009:Call gdi32.SetPixel(00001d24,00000046,00000001,00008000) ret=010029ab 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ab 0009:Call gdi32.SetPixel(00001d24,00000000,0000005f,00008000) ret=010029bf 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029bf 0009:Call gdi32.SetPixel(00001d24,00000001,0000005f,00008000) ret=010029d0 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029d0 0009:Call gdi32.SetPixel(00001d24,00000000,0000005e,00008000) ret=010029de 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029de 0009:Call gdi32.SetPixel(00001d24,00000046,0000005f,00008000) ret=010029ef 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ef 0009:Call gdi32.SetPixel(00001d24,00000045,0000005f,00008000) ret=01002a00 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a00 0009:Call gdi32.SetPixel(00001d24,00000046,0000005e,00008000) ret=01002a11 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a11 0009:Call user32.LoadBitmapW(01000000,010012c8 L"CARDBACK") ret=010028ff 0009:Ret user32.LoadBitmapW() retval=00001d80 ret=010028ff 0009:Call gdi32.CreateCompatibleDC(00001d18) ret=01002909 0009:Ret gdi32.CreateCompatibleDC() retval=00001d94 ret=01002909 0009:Call gdi32.SelectObject(00001d94,00001d80) ret=01002917 0009:Ret gdi32.SelectObject() retval=0000006c ret=01002917 0009:Call gdi32.BitBlt(00001d18,00000000,00000000,00000047,00000060,00001d94,00000000,00000000,00cc0020) ret=01002938 0009:Ret gdi32.BitBlt() retval=00000001 ret=01002938 0009:Call gdi32.SelectObject(00001d94,0000006c) ret=0100293e 0009:Ret gdi32.SelectObject() retval=00001d80 ret=0100293e 0009:Call gdi32.DeleteObject(00001d80) ret=01002947 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01002947 0009:Call gdi32.DeleteDC(00001d94) ret=0100294e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100294e 0009:Call gdi32.SetPixel(00001d18,00000000,00000000,00008000) ret=01002969 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002969 0009:Call gdi32.SetPixel(00001d18,00000001,00000000,00008000) ret=01002976 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002976 0009:Call gdi32.SetPixel(00001d18,00000000,00000001,00008000) ret=01002982 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002982 0009:Call gdi32.SetPixel(00001d18,00000046,00000000,00008000) ret=0100298f 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100298f 0009:Call gdi32.SetPixel(00001d18,00000045,00000000,00008000) ret=0100299c 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100299c 0009:Call gdi32.SetPixel(00001d18,00000046,00000001,00008000) ret=010029ab 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ab 0009:Call gdi32.SetPixel(00001d18,00000000,0000005f,00008000) ret=010029bf 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029bf 0009:Call gdi32.SetPixel(00001d18,00000001,0000005f,00008000) ret=010029d0 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029d0 0009:Call gdi32.SetPixel(00001d18,00000000,0000005e,00008000) ret=010029de 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029de 0009:Call gdi32.SetPixel(00001d18,00000046,0000005f,00008000) ret=010029ef 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ef 0009:Call gdi32.SetPixel(00001d18,00000045,0000005f,00008000) ret=01002a00 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a00 0009:Call gdi32.SetPixel(00001d18,00000046,0000005e,00008000) ret=01002a11 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a11 0009:Call winmm.timeGetTime() ret=010047d1 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000025b3 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000025b3 ret=010047d1 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000025b3 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000025b3 ret=01004881 0009:Call gdi32.BitBlt(00001d18,00000000,00000000,00000048,00000061,00001d18,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00000314,0000044d,00000258,00000047,00000060,00001d24,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000025bb ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000025bb ret=01004881 0009:Call gdi32.BitBlt(00001d30,00000000,00000036,00000047,0000002a,00001d18,00000000,00000036,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001d30,00000042,00000000,00000005,00000036,00001d18,00000042,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001d18,00000005,0000002a,00000043,00000037,00001d18,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001d18,00000000,00000000,00000047,0000002a,00000314,00000448,0000022e,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001d18,00000000,0000002a,00000005,00000036,00000314,00000448,00000258,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000448,0000022e,00000047,00000060,00001d24,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,0000044d,0000028e,00000047,0000002a,00001d30,00000000,00000036,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000048f,00000258,00000005,00000036,00001d30,00000042,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000025c3 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000025c3 ret=01004881 0009:Call gdi32.BitBlt(00001d30,00000000,00000035,00000047,0000002b,00001d18,00000000,00000035,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001d30,00000041,00000000,00000006,00000035,00001d18,00000041,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001d18,00000006,0000002b,00000042,00000036,00001d18,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001d18,00000000,00000000,00000047,0000002b,00000314,00000442,00000203,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001d18,00000000,0000002b,00000006,00000035,00000314,00000442,0000022e,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000442,00000203,00000047,00000060,00001d24,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000448,00000263,00000047,0000002b,00001d30,00000000,00000035,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000489,0000022e,00000006,00000035,00001d30,00000041,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000025cb ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000025cb ret=01004881 0009:Call gdi32.BitBlt(00001d30,00000000,00000035,00000047,0000002b,00001d18,00000000,00000035,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001d30,00000041,00000000,00000006,00000035,00001d18,00000041,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001d18,00000006,0000002b,00000042,00000036,00001d18,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001d18,00000000,00000000,00000047,0000002b,00000314,0000043c,000001d8,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001d18,00000000,0000002b,00000006,00000035,00000314,0000043c,00000203,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,0000043c,000001d8,00000047,00000060,00001d24,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000442,00000238,00000047,0000002b,00001d30,00000000,00000035,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000483,00000203,00000006,00000035,00001d30,00000041,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000025d3 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000025d3 ret=01004881 0009:Call gdi32.BitBlt(00001d30,00000000,00000036,00000047,0000002a,00001d18,00000000,00000036,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001d30,00000041,00000000,00000006,00000036,00001d18,00000041,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001d18,00000006,0000002a,00000042,00000037,00001d18,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001d18,00000000,00000000,00000047,0000002a,00000314,00000436,000001ae,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001d18,00000000,0000002a,00000006,00000036,00000314,00000436,000001d8,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000436,000001ae,00000047,00000060,00001d24,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,0000043c,0000020e,00000047,0000002a,00001d30,00000000,00000036,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000047d,000001d8,00000006,00000036,00001d30,00000041,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000025db ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000025db ret=01004881 0009:Call gdi32.BitBlt(00001d30,00000000,00000035,00000047,0000002b,00001d18,00000000,00000035,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001d30,00000041,00000000,00000006,00000035,00001d18,00000041,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001d18,00000006,0000002b,00000042,00000036,00001d18,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001d18,00000000,00000000,00000047,0000002b,00000314,00000430,00000183,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001d18,00000000,0000002b,00000006,00000035,00000314,00000430,000001ae,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000430,00000183,00000047,00000060,00001d24,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000436,000001e3,00000047,0000002b,00001d30,00000000,00000035,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000477,000001ae,00000006,00000035,00001d30,00000041,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000025e3 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000025e3 ret=01004881 0009:Call gdi32.BitBlt(00001d30,00000000,00000035,00000047,0000002b,00001d18,00000000,00000035,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001d30,00000041,00000000,00000006,00000035,00001d18,00000041,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001d18,00000006,0000002b,00000042,00000036,00001d18,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001d18,00000000,00000000,00000047,0000002b,00000314,0000042a,00000158,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001d18,00000000,0000002b,00000006,00000035,00000314,0000042a,00000183,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,0000042a,00000158,00000047,00000060,00001d24,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000430,000001b8,00000047,0000002b,00001d30,00000000,00000035,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000471,00000183,00000006,00000035,00001d30,00000041,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000025eb ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000025eb ret=01004881 0009:Call gdi32.BitBlt(00001d30,00000000,00000035,00000047,0000002b,00001d18,00000000,00000035,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001d30,00000041,00000000,00000006,00000035,00001d18,00000041,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001d18,00000006,0000002b,00000042,00000036,00001d18,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001d18,00000000,00000000,00000047,0000002b,00000314,00000424,0000012d,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001d18,00000000,0000002b,00000006,00000035,00000314,00000424,00000158,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000424,0000012d,00000047,00000060,00001d24,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,0000042a,0000018d,00000047,0000002b,00001d30,00000000,00000035,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000046b,00000158,00000006,00000035,00001d30,00000041,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000025f3 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000025f3 ret=01004881 0009:Call gdi32.BitBlt(00001d30,00000000,00000036,00000047,0000002a,00001d18,00000000,00000036,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001d30,00000041,00000000,00000006,00000036,00001d18,00000041,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001d18,00000006,0000002a,00000042,00000037,00001d18,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001d18,00000000,00000000,00000047,0000002a,00000314,0000041e,00000103,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001d18,00000000,0000002a,00000006,00000036,00000314,0000041e,0000012d,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,0000041e,00000103,00000047,00000060,00001d24,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000424,00000163,00000047,0000002a,00001d30,00000000,00000036,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000465,0000012d,00000006,00000036,00001d30,00000041,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000025fb ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000025fb ret=01004881 0009:Call gdi32.BitBlt(00001d30,00000000,00000035,00000047,0000002b,00001d18,00000000,00000035,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001d30,00000041,00000000,00000006,00000035,00001d18,00000041,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001d18,00000006,0000002b,00000042,00000036,00001d18,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001d18,00000000,00000000,00000047,0000002b,00000314,00000418,000000d8,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001d18,00000000,0000002b,00000006,00000035,00000314,00000418,00000103,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000418,000000d8,00000047,00000060,00001d24,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,0000041e,00000138,00000047,0000002b,00001d30,00000000,00000035,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000045f,00000103,00000006,00000035,00001d30,00000041,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00002603 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00002603 ret=01004881 0009:Call gdi32.BitBlt(00001d30,00000000,00000035,00000047,0000002b,00001d18,00000000,00000035,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001d30,00000041,00000000,00000006,00000035,00001d18,00000041,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001d18,00000006,0000002b,00000042,00000036,00001d18,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001d18,00000000,00000000,00000047,0000002b,00000314,00000412,000000ad,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001d18,00000000,0000002b,00000006,00000035,00000314,00000412,000000d8,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000412,000000ad,00000047,00000060,00001d24,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000418,0000010d,00000047,0000002b,00001d30,00000000,00000035,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000459,000000d8,00000006,00000035,00001d30,00000041,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=0000260b ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=0000260b ret=01004881 0009:Call gdi32.BitBlt(00001d30,00000000,00000036,00000047,0000002a,00001d18,00000000,00000036,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001d30,00000041,00000000,00000006,00000036,00001d18,00000041,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001d18,00000006,0000002a,00000042,00000037,00001d18,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001d18,00000000,00000000,00000047,0000002a,00000314,0000040c,00000083,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001d18,00000000,0000002a,00000006,00000036,00000314,0000040c,000000ad,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,0000040c,00000083,00000047,00000060,00001d24,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000412,000000e3,00000047,0000002a,00001d30,00000000,00000036,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000453,000000ad,00000006,00000036,00001d30,00000041,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00002613 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00002613 ret=01004881 0009:Call gdi32.BitBlt(00001d30,00000000,00000035,00000047,0000002b,00001d18,00000000,00000035,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001d30,00000041,00000000,00000006,00000035,00001d18,00000041,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001d18,00000006,0000002b,00000042,00000036,00001d18,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001d18,00000000,00000000,00000047,0000002b,00000314,00000406,00000058,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001d18,00000000,0000002b,00000006,00000035,00000314,00000406,00000083,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000406,00000058,00000047,00000060,00001d24,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,0000040c,000000b8,00000047,0000002b,00001d30,00000000,00000035,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000044d,00000083,00000006,00000035,00001d30,00000041,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=0000261b ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=0000261b ret=01004881 0009:Call gdi32.BitBlt(00001d30,00000000,0000004a,00000047,00000016,00001d18,00000000,0000004a,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001d30,00000044,00000000,00000003,0000004a,00001d18,00000044,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001d18,00000003,00000016,00000045,0000004b,00001d18,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001d18,00000000,00000000,00000047,00000016,00000314,00000403,00000042,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001d18,00000000,00000016,00000003,0000004a,00000314,00000403,00000058,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000403,00000042,00000047,00000060,00001d24,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000406,000000a2,00000047,00000016,00001d30,00000000,0000004a,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000044a,00000058,00000003,0000004a,00001d30,00000044,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call gdi32.SelectObject(00001d18,0000006c) ret=01005316 0009:Ret gdi32.SelectObject() retval=00001d3c ret=01005316 0009:Call gdi32.SelectObject(00001d24,0000006c) ret=01005324 0009:Ret gdi32.SelectObject() retval=00001d40 ret=01005324 0009:Call gdi32.SelectObject(00001d30,0000006c) ret=01005332 0009:Ret gdi32.SelectObject() retval=00001d44 ret=01005332 0009:Call gdi32.DeleteObject(00001d3c) ret=01005340 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005340 0009:Call gdi32.DeleteObject(00001d40) ret=01005348 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005348 0009:Call gdi32.DeleteObject(00001d44) ret=01005350 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005350 0009:Call gdi32.DeleteDC(00001d18) ret=0100535e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100535e 0009:Call gdi32.DeleteDC(00001d24) ret=01005366 0009:Ret gdi32.DeleteDC() retval=00000001 ret=01005366 0009:Call gdi32.DeleteDC(00001d30) ret=0100536e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100536e 0009:Call user32.ReleaseDC(00010030,00000314) ret=0100537c 0009:Ret user32.ReleaseDC() retval=00000001 ret=0100537c 0009:Call user32.InvalidateRect(00010030,0033f618,00000000) ret=0100538a 0009:Ret user32.InvalidateRect() retval=00000001 ret=0100538a 0009:Call KERNEL32.GetModuleHandleW(00000000) ret=01006a97 0009:Ret KERNEL32.GetModuleHandleW() retval=01000000 ret=01006a97 0009:Call winmm.PlaySoundW(0000007c,01000000,00040007) ret=01006aa0 0009:Call ntdll.RtlAllocateHeap(00110000,00000008,0000001c) ret=7e7356bc 0009:Ret ntdll.RtlAllocateHeap() retval=00148bb0 ret=7e7356bc 0009:Call KERNEL32.ResetEvent(00000040) ret=7e735513 0009:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e735513 0009:Call KERNEL32.SetEvent(00000038) ret=7e735520 0009:Ret KERNEL32.SetEvent() retval=00000001 ret=7e735520 0009:Call msacm32.drv.wodMessage(0000ffff,0000000c,0014cb28,00000000,00000000) ret=7e728e1f 0009:Call winmm.waveOutReset(00008001) ret=7e0c0180 0009:Call winealsa.drv.wodMessage(00000000,0000000c,7e72ab2b,00000000,00000000) ret=7e728e1f 0009:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1b2580 0009:Ret KERNEL32.CreateEventW() retval=00000070 ret=7e1b2580 0009:Call KERNEL32.WaitForSingleObject(00000070,ffffffff) ret=7e1b2635 003d:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bd,0014cb28,0014d3a0,00000000) ret=7e1c4643 003d:Call KERNEL32.IsBadReadPtr(0014cb28,0000002c) ret=7e0bdbc9 003d:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 003d:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bd,008ceaa4,0014d3a0,00000000) ret=7e0bdf33 003d:Call KERNEL32.SetEvent(00000068) ret=7e7341f6 003d:Ret KERNEL32.SetEvent() retval=00000001 ret=7e7341f6 003d:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 003d:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 003d:Call KERNEL32.SetEvent(00000070) ret=7e1c4f3d 003d:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c4f3d 003c:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e73429b 003c:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 003c:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 003c:Call msacm32.drv.wodMessage(0000ffff,0000000c,0014cb28,00000000,00000000) ret=7e728e1f 003c:Call winmm.waveOutReset(00008001) ret=7e0c0180 003c:Call winealsa.drv.wodMessage(00000000,0000000c,7e72ab2b,00000000,00000000) ret=7e728e1f 003c:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1b2580 003c:Ret KERNEL32.CreateEventW() retval=000000bc ret=7e1b2580 003c:Call KERNEL32.WaitForSingleObject(000000bc,ffffffff) ret=7e1b2635 003d:Call KERNEL32.SetEvent(000000bc) ret=7e1c4f3d 003d:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c4f3d 003c:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1b2635 003c:Call KERNEL32.CloseHandle(000000bc) ret=7e1b2640 003c:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1b2640 003c:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 003c:Ret winmm.waveOutReset() retval=00000000 ret=7e0c0180 003c:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 003c:Call msacm32.drv.wodMessage(0000ffff,00000008,0014cb28,0014d3a0,00000020) ret=7e728e1f 003c:Call winmm.waveOutUnprepareHeader(00008001,0014d3a0,00000020) ret=7e0c00b6 003c:Call winealsa.drv.wodMessage(00000000,00000008,7e72ab2b,0014d3a0,00000020) ret=7e728e1f 003c:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 003c:Ret winmm.waveOutUnprepareHeader() retval=00000000 ret=7e0c00b6 003c:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 003c:Call msacm32.drv.wodMessage(0000ffff,00000008,0014cb28,0014d3c0,00000020) ret=7e728e1f 003c:Call winmm.waveOutUnprepareHeader(00008001,0014d3c0,00000020) ret=7e0c00b6 003c:Call winealsa.drv.wodMessage(00000000,00000008,7e72ab2b,0014d3c0,00000020) ret=7e728e1f 003c:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 003c:Ret winmm.waveOutUnprepareHeader() retval=00000000 ret=7e0c00b6 003c:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 003c:Call KERNEL32.CloseHandle(00000068) ret=7e7349fd 003c:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e7349fd 003c:Call ntdll.RtlFreeHeap(00110000,00000000,0014d3a0) ret=7e734a23 003c:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e734a23 003c:Call ntdll.RtlFreeHeap(00110000,00000000,00148cb8) ret=7e734a49 003c:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e734a49 003c:Call msacm32.drv.wodMessage(0000ffff,00000006,0014cb28,00000000,00000000) ret=7e728e1f 003c:Call winmm.waveOutClose(00008001) ret=7e0c01a5 003c:Call winealsa.drv.wodMessage(00000000,00000006,7e72ab2b,00000000,00000000) ret=7e728e1f 003c:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1b2580 003c:Ret KERNEL32.CreateEventW() retval=00000068 ret=7e1b2580 003c:Call KERNEL32.WaitForSingleObject(00000068,ffffffff) ret=7e1b2635 003d:Call KERNEL32.SetEvent(00000068) ret=7e1c4ea1 003d:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c4ea1 003d:Call KERNEL32.ExitThread(00000000) ret=7e1c4eb0 003d:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) 003d:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 003d:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) 003d:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) retval=1 003d:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) 003d:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 003d:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) 003d:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) retval=1 003d:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) 003d:Call KERNEL32.TlsGetValue(00000000) ret=7e3f4071 003d:Ret KERNEL32.TlsGetValue() retval=00000000 ret=7e3f4071 003d:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 003d:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) 003d:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 003c:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1b2635 003c:Call KERNEL32.CloseHandle(00000068) ret=7e1b2640 003c:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1b2640 003c:Call ntdll.RtlFreeHeap(00110000,00000000,0014c7d0) ret=7e1b24dc 003c:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e1b24dc 003c:Call ntdll.RtlDeleteCriticalSection(0013cefc) ret=7e1b24fb 003c:Ret ntdll.RtlDeleteCriticalSection() retval=00000000 ret=7e1b24fb 003c:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bc,0014cb28,00000000,00000000) ret=7e1c4643 003c:Call KERNEL32.IsBadReadPtr(0014cb28,0000002c) ret=7e0bdbc9 003c:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 003c:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bc,008ceaa4,00000000,00000000) ret=7e0bdf33 003c:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 003c:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 003c:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 003c:Call ntdll.RtlFreeHeap(00110000,00000000,0014cb60) ret=7e72ae0b 003c:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e72ae0b 003c:Ret winmm.waveOutClose() retval=00000000 ret=7e0c01a5 003c:Call ntdll.RtlFreeHeap(00110000,00000000,0014cb28) ret=7e0c01f7 003c:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e0c01f7 003c:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 003c:Call ntdll.RtlFreeHeap(00110000,00000000,0014cb00) ret=7e72ae0b 003c:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e72ae0b 0009:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1b2635 0009:Call KERNEL32.CloseHandle(00000070) ret=7e1b2640 0009:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1b2640 0009:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0009:Ret winmm.waveOutReset() retval=00000000 ret=7e0c0180 0009:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0009:Call KERNEL32.WaitForSingleObject(00000040,ffffffff) ret=7e73555a 003c:Call ntdll.RtlFreeHeap(00110000,00000000,00148c28) ret=7e731f79 003c:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e731f79 003c:Call KERNEL32.SetEvent(00000040) ret=7e7343a0 003c:Ret KERNEL32.SetEvent() retval=00000001 ret=7e7343a0 003c:Call KERNEL32.CloseHandle(00000064) ret=7e734340 003c:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e734340 003c:Call ntdll.RtlFreeHeap(00110000,00000000,0014cad8) ret=7e734360 003c:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e734360 003c:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) 003c:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 003c:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) 003c:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) retval=1 003c:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) 003c:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 003c:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) 003c:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) retval=1 003c:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) 003c:Call KERNEL32.TlsGetValue(00000000) ret=7e3f4071 003c:Ret KERNEL32.TlsGetValue() retval=00000000 ret=7e3f4071 003c:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 003c:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) 003c:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0009:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e73555a 0009:Call KERNEL32.ResetEvent(00000038) ret=7e735572 0009:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e735572 0009:Call KERNEL32.CreateThread(00000000,00000000,7e7348a0,00148bb0,00000000,0033f598) ret=7e73560c 003e:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) 003e:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 003e:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) 003e:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 003e:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) 003e:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) retval=1 003e:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) 003e:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 003e:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) 003e:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 003e:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) 003e:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 003e:Starting thread proc 0x7e7348a0 (arg=0x148bb0) 003e:Call KERNEL32.FindResourceW(01000000,0000007c,7e741bde L"WAVE") ret=7e734ca3 003e:Ret KERNEL32.FindResourceW() retval=01014c40 ret=7e734ca3 003e:Call KERNEL32.LoadResource(01000000,01014c40) ret=7e734cb9 003e:Ret KERNEL32.LoadResource() retval=0104d668 ret=7e734cb9 003e:Call KERNEL32.LockResource(0104d668) ret=7e734cce 003e:Ret KERNEL32.LockResource() retval=0104d668 ret=7e734cce 003e:Call KERNEL32.FreeResource(0104d668) ret=7e734ce9 003e:Ret KERNEL32.FreeResource() retval=00000000 ret=7e734ce9 003e:Call ntdll.RtlAllocateHeap(00110000,00000008,0000005c) ret=7e733960 003e:Ret ntdll.RtlAllocateHeap() retval=00148c28 ret=7e733960 003e:Call KERNEL32.GetFileSize(ffffffff,00000000) ret=7e733ab9 003e:Ret KERNEL32.GetFileSize() retval=ffffffff ret=7e733ab9 003e:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7e733cf0 003e:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e733cf0 003e:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7e734e1c 003e:Ret ntdll.RtlAllocateHeap() retval=00148cb8 ret=7e734e1c 003e:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e734f1f 003e:Ret KERNEL32.CreateEventW() retval=00000068 ret=7e734f1f 003e:Call ntdll.RtlAllocateHeap(00110000,00000008,0000001c) ret=7e72abbe 003e:Ret ntdll.RtlAllocateHeap() retval=00148bd8 ret=7e72abbe 003e:Call msacm32.drv.wodMessage(0000ffff,00000005,007ce918,007ce970,00030000) ret=7e728e1f 003e:Call ntdll.RtlAllocateHeap(00110000,00000000,0000002c) ret=7e0bfd8c 003e:Ret ntdll.RtlAllocateHeap() retval=00148b18 ret=7e0bfd8c 003e:Call winmm.waveOutGetNumDevs() ret=7e0bfdb5 003e:Ret winmm.waveOutGetNumDevs() retval=00000002 ret=7e0bfdb5 003e:Call winmm.waveOutOpen(00148b20,00000000,00148cb8,7e0bde60,00148b18,00030008) ret=7e0c0313 003e:Call ntdll.RtlAllocateHeap(00110000,00000008,0000001c) ret=7e72abbe 003e:Ret ntdll.RtlAllocateHeap() retval=00148b50 ret=7e72abbe 003e:Call winealsa.drv.wodMessage(00000000,00000005,007ce5b8,007ce610,00030008) ret=7e728e1f 003e:Call ntdll.RtlAllocateHeap(00110000,00000008,00000068) ret=7e1c6c82 003e:Ret ntdll.RtlAllocateHeap() retval=0014bef8 ret=7e1c6c82 003e:Call ntdll.RtlAllocateHeap(00110000,00000008,00000300) ret=7e1b2459 003e:Ret ntdll.RtlAllocateHeap() retval=0014c7d0 ret=7e1b2459 003e:Call KERNEL32.InitializeCriticalSection(0013cefc) ret=7e1b2469 003e:Ret KERNEL32.InitializeCriticalSection() retval=00000001 ret=7e1b2469 003e:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1c73ab 003e:Ret KERNEL32.CreateEventW() retval=00000070 ret=7e1c73ab 003e:Call KERNEL32.CreateThread(00000000,00000000,7e1c5570,00000000,00000000,0013cedc) ret=7e1c73ef 0009:Ret KERNEL32.CreateThread() retval=00000064 ret=7e73560c 0009:Call KERNEL32.SetThreadPriority(00000064,0000000f) ret=7e73562d 0009:Ret KERNEL32.SetThreadPriority() retval=00000001 ret=7e73562d 0009:Ret winmm.PlaySoundW() retval=00000001 ret=01006aa0 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,0000000c) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c5898 ret=0100a7d2 0009:Call user32.GetClientRect(00010030,0033f608) ret=01005145 0009:Ret user32.GetClientRect() retval=00000001 ret=01005145 0009:Call user32.GetDC(00010030) ret=010051ad 0009:Ret user32.GetDC() retval=00000314 ret=010051ad 0009:Call gdi32.CreateCompatibleDC(00000314) ret=010051bc 0009:Ret gdi32.CreateCompatibleDC() retval=00001da4 ret=010051bc 0009:Call gdi32.CreateCompatibleDC(00000314) ret=010051ca 0009:Ret gdi32.CreateCompatibleDC() retval=00001db0 ret=010051ca 0009:Call gdi32.CreateCompatibleDC(00000314) ret=010051d8 0009:Ret gdi32.CreateCompatibleDC() retval=00001dbc ret=010051d8 0009:Call gdi32.CreateCompatibleBitmap(00000314,00000047,00000060) ret=010051f8 0009:Ret gdi32.CreateCompatibleBitmap() retval=00001dc8 ret=010051f8 0009:Call gdi32.CreateCompatibleBitmap(00000314,00000047,00000060) ret=01005212 0009:Ret gdi32.CreateCompatibleBitmap() retval=00001dcc ret=01005212 0009:Call gdi32.CreateCompatibleBitmap(00000314,00000047,00000060) ret=0100522c 0009:Ret gdi32.CreateCompatibleBitmap() retval=00001dd0 ret=0100522c 0009:Call gdi32.SelectObject(00001da4,00001dc8) ret=01005246 0009:Ret gdi32.SelectObject() retval=0000006c ret=01005246 0009:Call gdi32.SelectObject(00001db0,00001dcc) ret=0100525a 0009:Ret gdi32.SelectObject() retval=0000006c ret=0100525a 0009:Call gdi32.SelectObject(00001dbc,00001dd0) ret=0100526e 0009:Ret gdi32.SelectObject() retval=0000006c ret=0100526e 0009:Call user32.LoadBitmapW(01000000,0033f5a0 L"CARD46") ret=010028ff 003f:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) 003f:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 003f:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) 003f:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 003f:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) 003f:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) retval=1 003f:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) 003f:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 003f:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) 003f:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 003f:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) 003f:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 003f:Starting thread proc 0x7e1c5570 (arg=(nil)) 003f:Call KERNEL32.SetEvent(00000070) ret=7e1c55aa 003f:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c55aa 003e:Ret KERNEL32.CreateThread() retval=000000bc ret=7e1c73ef 003e:Call KERNEL32.SetThreadPriority(000000bc,0000000f) ret=7e1c7413 003e:Ret KERNEL32.SetThreadPriority() retval=00000001 ret=7e1c7413 003e:Call KERNEL32.WaitForSingleObject(00000070,ffffffff) ret=7e1c742f 003e:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1c742f 003e:Call KERNEL32.CloseHandle(00000070) ret=7e1c7443 003e:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1c7443 003e:Call ntdll.RtlFreeHeap(00110000,00000000,0014bef8) ret=7e1c7479 003e:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e1c7479 003e:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bb,00148b18,00000000,00000000) ret=7e1c4643 003e:Call KERNEL32.IsBadReadPtr(00148b18,0000002c) ret=7e0bdbc9 003e:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 003e:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bb,007ceaa4,00000000,00000000) ret=7e0bdf33 003e:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 003e:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 003e:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 003e:Ret winmm.waveOutOpen() retval=00000000 ret=7e0c0313 003e:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 003e:Call ntdll.RtlAllocateHeap(00110000,00000000,000039ac) ret=7e73520d 003e:Ret ntdll.RtlAllocateHeap() retval=0014d3a0 ret=7e73520d 003e:Call msacm32.drv.wodMessage(0000ffff,00000007,00148b18,0014d3a0,00000020) ret=7e728e1f 003e:Call winmm.waveOutPrepareHeader(00008001,0014d3a0,00000020) ret=7e0c09d8 003e:Call winealsa.drv.wodMessage(00000000,00000007,7e72ab2b,0014d3a0,00000020) ret=7e728e1f 003e:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 003e:Ret winmm.waveOutPrepareHeader() retval=00000000 ret=7e0c09d8 003e:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 003e:Call msacm32.drv.wodMessage(0000ffff,00000007,00148b18,0014d3c0,00000020) ret=7e728e1f 003e:Call winmm.waveOutPrepareHeader(00008001,0014d3c0,00000020) ret=7e0c09d8 003e:Call winealsa.drv.wodMessage(00000000,00000007,7e72ab2b,0014d3c0,00000020) ret=7e728e1f 003e:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 003e:Ret winmm.waveOutPrepareHeader() retval=00000000 ret=7e0c09d8 003e:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 003e:Call KERNEL32.WaitForSingleObject(00000038,00000000) ret=7e735343 003e:Ret KERNEL32.WaitForSingleObject() retval=00000102 ret=7e735343 003e:Call msacm32.drv.wodMessage(0000ffff,00000009,00148b18,0014d3a0,00000020) ret=7e728e1f 003e:Call winmm.waveOutWrite(00008001,0014d3a0,00000020) ret=7e0c09b5 003e:Call winealsa.drv.wodMessage(00000000,00000009,7e72ab2b,0014d3a0,00000020) ret=7e728e1f 003e:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 003e:Ret winmm.waveOutWrite() retval=00000000 ret=7e0c09b5 003e:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 003e:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 003e:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 003e:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 003e:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 003e:Call KERNEL32.WaitForSingleObject(00000068,ffffffff) ret=7e73429b 0009:Ret user32.LoadBitmapW() retval=00001de0 ret=010028ff 0009:Call gdi32.CreateCompatibleDC(00001db0) ret=01002909 0009:Ret gdi32.CreateCompatibleDC() retval=00001df4 ret=01002909 0009:Call gdi32.SelectObject(00001df4,00001de0) ret=01002917 0009:Ret gdi32.SelectObject() retval=0000006c ret=01002917 0009:Call gdi32.BitBlt(00001db0,00000000,00000000,00000047,00000060,00001df4,00000000,00000000,00cc0020) ret=01002938 0009:Ret gdi32.BitBlt() retval=00000001 ret=01002938 0009:Call gdi32.SelectObject(00001df4,0000006c) ret=0100293e 0009:Ret gdi32.SelectObject() retval=00001de0 ret=0100293e 0009:Call gdi32.DeleteObject(00001de0) ret=01002947 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01002947 0009:Call gdi32.DeleteDC(00001df4) ret=0100294e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100294e 0009:Call gdi32.SetPixel(00001db0,00000000,00000000,00008000) ret=01002969 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002969 0009:Call gdi32.SetPixel(00001db0,00000001,00000000,00008000) ret=01002976 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002976 0009:Call gdi32.SetPixel(00001db0,00000000,00000001,00008000) ret=01002982 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002982 0009:Call gdi32.SetPixel(00001db0,00000046,00000000,00008000) ret=0100298f 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100298f 0009:Call gdi32.SetPixel(00001db0,00000045,00000000,00008000) ret=0100299c 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100299c 0009:Call gdi32.SetPixel(00001db0,00000046,00000001,00008000) ret=010029ab 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ab 0009:Call gdi32.SetPixel(00001db0,00000000,0000005f,00008000) ret=010029bf 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029bf 0009:Call gdi32.SetPixel(00001db0,00000001,0000005f,00008000) ret=010029d0 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029d0 0009:Call gdi32.SetPixel(00001db0,00000000,0000005e,00008000) ret=010029de 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029de 0009:Call gdi32.SetPixel(00001db0,00000046,0000005f,00008000) ret=010029ef 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ef 0009:Call gdi32.SetPixel(00001db0,00000045,0000005f,00008000) ret=01002a00 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a00 0009:Call gdi32.SetPixel(00001db0,00000046,0000005e,00008000) ret=01002a11 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a11 0009:Call gdi32.CreateCompatibleDC(00001da4) ret=0100272b 0009:Ret gdi32.CreateCompatibleDC() retval=00001e00 ret=0100272b 0009:Call user32.LoadBitmapW(01000000,010012bc L"FELT") ret=0100273f 0009:Ret user32.LoadBitmapW() retval=00001e18 ret=0100273f 0009:Call gdi32.SelectObject(00001e00,00001e18) ret=0100274c 0009:Ret gdi32.SelectObject() retval=0000006c ret=0100274c 0009:Call gdi32.BitBlt(00001da4,00000000,00000000,0000003f,00000040,00001e00,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00001da4,0000003f,00000000,00000008,00000040,00001e00,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00001da4,00000000,00000040,0000003f,00000020,00001e00,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00001da4,0000003f,00000040,00000008,00000020,00001e00,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.SelectObject(00001e00,0000006c) ret=0100287b 0009:Ret gdi32.SelectObject() retval=00001e18 ret=0100287b 0009:Call gdi32.DeleteObject(00001e18) ret=01002884 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01002884 0009:Call gdi32.DeleteDC(00001e00) ret=0100288d 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100288d 0009:Call user32.LoadBitmapW(01000000,010012c8 L"CARDBACK") ret=010028ff 0009:Ret user32.LoadBitmapW() retval=00001e38 ret=010028ff 0009:Call gdi32.CreateCompatibleDC(00001da4) ret=01002909 0009:Ret gdi32.CreateCompatibleDC() retval=00001e4c ret=01002909 0009:Call gdi32.SelectObject(00001e4c,00001e38) ret=01002917 0009:Ret gdi32.SelectObject() retval=0000006c ret=01002917 0009:Call gdi32.BitBlt(00001da4,0000000c,00000000,00000047,00000060,00001e4c,00000000,00000000,00cc0020) ret=01002938 0009:Ret gdi32.BitBlt() retval=00000001 ret=01002938 0009:Call gdi32.SelectObject(00001e4c,0000006c) ret=0100293e 0009:Ret gdi32.SelectObject() retval=00001e38 ret=0100293e 0009:Call gdi32.DeleteObject(00001e38) ret=01002947 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01002947 0009:Call gdi32.DeleteDC(00001e4c) ret=0100294e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100294e 0009:Call gdi32.SetPixel(00001da4,0000000c,00000000,00008000) ret=01002969 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002969 0009:Call gdi32.SetPixel(00001da4,0000000d,00000000,00008000) ret=01002976 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002976 0009:Call gdi32.SetPixel(00001da4,0000000c,00000001,00008000) ret=01002982 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002982 0009:Call gdi32.SetPixel(00001da4,00000052,00000000,00008000) ret=0100298f 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100298f 0009:Call gdi32.SetPixel(00001da4,00000051,00000000,00008000) ret=0100299c 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100299c 0009:Call gdi32.SetPixel(00001da4,00000052,00000001,00008000) ret=010029ab 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ab 0009:Call gdi32.SetPixel(00001da4,0000000c,0000005f,00008000) ret=010029bf 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029bf 0009:Call gdi32.SetPixel(00001da4,0000000d,0000005f,00008000) ret=010029d0 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029d0 0009:Call gdi32.SetPixel(00001da4,0000000c,0000005e,00008000) ret=010029de 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029de 0009:Call gdi32.SetPixel(00001da4,00000052,0000005f,00008000) ret=010029ef 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ef 0009:Call gdi32.SetPixel(00001da4,00000051,0000005f,00008000) ret=01002a00 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a00 0009:Call gdi32.SetPixel(00001da4,00000052,0000005e,00008000) ret=01002a11 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a11 0009:Call winmm.timeGetTime() ret=010047d1 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00002648 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00002648 ret=010047d1 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00002648 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00002648 ret=01004881 0009:Call gdi32.BitBlt(00001da4,00000000,00000000,00000048,00000061,00001da4,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00000314,0000044d,00000258,00000047,00000060,00001db0,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00002653 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00002653 ret=01004881 0009:Call gdi32.BitBlt(00001dbc,00000000,00000026,00000047,0000003a,00001da4,00000000,00000026,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001dbc,00000000,00000000,00000005,00000026,00001da4,00000000,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001da4,00000000,0000003a,00000043,00000027,00001da4,00000005,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001da4,00000000,00000000,00000047,0000003a,00000314,00000452,0000021e,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001da4,00000042,0000003a,00000005,00000026,00000314,00000494,00000258,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000452,0000021e,00000047,00000060,00001db0,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,0000044d,0000027e,00000047,0000003a,00001dbc,00000000,00000026,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000044d,00000258,00000005,00000026,00001dbc,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=0000265b ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=0000265b ret=01004881 0009:Call gdi32.BitBlt(00001dbc,00000000,00000035,00000047,0000002b,00001da4,00000000,00000035,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001dbc,00000000,00000000,00000004,00000035,00001da4,00000000,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001da4,00000000,0000002b,00000044,00000036,00001da4,00000004,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001da4,00000000,00000000,00000047,0000002b,00000314,00000456,000001f3,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001da4,00000043,0000002b,00000004,00000035,00000314,00000499,0000021e,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000456,000001f3,00000047,00000060,00001db0,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000452,00000253,00000047,0000002b,00001dbc,00000000,00000035,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000452,0000021e,00000004,00000035,00001dbc,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00002663 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00002663 ret=01004881 0009:Call gdi32.BitBlt(00001dbc,00000000,00000035,00000047,0000002b,00001da4,00000000,00000035,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001dbc,00000000,00000000,00000003,00000035,00001da4,00000000,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001da4,00000000,0000002b,00000045,00000036,00001da4,00000003,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001da4,00000000,00000000,00000047,0000002b,00000314,00000459,000001c8,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001da4,00000044,0000002b,00000003,00000035,00000314,0000049d,000001f3,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000459,000001c8,00000047,00000060,00001db0,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000456,00000228,00000047,0000002b,00001dbc,00000000,00000035,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000456,000001f3,00000003,00000035,00001dbc,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=0000266b ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=0000266b ret=01004881 0009:Call gdi32.BitBlt(00001dbc,00000000,00000036,00000047,0000002a,00001da4,00000000,00000036,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001dbc,00000000,00000000,00000004,00000036,00001da4,00000000,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001da4,00000000,0000002a,00000044,00000037,00001da4,00000004,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001da4,00000000,00000000,00000047,0000002a,00000314,0000045d,0000019e,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001da4,00000043,0000002a,00000004,00000036,00000314,000004a0,000001c8,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,0000045d,0000019e,00000047,00000060,00001db0,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000459,000001fe,00000047,0000002a,00001dbc,00000000,00000036,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000459,000001c8,00000004,00000036,00001dbc,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00002673 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00002673 ret=01004881 0009:Call gdi32.BitBlt(00001dbc,00000000,00000035,00000047,0000002b,00001da4,00000000,00000035,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001dbc,00000000,00000000,00000004,00000035,00001da4,00000000,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001da4,00000000,0000002b,00000044,00000036,00001da4,00000004,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001da4,00000000,00000000,00000047,0000002b,00000314,00000461,00000173,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001da4,00000043,0000002b,00000004,00000035,00000314,000004a4,0000019e,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000461,00000173,00000047,00000060,00001db0,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,0000045d,000001d3,00000047,0000002b,00001dbc,00000000,00000035,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000045d,0000019e,00000004,00000035,00001dbc,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=0000267b ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=0000267b ret=01004881 0009:Call gdi32.BitBlt(00001dbc,00000000,00000035,00000047,0000002b,00001da4,00000000,00000035,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001dbc,00000000,00000000,00000004,00000035,00001da4,00000000,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001da4,00000000,0000002b,00000044,00000036,00001da4,00000004,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001da4,00000000,00000000,00000047,0000002b,00000314,00000465,00000148,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001da4,00000043,0000002b,00000004,00000035,00000314,000004a8,00000173,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000465,00000148,00000047,00000060,00001db0,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000461,000001a8,00000047,0000002b,00001dbc,00000000,00000035,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000461,00000173,00000004,00000035,00001dbc,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00002683 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00002683 ret=01004881 0009:Call gdi32.BitBlt(00001dbc,00000000,00000035,00000047,0000002b,00001da4,00000000,00000035,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001dbc,00000000,00000000,00000004,00000035,00001da4,00000000,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001da4,00000000,0000002b,00000044,00000036,00001da4,00000004,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001da4,00000000,00000000,00000047,0000002b,00000314,00000469,0000011d,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001da4,00000043,0000002b,00000004,00000035,00000314,000004ac,00000148,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000469,0000011d,00000047,00000060,00001db0,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000465,0000017d,00000047,0000002b,00001dbc,00000000,00000035,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000465,00000148,00000004,00000035,00001dbc,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=0000268b ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=0000268b ret=01004881 0009:Call gdi32.BitBlt(00001dbc,00000000,00000036,00000047,0000002a,00001da4,00000000,00000036,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001dbc,00000000,00000000,00000004,00000036,00001da4,00000000,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001da4,00000000,0000002a,00000044,00000037,00001da4,00000004,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001da4,00000000,00000000,00000047,0000002a,00000314,0000046d,000000f3,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001da4,00000043,0000002a,00000004,00000036,00000314,000004b0,0000011d,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,0000046d,000000f3,00000047,00000060,00001db0,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000469,00000153,00000047,0000002a,00001dbc,00000000,00000036,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000469,0000011d,00000004,00000036,00001dbc,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00002693 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00002693 ret=01004881 0009:Call gdi32.BitBlt(00001dbc,00000000,00000035,00000047,0000002b,00001da4,00000000,00000035,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001dbc,00000000,00000000,00000003,00000035,00001da4,00000000,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001da4,00000000,0000002b,00000045,00000036,00001da4,00000003,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001da4,00000000,00000000,00000047,0000002b,00000314,00000470,000000c8,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001da4,00000044,0000002b,00000003,00000035,00000314,000004b4,000000f3,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000470,000000c8,00000047,00000060,00001db0,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,0000046d,00000128,00000047,0000002b,00001dbc,00000000,00000035,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000046d,000000f3,00000003,00000035,00001dbc,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=0000269b ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=0000269b ret=01004881 0009:Call gdi32.BitBlt(00001dbc,00000000,00000035,00000047,0000002b,00001da4,00000000,00000035,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001dbc,00000000,00000000,00000004,00000035,00001da4,00000000,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001da4,00000000,0000002b,00000044,00000036,00001da4,00000004,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001da4,00000000,00000000,00000047,0000002b,00000314,00000474,0000009d,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001da4,00000043,0000002b,00000004,00000035,00000314,000004b7,000000c8,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000474,0000009d,00000047,00000060,00001db0,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000470,000000fd,00000047,0000002b,00001dbc,00000000,00000035,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000470,000000c8,00000004,00000035,00001dbc,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000026a3 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000026a3 ret=01004881 0009:Call gdi32.BitBlt(00001dbc,00000000,00000036,00000047,0000002a,00001da4,00000000,00000036,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001dbc,00000000,00000000,00000004,00000036,00001da4,00000000,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001da4,00000000,0000002a,00000044,00000037,00001da4,00000004,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001da4,00000000,00000000,00000047,0000002a,00000314,00000478,00000073,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001da4,00000043,0000002a,00000004,00000036,00000314,000004bb,0000009d,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000478,00000073,00000047,00000060,00001db0,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000474,000000d3,00000047,0000002a,00001dbc,00000000,00000036,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000474,0000009d,00000004,00000036,00001dbc,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000026ab ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000026ab ret=01004881 0009:Call gdi32.BitBlt(00001dbc,00000000,00000035,00000047,0000002b,00001da4,00000000,00000035,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001dbc,00000000,00000000,00000004,00000035,00001da4,00000000,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001da4,00000000,0000002b,00000044,00000036,00001da4,00000004,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001da4,00000000,00000000,00000047,0000002b,00000314,0000047c,00000048,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001da4,00000043,0000002b,00000004,00000035,00000314,000004bf,00000073,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,0000047c,00000048,00000047,00000060,00001db0,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000478,000000a8,00000047,0000002b,00001dbc,00000000,00000035,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000478,00000073,00000004,00000035,00001dbc,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000026b3 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000026b3 ret=01004881 0009:Call gdi32.BitBlt(00001dbc,00000000,0000005a,00000047,00000006,00001da4,00000000,0000005a,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00001dbc,00000000,00000000,00000001,0000005a,00001da4,00000000,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00001da4,00000000,00000006,00000047,0000005b,00001da4,00000001,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00001da4,00000000,00000000,00000047,00000006,00000314,0000047d,00000042,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00001da4,00000046,00000006,00000001,0000005a,00000314,000004c3,00000048,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,0000047d,00000042,00000047,00000060,00001db0,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,0000047c,000000a2,00000047,00000006,00001dbc,00000000,0000005a,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000047c,00000048,00000001,0000005a,00001dbc,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call gdi32.SelectObject(00001da4,0000006c) ret=01005316 0009:Ret gdi32.SelectObject() retval=00001dc8 ret=01005316 0009:Call gdi32.SelectObject(00001db0,0000006c) ret=01005324 0009:Ret gdi32.SelectObject() retval=00001dcc ret=01005324 0009:Call gdi32.SelectObject(00001dbc,0000006c) ret=01005332 0009:Ret gdi32.SelectObject() retval=00001dd0 ret=01005332 0009:Call gdi32.DeleteObject(00001dc8) ret=01005340 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005340 0009:Call gdi32.DeleteObject(00001dcc) ret=01005348 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005348 0009:Call gdi32.DeleteObject(00001dd0) ret=01005350 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005350 0009:Call gdi32.DeleteDC(00001da4) ret=0100535e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100535e 0009:Call gdi32.DeleteDC(00001db0) ret=01005366 0009:Ret gdi32.DeleteDC() retval=00000001 ret=01005366 0009:Call gdi32.DeleteDC(00001dbc) ret=0100536e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100536e 0009:Call user32.ReleaseDC(00010030,00000314) ret=0100537c 0009:Ret user32.ReleaseDC() retval=00000001 ret=0100537c 0009:Call user32.InvalidateRect(00010030,0033f618,00000000) ret=0100538a 0009:Ret user32.InvalidateRect() retval=00000001 ret=0100538a 0009:Call KERNEL32.GetModuleHandleW(00000000) ret=01006a97 0009:Ret KERNEL32.GetModuleHandleW() retval=01000000 ret=01006a97 0009:Call winmm.PlaySoundW(0000007c,01000000,00040007) ret=01006aa0 0009:Call ntdll.RtlAllocateHeap(00110000,00000008,0000001c) ret=7e7356bc 0009:Ret ntdll.RtlAllocateHeap() retval=0014cad8 ret=7e7356bc 0009:Call KERNEL32.ResetEvent(00000040) ret=7e735513 0009:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e735513 0009:Call KERNEL32.SetEvent(00000038) ret=7e735520 0009:Ret KERNEL32.SetEvent() retval=00000001 ret=7e735520 0009:Call msacm32.drv.wodMessage(0000ffff,0000000c,00148b18,00000000,00000000) ret=7e728e1f 0009:Call winmm.waveOutReset(00008001) ret=7e0c0180 0009:Call winealsa.drv.wodMessage(00000000,0000000c,7e72ab2b,00000000,00000000) ret=7e728e1f 0009:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1b2580 0009:Ret KERNEL32.CreateEventW() retval=00000070 ret=7e1b2580 003f:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bd,00148b18,0014d3a0,00000000) ret=7e1c4643 003f:Call KERNEL32.IsBadReadPtr(00148b18,0000002c) ret=7e0bdbc9 003f:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 003f:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bd,007ceaa4,0014d3a0,00000000) ret=7e0bdf33 003f:Call KERNEL32.SetEvent(00000068) ret=7e7341f6 003f:Ret KERNEL32.SetEvent() retval=00000001 ret=7e7341f6 003f:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 003f:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 003f:Call KERNEL32.SetEvent(00000070) ret=7e1c4f3d 003f:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c4f3d 003e:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e73429b 003e:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 003e:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 003e:Call msacm32.drv.wodMessage(0000ffff,0000000c,00148b18,00000000,00000000) ret=7e728e1f 003e:Call winmm.waveOutReset(00008001) ret=7e0c0180 003e:Call winealsa.drv.wodMessage(00000000,0000000c,7e72ab2b,00000000,00000000) ret=7e728e1f 003e:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1b2580 003e:Ret KERNEL32.CreateEventW() retval=000000c0 ret=7e1b2580 003f:Call KERNEL32.SetEvent(000000c0) ret=7e1c4f3d 003f:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c4f3d 003e:Call KERNEL32.WaitForSingleObject(000000c0,ffffffff) ret=7e1b2635 003e:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1b2635 003e:Call KERNEL32.CloseHandle(000000c0) ret=7e1b2640 003e:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1b2640 003e:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 003e:Ret winmm.waveOutReset() retval=00000000 ret=7e0c0180 003e:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 003e:Call msacm32.drv.wodMessage(0000ffff,00000008,00148b18,0014d3a0,00000020) ret=7e728e1f 003e:Call winmm.waveOutUnprepareHeader(00008001,0014d3a0,00000020) ret=7e0c00b6 003e:Call winealsa.drv.wodMessage(00000000,00000008,7e72ab2b,0014d3a0,00000020) ret=7e728e1f 003e:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 003e:Ret winmm.waveOutUnprepareHeader() retval=00000000 ret=7e0c00b6 003e:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 003e:Call msacm32.drv.wodMessage(0000ffff,00000008,00148b18,0014d3c0,00000020) ret=7e728e1f 003e:Call winmm.waveOutUnprepareHeader(00008001,0014d3c0,00000020) ret=7e0c00b6 003e:Call winealsa.drv.wodMessage(00000000,00000008,7e72ab2b,0014d3c0,00000020) ret=7e728e1f 003e:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 003e:Ret winmm.waveOutUnprepareHeader() retval=00000000 ret=7e0c00b6 003e:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 003e:Call KERNEL32.CloseHandle(00000068) ret=7e7349fd 003e:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e7349fd 003e:Call ntdll.RtlFreeHeap(00110000,00000000,0014d3a0) ret=7e734a23 003e:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e734a23 003e:Call ntdll.RtlFreeHeap(00110000,00000000,00148cb8) ret=7e734a49 003e:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e734a49 003e:Call msacm32.drv.wodMessage(0000ffff,00000006,00148b18,00000000,00000000) ret=7e728e1f 003e:Call winmm.waveOutClose(00008001) ret=7e0c01a5 003e:Call winealsa.drv.wodMessage(00000000,00000006,7e72ab2b,00000000,00000000) ret=7e728e1f 003e:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1b2580 003e:Ret KERNEL32.CreateEventW() retval=00000068 ret=7e1b2580 003f:Call KERNEL32.SetEvent(00000068) ret=7e1c4ea1 003f:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c4ea1 003f:Call KERNEL32.ExitThread(00000000) ret=7e1c4eb0 003f:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) 003f:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 003f:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) 003f:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) retval=1 003f:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) 003f:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 003f:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) 003f:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) retval=1 003f:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) 003f:Call KERNEL32.TlsGetValue(00000000) ret=7e3f4071 003f:Ret KERNEL32.TlsGetValue() retval=00000000 ret=7e3f4071 003f:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 003f:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) 003f:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 003e:Call KERNEL32.WaitForSingleObject(00000068,ffffffff) ret=7e1b2635 003e:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1b2635 003e:Call KERNEL32.CloseHandle(00000068) ret=7e1b2640 003e:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1b2640 003e:Call ntdll.RtlFreeHeap(00110000,00000000,0014c7d0) ret=7e1b24dc 003e:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e1b24dc 003e:Call ntdll.RtlDeleteCriticalSection(0013cefc) ret=7e1b24fb 003e:Ret ntdll.RtlDeleteCriticalSection() retval=00000000 ret=7e1b24fb 003e:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bc,00148b18,00000000,00000000) ret=7e1c4643 003e:Call KERNEL32.IsBadReadPtr(00148b18,0000002c) ret=7e0bdbc9 003e:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 003e:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bc,007ceaa4,00000000,00000000) ret=7e0bdf33 003e:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 003e:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 003e:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 003e:Call ntdll.RtlFreeHeap(00110000,00000000,00148b50) ret=7e72ae0b 003e:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e72ae0b 003e:Ret winmm.waveOutClose() retval=00000000 ret=7e0c01a5 003e:Call ntdll.RtlFreeHeap(00110000,00000000,00148b18) ret=7e0c01f7 003e:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e0c01f7 003e:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 003e:Call ntdll.RtlFreeHeap(00110000,00000000,00148bd8) ret=7e72ae0b 003e:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e72ae0b 0009:Call KERNEL32.WaitForSingleObject(00000070,ffffffff) ret=7e1b2635 0009:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1b2635 0009:Call KERNEL32.CloseHandle(00000070) ret=7e1b2640 0009:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1b2640 0009:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0009:Ret winmm.waveOutReset() retval=00000000 ret=7e0c0180 0009:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0009:Call KERNEL32.WaitForSingleObject(00000040,ffffffff) ret=7e73555a 003e:Call ntdll.RtlFreeHeap(00110000,00000000,00148c28) ret=7e731f79 003e:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e731f79 003e:Call KERNEL32.SetEvent(00000040) ret=7e7343a0 003e:Ret KERNEL32.SetEvent() retval=00000001 ret=7e7343a0 003e:Call KERNEL32.CloseHandle(00000064) ret=7e734340 003e:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e734340 003e:Call ntdll.RtlFreeHeap(00110000,00000000,00148bb0) ret=7e734360 003e:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e734360 003e:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) 003e:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 003e:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) 003e:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) retval=1 003e:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) 003e:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 003e:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) 003e:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) retval=1 003e:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) 003e:Call KERNEL32.TlsGetValue(00000000) ret=7e3f4071 003e:Ret KERNEL32.TlsGetValue() retval=00000000 ret=7e3f4071 003e:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 003e:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) 003e:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0009:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e73555a 0009:Call KERNEL32.ResetEvent(00000038) ret=7e735572 0009:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e735572 0009:Call KERNEL32.CreateThread(00000000,00000000,7e7348a0,0014cad8,00000000,0033f598) ret=7e73560c 0040:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) 0040:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0040:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) 0040:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0040:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) 0040:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) retval=1 0040:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) 0040:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0040:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) 0040:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0040:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) 0040:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0040:Starting thread proc 0x7e7348a0 (arg=0x14cad8) 0040:Call KERNEL32.FindResourceW(01000000,0000007c,7e741bde L"WAVE") ret=7e734ca3 0040:Ret KERNEL32.FindResourceW() retval=01014c40 ret=7e734ca3 0040:Call KERNEL32.LoadResource(01000000,01014c40) ret=7e734cb9 0040:Ret KERNEL32.LoadResource() retval=0104d668 ret=7e734cb9 0040:Call KERNEL32.LockResource(0104d668) ret=7e734cce 0040:Ret KERNEL32.LockResource() retval=0104d668 ret=7e734cce 0040:Call KERNEL32.FreeResource(0104d668) ret=7e734ce9 0040:Ret KERNEL32.FreeResource() retval=00000000 ret=7e734ce9 0040:Call ntdll.RtlAllocateHeap(00110000,00000008,0000005c) ret=7e733960 0040:Ret ntdll.RtlAllocateHeap() retval=00148c28 ret=7e733960 0040:Call KERNEL32.GetFileSize(ffffffff,00000000) ret=7e733ab9 0040:Ret KERNEL32.GetFileSize() retval=ffffffff ret=7e733ab9 0040:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7e733cf0 0040:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e733cf0 0040:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7e734e1c 0040:Ret ntdll.RtlAllocateHeap() retval=00148cb8 ret=7e734e1c 0040:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e734f1f 0040:Ret KERNEL32.CreateEventW() retval=00000068 ret=7e734f1f 0040:Call ntdll.RtlAllocateHeap(00110000,00000008,0000001c) ret=7e72abbe 0040:Ret ntdll.RtlAllocateHeap() retval=0014cb00 ret=7e72abbe 0040:Call msacm32.drv.wodMessage(0000ffff,00000005,008ce918,008ce970,00030000) ret=7e728e1f 0040:Call ntdll.RtlAllocateHeap(00110000,00000000,0000002c) ret=7e0bfd8c 0040:Ret ntdll.RtlAllocateHeap() retval=0014cb28 ret=7e0bfd8c 0040:Call winmm.waveOutGetNumDevs() ret=7e0bfdb5 0040:Ret winmm.waveOutGetNumDevs() retval=00000002 ret=7e0bfdb5 0040:Call winmm.waveOutOpen(0014cb30,00000000,00148cb8,7e0bde60,0014cb28,00030008) ret=7e0c0313 0040:Call ntdll.RtlAllocateHeap(00110000,00000008,0000001c) ret=7e72abbe 0040:Ret ntdll.RtlAllocateHeap() retval=0014cb60 ret=7e72abbe 0040:Call winealsa.drv.wodMessage(00000000,00000005,008ce5b8,008ce610,00030008) ret=7e728e1f 0040:Call ntdll.RtlAllocateHeap(00110000,00000008,00000068) ret=7e1c6c82 0040:Ret ntdll.RtlAllocateHeap() retval=00148b18 ret=7e1c6c82 0040:Call ntdll.RtlAllocateHeap(00110000,00000008,00000300) ret=7e1b2459 0040:Ret ntdll.RtlAllocateHeap() retval=0014c7d0 ret=7e1b2459 0040:Call KERNEL32.InitializeCriticalSection(0013cefc) ret=7e1b2469 0040:Ret KERNEL32.InitializeCriticalSection() retval=00000001 ret=7e1b2469 0040:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1c73ab 0040:Ret KERNEL32.CreateEventW() retval=00000070 ret=7e1c73ab 0040:Call KERNEL32.CreateThread(00000000,00000000,7e1c5570,00000000,00000000,0013cedc) ret=7e1c73ef 0009:Ret KERNEL32.CreateThread() retval=00000064 ret=7e73560c 0009:Call KERNEL32.SetThreadPriority(00000064,0000000f) ret=7e73562d 0009:Ret KERNEL32.SetThreadPriority() retval=00000001 ret=7e73562d 0009:Ret winmm.PlaySoundW() retval=00000001 ret=01006aa0 0009:Call user32.GetMenu(00010030) ret=01003268 0009:Ret user32.GetMenu() retval=000000f0 ret=01003268 0009:Call user32.EnableMenuItem(000000f0,00009c4a,00000001) ret=01003276 0009:Ret user32.EnableMenuItem() retval=00000001 ret=01003276 0009:Call user32.GetClientRect(00010030,0033f618) ret=01002eb3 0009:Ret user32.GetClientRect() retval=00000001 ret=01002eb3 0009:Call user32.GetClientRect(00010030,0033f5f4) ret=01002b2e 0009:Ret user32.GetClientRect() retval=00000001 ret=01002b2e 0009:Call user32.GetClientRect(00010030,0033f5f4) ret=01002b2e 0009:Ret user32.GetClientRect() retval=00000001 ret=01002b2e 0009:Call user32.GetClientRect(00010030,0033f5f4) ret=01002b2e 0009:Ret user32.GetClientRect() retval=00000001 ret=01002b2e 0009:Call user32.GetClientRect(00010030,0033f5f4) ret=01002b2e 0009:Ret user32.GetClientRect() retval=00000001 ret=01002b2e 0009:Call user32.GetClientRect(00010030,0033f5f4) ret=01002b2e 0009:Ret user32.GetClientRect() retval=00000001 ret=01002b2e 0009:Call user32.GetClientRect(00010030,0033f5f4) ret=01002b2e 0009:Ret user32.GetClientRect() retval=00000001 ret=01002b2e 0009:Call user32.GetClientRect(00010030,0033f5f4) ret=01002b2e 0009:Ret user32.GetClientRect() retval=00000001 ret=01002b2e 0009:Call user32.GetClientRect(00010030,0033f5f4) ret=01002b2e 0009:Ret user32.GetClientRect() retval=00000001 ret=01002b2e 0009:Call user32.GetClientRect(00010030,0033f5f4) ret=01002b2e 0009:Ret user32.GetClientRect() retval=00000001 ret=01002b2e 0009:Call user32.GetClientRect(00010030,0033f5f4) ret=01002b2e 0009:Ret user32.GetClientRect() retval=00000001 ret=01002b2e 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_COMMAND,wp=00009c47,lp=00000000) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02fd041b) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02fd041b) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02fd041b) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02b9041a) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02b9041a) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_PAINT,wp=00000000,lp=00000000) 0009:Call user32.BeginPaint(00010030,0033f8d4) ret=01006ec0 0009:Ret user32.BeginPaint() retval=00000314 ret=01006ec0 0009:Call user32.GetClientRect(00010030,0033f800) ret=01005cd6 0009:Ret user32.GetClientRect() retval=00000001 ret=01005cd6 0009:Call gdi32.CreateCompatibleDC(00000314) ret=0100272b 0009:Ret gdi32.CreateCompatibleDC() retval=00001e64 ret=0100272b 0009:Call user32.LoadBitmapW(01000000,010012bc L"FELT") ret=0100273f 0009:Ret user32.LoadBitmapW() retval=00001e7c ret=0100273f 0009:Call gdi32.SelectObject(00001e64,00001e7c) ret=0100274c 0009:Ret gdi32.SelectObject() retval=0000006c ret=0100274c 0009:Call gdi32.BitBlt(00000314,00000000,00000000,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000003f,00000000,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000007e,00000000,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000bd,00000000,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000fc,00000000,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000013b,00000000,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000017a,00000000,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001b9,00000000,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001f8,00000000,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000237,00000000,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000276,00000000,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002b5,00000000,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002f4,00000000,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000333,00000000,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000372,00000000,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003b1,00000000,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003f0,00000000,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000042f,00000000,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000046e,00000000,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ad,00000000,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ec,00000000,00000013,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000000,00000040,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000003f,00000040,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000007e,00000040,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000bd,00000040,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000fc,00000040,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000013b,00000040,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000017a,00000040,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001b9,00000040,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001f8,00000040,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000237,00000040,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000276,00000040,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002b5,00000040,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002f4,00000040,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000333,00000040,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000372,00000040,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003b1,00000040,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003f0,00000040,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000042f,00000040,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000046e,00000040,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ad,00000040,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ec,00000040,00000013,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000000,00000080,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000003f,00000080,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000007e,00000080,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000bd,00000080,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000fc,00000080,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000013b,00000080,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000017a,00000080,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001b9,00000080,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001f8,00000080,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000237,00000080,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000276,00000080,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002b5,00000080,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002f4,00000080,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000333,00000080,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000372,00000080,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003b1,00000080,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003f0,00000080,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000042f,00000080,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000046e,00000080,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ad,00000080,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ec,00000080,00000013,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000000,000000c0,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000003f,000000c0,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000007e,000000c0,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000bd,000000c0,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000fc,000000c0,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000013b,000000c0,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000017a,000000c0,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001b9,000000c0,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001f8,000000c0,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000237,000000c0,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000276,000000c0,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002b5,000000c0,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002f4,000000c0,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000333,000000c0,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000372,000000c0,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003b1,000000c0,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003f0,000000c0,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000042f,000000c0,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000046e,000000c0,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ad,000000c0,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ec,000000c0,00000013,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000000,00000100,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000003f,00000100,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000007e,00000100,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000bd,00000100,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000fc,00000100,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000013b,00000100,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000017a,00000100,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001b9,00000100,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001f8,00000100,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000237,00000100,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000276,00000100,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002b5,00000100,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002f4,00000100,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000333,00000100,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000372,00000100,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003b1,00000100,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003f0,00000100,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000042f,00000100,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000046e,00000100,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ad,00000100,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ec,00000100,00000013,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000000,00000140,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000003f,00000140,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000007e,00000140,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000bd,00000140,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000fc,00000140,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000013b,00000140,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000017a,00000140,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001b9,00000140,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001f8,00000140,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000237,00000140,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000276,00000140,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002b5,00000140,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002f4,00000140,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000333,00000140,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000372,00000140,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003b1,00000140,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003f0,00000140,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000042f,00000140,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000046e,00000140,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ad,00000140,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ec,00000140,00000013,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000000,00000180,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000003f,00000180,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000007e,00000180,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000bd,00000180,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000fc,00000180,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000013b,00000180,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000017a,00000180,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001b9,00000180,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001f8,00000180,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000237,00000180,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000276,00000180,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002b5,00000180,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002f4,00000180,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000333,00000180,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000372,00000180,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003b1,00000180,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003f0,00000180,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000042f,00000180,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000046e,00000180,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ad,00000180,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ec,00000180,00000013,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000000,000001c0,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000003f,000001c0,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000007e,000001c0,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000bd,000001c0,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000fc,000001c0,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000013b,000001c0,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000017a,000001c0,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001b9,000001c0,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001f8,000001c0,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000237,000001c0,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000276,000001c0,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002b5,000001c0,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002f4,000001c0,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000333,000001c0,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000372,000001c0,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003b1,000001c0,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003f0,000001c0,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000042f,000001c0,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000046e,000001c0,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ad,000001c0,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ec,000001c0,00000013,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000000,00000200,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000003f,00000200,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000007e,00000200,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000bd,00000200,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000fc,00000200,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000013b,00000200,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000017a,00000200,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001b9,00000200,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001f8,00000200,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000237,00000200,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000276,00000200,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002b5,00000200,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002f4,00000200,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000333,00000200,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000372,00000200,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003b1,00000200,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003f0,00000200,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000042f,00000200,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000046e,00000200,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ad,00000200,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ec,00000200,00000013,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000000,00000240,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000003f,00000240,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000007e,00000240,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000bd,00000240,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000fc,00000240,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000013b,00000240,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000017a,00000240,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001b9,00000240,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001f8,00000240,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000237,00000240,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000276,00000240,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002b5,00000240,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002f4,00000240,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000333,00000240,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000372,00000240,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003b1,00000240,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003f0,00000240,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000042f,00000240,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000046e,00000240,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ad,00000240,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ec,00000240,00000013,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000000,00000280,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000003f,00000280,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000007e,00000280,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000bd,00000280,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000fc,00000280,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000013b,00000280,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000017a,00000280,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001b9,00000280,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001f8,00000280,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000237,00000280,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000276,00000280,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002b5,00000280,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002f4,00000280,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000333,00000280,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000372,00000280,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003b1,00000280,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003f0,00000280,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000042f,00000280,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000046e,00000280,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ad,00000280,0000003f,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ec,00000280,00000013,00000040,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0041:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) 0041:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0041:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) 0041:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0041:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) 0041:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) retval=1 0041:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) 0041:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0041:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) 0041:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0041:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) 0041:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0041:Starting thread proc 0x7e1c5570 (arg=(nil)) 0041:Call KERNEL32.SetEvent(00000070) ret=7e1c55aa 0041:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c55aa 0040:Ret KERNEL32.CreateThread() retval=000000c0 ret=7e1c73ef 0040:Call KERNEL32.SetThreadPriority(000000c0,0000000f) ret=7e1c7413 0040:Ret KERNEL32.SetThreadPriority() retval=00000001 ret=7e1c7413 0040:Call KERNEL32.WaitForSingleObject(00000070,ffffffff) ret=7e1c742f 0040:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1c742f 0040:Call KERNEL32.CloseHandle(00000070) ret=7e1c7443 0040:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1c7443 0040:Call ntdll.RtlFreeHeap(00110000,00000000,00148b18) ret=7e1c7479 0040:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e1c7479 0040:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bb,0014cb28,00000000,00000000) ret=7e1c4643 0040:Call KERNEL32.IsBadReadPtr(0014cb28,0000002c) ret=7e0bdbc9 0040:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 0040:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bb,008ceaa4,00000000,00000000) ret=7e0bdf33 0040:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 0040:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 0040:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0040:Ret winmm.waveOutOpen() retval=00000000 ret=7e0c0313 0040:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0040:Call ntdll.RtlAllocateHeap(00110000,00000000,000039ac) ret=7e73520d 0040:Ret ntdll.RtlAllocateHeap() retval=0014d3a0 ret=7e73520d 0040:Call msacm32.drv.wodMessage(0000ffff,00000007,0014cb28,0014d3a0,00000020) ret=7e728e1f 0040:Call winmm.waveOutPrepareHeader(00008001,0014d3a0,00000020) ret=7e0c09d8 0040:Call winealsa.drv.wodMessage(00000000,00000007,7e72ab2b,0014d3a0,00000020) ret=7e728e1f 0040:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 0040:Ret winmm.waveOutPrepareHeader() retval=00000000 ret=7e0c09d8 0040:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0040:Call msacm32.drv.wodMessage(0000ffff,00000007,0014cb28,0014d3c0,00000020) ret=7e728e1f 0040:Call winmm.waveOutPrepareHeader(00008001,0014d3c0,00000020) ret=7e0c09d8 0040:Call winealsa.drv.wodMessage(00000000,00000007,7e72ab2b,0014d3c0,00000020) ret=7e728e1f 0040:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 0040:Ret winmm.waveOutPrepareHeader() retval=00000000 ret=7e0c09d8 0040:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0040:Call KERNEL32.WaitForSingleObject(00000038,00000000) ret=7e735343 0040:Ret KERNEL32.WaitForSingleObject() retval=00000102 ret=7e735343 0040:Call msacm32.drv.wodMessage(0000ffff,00000009,0014cb28,0014d3a0,00000020) ret=7e728e1f 0040:Call winmm.waveOutWrite(00008001,0014d3a0,00000020) ret=7e0c09b5 0040:Call winealsa.drv.wodMessage(00000000,00000009,7e72ab2b,0014d3a0,00000020) ret=7e728e1f 0040:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0040:Ret winmm.waveOutWrite() retval=00000000 ret=7e0c09b5 0040:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0040:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 0040:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 0040:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 0040:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 0040:Call KERNEL32.WaitForSingleObject(00000068,ffffffff) ret=7e73429b 0009:Call gdi32.BitBlt(00000314,00000000,000002c0,0000003f,00000002,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000003f,000002c0,0000003f,00000002,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000007e,000002c0,0000003f,00000002,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000bd,000002c0,0000003f,00000002,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000fc,000002c0,0000003f,00000002,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000013b,000002c0,0000003f,00000002,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000017a,000002c0,0000003f,00000002,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001b9,000002c0,0000003f,00000002,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001f8,000002c0,0000003f,00000002,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000237,000002c0,0000003f,00000002,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000276,000002c0,0000003f,00000002,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002b5,000002c0,0000003f,00000002,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002f4,000002c0,0000003f,00000002,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000333,000002c0,0000003f,00000002,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000372,000002c0,0000003f,00000002,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003b1,000002c0,0000003f,00000002,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003f0,000002c0,0000003f,00000002,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000042f,000002c0,0000003f,00000002,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000046e,000002c0,0000003f,00000002,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ad,000002c0,0000003f,00000002,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ec,000002c0,00000013,00000002,00001e64,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.SelectObject(00001e64,0000006c) ret=0100287b 0009:Ret gdi32.SelectObject() retval=00001e7c ret=0100287b 0009:Call gdi32.DeleteObject(00001e7c) ret=01002884 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01002884 0009:Call gdi32.DeleteDC(00001e64) ret=0100288d 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100288d 0009:Call gdi32.CreateCompatibleDC(00000314) ret=01005cf3 0009:Ret gdi32.CreateCompatibleDC() retval=00001e90 ret=01005cf3 0009:Call gdi32.CreateCompatibleDC(00000314) ret=01005cf9 0009:Ret gdi32.CreateCompatibleDC() retval=00001e9c ret=01005cf9 0009:Call user32.LoadBitmapW(01000000,010012c8 L"CARDBACK") ret=01005d0d 0009:Ret user32.LoadBitmapW() retval=00001eb4 ret=01005d0d 0009:Call gdi32.SelectObject(00001e9c,00001eb4) ret=01005d1a 0009:Ret gdi32.SelectObject() retval=0000006c ret=01005d1a 0009:Call gdi32.GetPixel(00000314,00000033,0000000a) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000034,0000000a) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000033,0000000b) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,00000079,0000000a) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,00000078,0000000a) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,00000079,0000000b) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,00000033,0000000a,00000047,00000009,00001e9c,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,00000033,0000000a,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000034,0000000a,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000033,0000000b,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,00000079,0000000a,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,00000078,0000000a,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,00000079,0000000b,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,00000033,00000011) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000034,00000011) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000033,00000012) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,00000079,00000011) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,00000078,00000011) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,00000079,00000012) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,00000033,00000011,00000047,00000009,00001e9c,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,00000033,00000011,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000034,00000011,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000033,00000012,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,00000079,00000011,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,00000078,00000011,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,00000079,00000012,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,00000033,00000018) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000034,00000018) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000033,00000019) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,00000079,00000018) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,00000078,00000018) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,00000079,00000019) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,00000033,00000018,00000047,00000009,00001e9c,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,00000033,00000018,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000034,00000018,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000033,00000019,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,00000079,00000018,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,00000078,00000018,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,00000079,00000019,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,00000033,0000001f) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000034,0000001f) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000033,00000020) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,00000079,0000001f) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,00000078,0000001f) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,00000079,00000020) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,00000033,0000001f,00000047,00000009,00001e9c,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,00000033,0000001f,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000034,0000001f,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000033,00000020,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,00000079,0000001f,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,00000078,0000001f,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,00000079,00000020,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,00000033,00000026) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000034,00000026) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000033,00000027) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,00000079,00000026) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,00000078,00000026) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,00000079,00000027) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,00000033,00000026,00000047,00000009,00001e9c,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,00000033,00000026,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000034,00000026,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000033,00000027,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,00000079,00000026,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,00000078,00000026,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,00000079,00000027,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,00000033,0000002d) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000034,0000002d) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000033,0000002e) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,00000079,0000002d) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,00000078,0000002d) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,00000079,0000002e) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call user32.LoadBitmapW(01000000,0033f888 L"CARD50") ret=01005f7d 0009:Ret user32.LoadBitmapW() retval=00001ed4 ret=01005f7d 0009:Call gdi32.SelectObject(00001e90,00001ed4) ret=01005f8a 0009:Ret gdi32.SelectObject() retval=0000006c ret=01005f8a 0009:Call gdi32.BitBlt(00000314,00000033,0000002d,00000047,00000060,00001e90,00000000,00000000,00cc0020) ret=01005faa 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005faa 0009:Call gdi32.SelectObject(00001e90,0000006c) ret=01005fb6 0009:Ret gdi32.SelectObject() retval=00001ed4 ret=01005fb6 0009:Call gdi32.DeleteObject(00001ed4) ret=01005fbf 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005fbf 0009:Call gdi32.SetPixel(00000314,00000033,0000002d,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000034,0000002d,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000033,0000002e,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,00000079,0000002d,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,00000078,0000002d,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,00000079,0000002e,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,00000033,00000049) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000034,00000049) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000033,0000004a) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,00000079,00000049) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,00000078,00000049) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,00000079,0000004a) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.GetPixel(00000314,00000033,000000a8) ret=01005ea5 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ea5 0009:Call gdi32.GetPixel(00000314,00000034,000000a8) ret=01005eba 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005eba 0009:Call gdi32.GetPixel(00000314,00000033,000000a7) ret=01005ecd 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ecd 0009:Call gdi32.GetPixel(00000314,00000079,000000a8) ret=01005ee1 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ee1 0009:Call gdi32.GetPixel(00000314,00000078,000000a8) ret=01005ef5 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ef5 0009:Call gdi32.GetPixel(00000314,00000079,000000a7) ret=01005f09 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005f09 0009:Call user32.LoadBitmapW(01000000,0033f888 L"CARD45") ret=01005f7d 0009:Ret user32.LoadBitmapW() retval=00001ef4 ret=01005f7d 0009:Call gdi32.SelectObject(00001e90,00001ef4) ret=01005f8a 0009:Ret gdi32.SelectObject() retval=0000006c ret=01005f8a 0009:Call gdi32.BitBlt(00000314,00000033,00000049,00000047,00000060,00001e90,00000000,00000000,00cc0020) ret=01005faa 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005faa 0009:Call gdi32.SelectObject(00001e90,0000006c) ret=01005fb6 0009:Ret gdi32.SelectObject() retval=00001ef4 ret=01005fb6 0009:Call gdi32.DeleteObject(00001ef4) ret=01005fbf 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005fbf 0009:Call gdi32.SetPixel(00000314,00000033,00000049,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000034,00000049,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000033,0000004a,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,00000079,00000049,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,00000078,00000049,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,00000079,0000004a,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.SetPixel(00000314,00000033,000000a8,ffffffff) ret=01006044 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006044 0009:Call gdi32.SetPixel(00000314,00000034,000000a8,ffffffff) ret=01006059 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006059 0009:Call gdi32.SetPixel(00000314,00000033,000000a7,ffffffff) ret=01006069 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006069 0009:Call gdi32.SetPixel(00000314,00000079,000000a8,ffffffff) ret=0100607d 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100607d 0009:Call gdi32.SetPixel(00000314,00000078,000000a8,ffffffff) ret=01006091 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006091 0009:Call gdi32.SetPixel(00000314,00000079,000000a7,ffffffff) ret=010060a5 0009:Ret gdi32.SetPixel() retval=00ffffff ret=010060a5 0009:Call gdi32.GetPixel(00000314,000000ad,0000000a) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,000000ae,0000000a) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,000000ad,0000000b) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,000000f3,0000000a) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,000000f2,0000000a) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,000000f3,0000000b) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,000000ad,0000000a,00000047,00000009,00001e9c,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,000000ad,0000000a,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,000000ae,0000000a,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,000000ad,0000000b,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000000f3,0000000a,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,000000f2,0000000a,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,000000f3,0000000b,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,000000ad,00000011) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,000000ae,00000011) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,000000ad,00000012) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,000000f3,00000011) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,000000f2,00000011) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,000000f3,00000012) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,000000ad,00000011,00000047,00000009,00001e9c,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,000000ad,00000011,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,000000ae,00000011,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,000000ad,00000012,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000000f3,00000011,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,000000f2,00000011,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,000000f3,00000012,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,000000ad,00000018) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,000000ae,00000018) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,000000ad,00000019) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,000000f3,00000018) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,000000f2,00000018) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,000000f3,00000019) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,000000ad,00000018,00000047,00000009,00001e9c,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,000000ad,00000018,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,000000ae,00000018,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,000000ad,00000019,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000000f3,00000018,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,000000f2,00000018,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,000000f3,00000019,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,000000ad,0000001f) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,000000ae,0000001f) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,000000ad,00000020) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,000000f3,0000001f) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,000000f2,0000001f) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,000000f3,00000020) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,000000ad,0000001f,00000047,00000009,00001e9c,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,000000ad,0000001f,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,000000ae,0000001f,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,000000ad,00000020,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000000f3,0000001f,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,000000f2,0000001f,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,000000f3,00000020,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,000000ad,00000026) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,000000ae,00000026) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,000000ad,00000027) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,000000f3,00000026) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,000000f2,00000026) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,000000f3,00000027) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,000000ad,00000026,00000047,00000009,00001e9c,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,000000ad,00000026,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,000000ae,00000026,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,000000ad,00000027,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000000f3,00000026,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,000000f2,00000026,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,000000f3,00000027,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,000000ad,0000002d) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,000000ae,0000002d) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,000000ad,0000002e) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,000000f3,0000002d) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,000000f2,0000002d) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,000000f3,0000002e) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call user32.LoadBitmapW(01000000,0033f888 L"CARD44") ret=01005f7d 0009:Ret user32.LoadBitmapW() retval=00001f14 ret=01005f7d 0009:Call gdi32.SelectObject(00001e90,00001f14) ret=01005f8a 0009:Ret gdi32.SelectObject() retval=0000006c ret=01005f8a 0009:Call gdi32.BitBlt(00000314,000000ad,0000002d,00000047,00000060,00001e90,00000000,00000000,00cc0020) ret=01005faa 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005faa 0009:Call gdi32.SelectObject(00001e90,0000006c) ret=01005fb6 0009:Ret gdi32.SelectObject() retval=00001f14 ret=01005fb6 0009:Call gdi32.DeleteObject(00001f14) ret=01005fbf 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005fbf 0009:Call gdi32.SetPixel(00000314,000000ad,0000002d,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,000000ae,0000002d,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,000000ad,0000002e,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000000f3,0000002d,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,000000f2,0000002d,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,000000f3,0000002e,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,000000ad,00000049) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,000000ae,00000049) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,000000ad,0000004a) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,000000f3,00000049) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,000000f2,00000049) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,000000f3,0000004a) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.GetPixel(00000314,000000ad,000000a8) ret=01005ea5 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ea5 0009:Call gdi32.GetPixel(00000314,000000ae,000000a8) ret=01005eba 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005eba 0009:Call gdi32.GetPixel(00000314,000000ad,000000a7) ret=01005ecd 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ecd 0009:Call gdi32.GetPixel(00000314,000000f3,000000a8) ret=01005ee1 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ee1 0009:Call gdi32.GetPixel(00000314,000000f2,000000a8) ret=01005ef5 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ef5 0009:Call gdi32.GetPixel(00000314,000000f3,000000a7) ret=01005f09 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005f09 0009:Call user32.LoadBitmapW(01000000,0033f888 L"CARD45") ret=01005f7d 0009:Ret user32.LoadBitmapW() retval=00001f34 ret=01005f7d 0009:Call gdi32.SelectObject(00001e90,00001f34) ret=01005f8a 0009:Ret gdi32.SelectObject() retval=0000006c ret=01005f8a 0009:Call gdi32.BitBlt(00000314,000000ad,00000049,00000047,00000060,00001e90,00000000,00000000,00cc0020) ret=01005faa 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005faa 0009:Call gdi32.SelectObject(00001e90,0000006c) ret=01005fb6 0009:Ret gdi32.SelectObject() retval=00001f34 ret=01005fb6 0009:Call gdi32.DeleteObject(00001f34) ret=01005fbf 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005fbf 0009:Call gdi32.SetPixel(00000314,000000ad,00000049,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,000000ae,00000049,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,000000ad,0000004a,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000000f3,00000049,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,000000f2,00000049,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,000000f3,0000004a,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.SetPixel(00000314,000000ad,000000a8,ffffffff) ret=01006044 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006044 0009:Call gdi32.SetPixel(00000314,000000ae,000000a8,ffffffff) ret=01006059 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006059 0009:Call gdi32.SetPixel(00000314,000000ad,000000a7,ffffffff) ret=01006069 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006069 0009:Call gdi32.SetPixel(00000314,000000f3,000000a8,ffffffff) ret=0100607d 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100607d 0009:Call gdi32.SetPixel(00000314,000000f2,000000a8,ffffffff) ret=01006091 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006091 0009:Call gdi32.SetPixel(00000314,000000f3,000000a7,ffffffff) ret=010060a5 0009:Ret gdi32.SetPixel() retval=00ffffff ret=010060a5 0009:Call gdi32.GetPixel(00000314,00000127,0000000a) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000128,0000000a) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000127,0000000b) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,0000016d,0000000a) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,0000016c,0000000a) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,0000016d,0000000b) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,00000127,0000000a,00000047,00000009,00001e9c,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,00000127,0000000a,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000128,0000000a,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000127,0000000b,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,0000016d,0000000a,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,0000016c,0000000a,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,0000016d,0000000b,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,00000127,00000011) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000128,00000011) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000127,00000012) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,0000016d,00000011) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,0000016c,00000011) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,0000016d,00000012) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,00000127,00000011,00000047,00000009,00001e9c,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,00000127,00000011,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000128,00000011,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000127,00000012,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,0000016d,00000011,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,0000016c,00000011,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,0000016d,00000012,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,00000127,00000018) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000128,00000018) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000127,00000019) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,0000016d,00000018) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,0000016c,00000018) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,0000016d,00000019) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,00000127,00000018,00000047,00000009,00001e9c,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,00000127,00000018,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000128,00000018,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000127,00000019,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,0000016d,00000018,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,0000016c,00000018,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,0000016d,00000019,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,00000127,0000001f) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000128,0000001f) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000127,00000020) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,0000016d,0000001f) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,0000016c,0000001f) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,0000016d,00000020) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,00000127,0000001f,00000047,00000009,00001e9c,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,00000127,0000001f,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000128,0000001f,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000127,00000020,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,0000016d,0000001f,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,0000016c,0000001f,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,0000016d,00000020,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,00000127,00000026) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000128,00000026) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000127,00000027) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,0000016d,00000026) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,0000016c,00000026) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,0000016d,00000027) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,00000127,00000026,00000047,00000009,00001e9c,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,00000127,00000026,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000128,00000026,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000127,00000027,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,0000016d,00000026,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,0000016c,00000026,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,0000016d,00000027,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,00000127,0000002d) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000128,0000002d) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000127,0000002e) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,0000016d,0000002d) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,0000016c,0000002d) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,0000016d,0000002e) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call user32.LoadBitmapW(01000000,0033f888 L"CARD48") ret=01005f7d 0009:Ret user32.LoadBitmapW() retval=00001f54 ret=01005f7d 0009:Call gdi32.SelectObject(00001e90,00001f54) ret=01005f8a 0009:Ret gdi32.SelectObject() retval=0000006c ret=01005f8a 0009:Call gdi32.BitBlt(00000314,00000127,0000002d,00000047,00000060,00001e90,00000000,00000000,00cc0020) ret=01005faa 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005faa 0009:Call gdi32.SelectObject(00001e90,0000006c) ret=01005fb6 0009:Ret gdi32.SelectObject() retval=00001f54 ret=01005fb6 0009:Call gdi32.DeleteObject(00001f54) ret=01005fbf 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005fbf 0009:Call gdi32.SetPixel(00000314,00000127,0000002d,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000128,0000002d,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000127,0000002e,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,0000016d,0000002d,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,0000016c,0000002d,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,0000016d,0000002e,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,00000127,00000049) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000128,00000049) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000127,0000004a) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,0000016d,00000049) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,0000016c,00000049) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,0000016d,0000004a) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.GetPixel(00000314,00000127,000000a8) ret=01005ea5 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ea5 0009:Call gdi32.GetPixel(00000314,00000128,000000a8) ret=01005eba 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005eba 0009:Call gdi32.GetPixel(00000314,00000127,000000a7) ret=01005ecd 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ecd 0009:Call gdi32.GetPixel(00000314,0000016d,000000a8) ret=01005ee1 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ee1 0009:Call gdi32.GetPixel(00000314,0000016c,000000a8) ret=01005ef5 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ef5 0009:Call gdi32.GetPixel(00000314,0000016d,000000a7) ret=01005f09 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005f09 0009:Call user32.LoadBitmapW(01000000,0033f888 L"CARD52") ret=01005f7d 0009:Ret user32.LoadBitmapW() retval=00001f74 ret=01005f7d 0009:Call gdi32.SelectObject(00001e90,00001f74) ret=01005f8a 0009:Ret gdi32.SelectObject() retval=0000006c ret=01005f8a 0009:Call gdi32.BitBlt(00000314,00000127,00000049,00000047,00000060,00001e90,00000000,00000000,00cc0020) ret=01005faa 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005faa 0009:Call gdi32.SelectObject(00001e90,0000006c) ret=01005fb6 0009:Ret gdi32.SelectObject() retval=00001f74 ret=01005fb6 0009:Call gdi32.DeleteObject(00001f74) ret=01005fbf 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005fbf 0009:Call gdi32.SetPixel(00000314,00000127,00000049,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000128,00000049,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000127,0000004a,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,0000016d,00000049,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,0000016c,00000049,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,0000016d,0000004a,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.SetPixel(00000314,00000127,000000a8,ffffffff) ret=01006044 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006044 0009:Call gdi32.SetPixel(00000314,00000128,000000a8,ffffffff) ret=01006059 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006059 0009:Call gdi32.SetPixel(00000314,00000127,000000a7,ffffffff) ret=01006069 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006069 0009:Call gdi32.SetPixel(00000314,0000016d,000000a8,ffffffff) ret=0100607d 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100607d 0009:Call gdi32.SetPixel(00000314,0000016c,000000a8,ffffffff) ret=01006091 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006091 0009:Call gdi32.SetPixel(00000314,0000016d,000000a7,ffffffff) ret=010060a5 0009:Ret gdi32.SetPixel() retval=00ffffff ret=010060a5 0009:Call gdi32.GetPixel(00000314,000001a1,0000000a) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,000001a2,0000000a) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,000001a1,0000000b) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,000001e7,0000000a) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,000001e6,0000000a) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,000001e7,0000000b) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,000001a1,0000000a,00000047,00000009,00001e9c,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,000001a1,0000000a,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,000001a2,0000000a,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,000001a1,0000000b,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000001e7,0000000a,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,000001e6,0000000a,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,000001e7,0000000b,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,000001a1,00000011) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,000001a2,00000011) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,000001a1,00000012) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,000001e7,00000011) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,000001e6,00000011) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,000001e7,00000012) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,000001a1,00000011,00000047,00000009,00001e9c,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,000001a1,00000011,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,000001a2,00000011,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,000001a1,00000012,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000001e7,00000011,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,000001e6,00000011,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,000001e7,00000012,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,000001a1,00000018) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,000001a2,00000018) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,000001a1,00000019) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,000001e7,00000018) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,000001e6,00000018) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,000001e7,00000019) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,000001a1,00000018,00000047,00000009,00001e9c,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,000001a1,00000018,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,000001a2,00000018,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,000001a1,00000019,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000001e7,00000018,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,000001e6,00000018,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,000001e7,00000019,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,000001a1,0000001f) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,000001a2,0000001f) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,000001a1,00000020) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,000001e7,0000001f) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,000001e6,0000001f) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,000001e7,00000020) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,000001a1,0000001f,00000047,00000009,00001e9c,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,000001a1,0000001f,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,000001a2,0000001f,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,000001a1,00000020,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000001e7,0000001f,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,000001e6,0000001f,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,000001e7,00000020,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,000001a1,00000026) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,000001a2,00000026) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,000001a1,00000027) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,000001e7,00000026) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,000001e6,00000026) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,000001e7,00000027) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,000001a1,00000026,00000047,00000009,00001e9c,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,000001a1,00000026,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,000001a2,00000026,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,000001a1,00000027,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000001e7,00000026,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,000001e6,00000026,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,000001e7,00000027,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,000001a1,0000002d) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,000001a2,0000002d) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,000001a1,0000002e) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,000001e7,0000002d) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,000001e6,0000002d) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,000001e7,0000002e) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call user32.LoadBitmapW(01000000,0033f888 L"CARD47") ret=01005f7d 0009:Ret user32.LoadBitmapW() retval=00001f94 ret=01005f7d 0009:Call gdi32.SelectObject(00001e90,00001f94) ret=01005f8a 0009:Ret gdi32.SelectObject() retval=0000006c ret=01005f8a 0009:Call gdi32.BitBlt(00000314,000001a1,0000002d,00000047,00000060,00001e90,00000000,00000000,00cc0020) ret=01005faa 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005faa 0009:Call gdi32.SelectObject(00001e90,0000006c) ret=01005fb6 0009:Ret gdi32.SelectObject() retval=00001f94 ret=01005fb6 0009:Call gdi32.DeleteObject(00001f94) ret=01005fbf 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005fbf 0009:Call gdi32.SetPixel(00000314,000001a1,0000002d,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,000001a2,0000002d,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,000001a1,0000002e,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000001e7,0000002d,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,000001e6,0000002d,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,000001e7,0000002e,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,000001a1,00000049) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,000001a2,00000049) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,000001a1,0000004a) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,000001e7,00000049) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,000001e6,00000049) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,000001e7,0000004a) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.GetPixel(00000314,000001a1,000000a8) ret=01005ea5 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ea5 0009:Call gdi32.GetPixel(00000314,000001a2,000000a8) ret=01005eba 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005eba 0009:Call gdi32.GetPixel(00000314,000001a1,000000a7) ret=01005ecd 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ecd 0009:Call gdi32.GetPixel(00000314,000001e7,000000a8) ret=01005ee1 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ee1 0009:Call gdi32.GetPixel(00000314,000001e6,000000a8) ret=01005ef5 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ef5 0009:Call gdi32.GetPixel(00000314,000001e7,000000a7) ret=01005f09 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005f09 0009:Call user32.LoadBitmapW(01000000,0033f888 L"CARD40") ret=01005f7d 0009:Ret user32.LoadBitmapW() retval=00001fb4 ret=01005f7d 0009:Call gdi32.SelectObject(00001e90,00001fb4) ret=01005f8a 0009:Ret gdi32.SelectObject() retval=0000006c ret=01005f8a 0009:Call gdi32.BitBlt(00000314,000001a1,00000049,00000047,00000060,00001e90,00000000,00000000,00cc0020) ret=01005faa 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005faa 0009:Call gdi32.SelectObject(00001e90,0000006c) ret=01005fb6 0009:Ret gdi32.SelectObject() retval=00001fb4 ret=01005fb6 0009:Call gdi32.DeleteObject(00001fb4) ret=01005fbf 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005fbf 0009:Call gdi32.SetPixel(00000314,000001a1,00000049,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,000001a2,00000049,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,000001a1,0000004a,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000001e7,00000049,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,000001e6,00000049,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,000001e7,0000004a,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.SetPixel(00000314,000001a1,000000a8,ffffffff) ret=01006044 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006044 0009:Call gdi32.SetPixel(00000314,000001a2,000000a8,ffffffff) ret=01006059 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006059 0009:Call gdi32.SetPixel(00000314,000001a1,000000a7,ffffffff) ret=01006069 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006069 0009:Call gdi32.SetPixel(00000314,000001e7,000000a8,ffffffff) ret=0100607d 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100607d 0009:Call gdi32.SetPixel(00000314,000001e6,000000a8,ffffffff) ret=01006091 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006091 0009:Call gdi32.SetPixel(00000314,000001e7,000000a7,ffffffff) ret=010060a5 0009:Ret gdi32.SetPixel() retval=00ffffff ret=010060a5 0009:Call gdi32.GetPixel(00000314,0000021b,0000000a) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,0000021c,0000000a) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,0000021b,0000000b) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,00000261,0000000a) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,00000260,0000000a) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,00000261,0000000b) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,0000021b,0000000a,00000047,00000009,00001e9c,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,0000021b,0000000a,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,0000021c,0000000a,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,0000021b,0000000b,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,00000261,0000000a,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,00000260,0000000a,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,00000261,0000000b,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,0000021b,00000011) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,0000021c,00000011) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,0000021b,00000012) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,00000261,00000011) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,00000260,00000011) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,00000261,00000012) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,0000021b,00000011,00000047,00000009,00001e9c,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,0000021b,00000011,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,0000021c,00000011,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,0000021b,00000012,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,00000261,00000011,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,00000260,00000011,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,00000261,00000012,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,0000021b,00000018) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,0000021c,00000018) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,0000021b,00000019) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,00000261,00000018) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,00000260,00000018) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,00000261,00000019) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,0000021b,00000018,00000047,00000009,00001e9c,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,0000021b,00000018,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,0000021c,00000018,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,0000021b,00000019,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,00000261,00000018,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,00000260,00000018,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,00000261,00000019,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,0000021b,0000001f) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,0000021c,0000001f) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,0000021b,00000020) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,00000261,0000001f) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,00000260,0000001f) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,00000261,00000020) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,0000021b,0000001f,00000047,00000009,00001e9c,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,0000021b,0000001f,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,0000021c,0000001f,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,0000021b,00000020,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,00000261,0000001f,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,00000260,0000001f,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,00000261,00000020,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,0000021b,00000026) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,0000021c,00000026) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,0000021b,00000027) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,00000261,00000026) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,00000260,00000026) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,00000261,00000027) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call user32.LoadBitmapW(01000000,0033f888 L"CARD41") ret=01005f7d 0009:Ret user32.LoadBitmapW() retval=00001fd4 ret=01005f7d 0009:Call gdi32.SelectObject(00001e90,00001fd4) ret=01005f8a 0009:Ret gdi32.SelectObject() retval=0000006c ret=01005f8a 0009:Call gdi32.BitBlt(00000314,0000021b,00000026,00000047,00000060,00001e90,00000000,00000000,00cc0020) ret=01005faa 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005faa 0009:Call gdi32.SelectObject(00001e90,0000006c) ret=01005fb6 0009:Ret gdi32.SelectObject() retval=00001fd4 ret=01005fb6 0009:Call gdi32.DeleteObject(00001fd4) ret=01005fbf 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005fbf 0009:Call gdi32.SetPixel(00000314,0000021b,00000026,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,0000021c,00000026,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,0000021b,00000027,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,00000261,00000026,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,00000260,00000026,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,00000261,00000027,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,0000021b,00000042) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,0000021c,00000042) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,0000021b,00000043) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,00000261,00000042) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,00000260,00000042) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,00000261,00000043) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.GetPixel(00000314,0000021b,000000a1) ret=01005ea5 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ea5 0009:Call gdi32.GetPixel(00000314,0000021c,000000a1) ret=01005eba 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005eba 0009:Call gdi32.GetPixel(00000314,0000021b,000000a0) ret=01005ecd 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ecd 0009:Call gdi32.GetPixel(00000314,00000261,000000a1) ret=01005ee1 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ee1 0009:Call gdi32.GetPixel(00000314,00000260,000000a1) ret=01005ef5 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ef5 0009:Call gdi32.GetPixel(00000314,00000261,000000a0) ret=01005f09 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005f09 0009:Call user32.LoadBitmapW(01000000,0033f888 L"CARD48") ret=01005f7d 0009:Ret user32.LoadBitmapW() retval=00001ff4 ret=01005f7d 0009:Call gdi32.SelectObject(00001e90,00001ff4) ret=01005f8a 0009:Ret gdi32.SelectObject() retval=0000006c ret=01005f8a 0009:Call gdi32.BitBlt(00000314,0000021b,00000042,00000047,00000060,00001e90,00000000,00000000,00cc0020) ret=01005faa 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005faa 0009:Call gdi32.SelectObject(00001e90,0000006c) ret=01005fb6 0009:Ret gdi32.SelectObject() retval=00001ff4 ret=01005fb6 0009:Call gdi32.DeleteObject(00001ff4) ret=01005fbf 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005fbf 0009:Call gdi32.SetPixel(00000314,0000021b,00000042,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,0000021c,00000042,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,0000021b,00000043,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,00000261,00000042,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,00000260,00000042,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,00000261,00000043,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.SetPixel(00000314,0000021b,000000a1,ffffffff) ret=01006044 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006044 0009:Call gdi32.SetPixel(00000314,0000021c,000000a1,ffffffff) ret=01006059 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006059 0009:Call gdi32.SetPixel(00000314,0000021b,000000a0,ffffffff) ret=01006069 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006069 0009:Call gdi32.SetPixel(00000314,00000261,000000a1,ffffffff) ret=0100607d 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100607d 0009:Call gdi32.SetPixel(00000314,00000260,000000a1,ffffffff) ret=01006091 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006091 0009:Call gdi32.SetPixel(00000314,00000261,000000a0,ffffffff) ret=010060a5 0009:Ret gdi32.SetPixel() retval=00ffffff ret=010060a5 0009:Call gdi32.GetPixel(00000314,00000295,0000000a) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000296,0000000a) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000295,0000000b) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,000002db,0000000a) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,000002da,0000000a) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,000002db,0000000b) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,00000295,0000000a,00000047,00000009,00001e9c,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,00000295,0000000a,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000296,0000000a,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000295,0000000b,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000002db,0000000a,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,000002da,0000000a,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,000002db,0000000b,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,00000295,00000011) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000296,00000011) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000295,00000012) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,000002db,00000011) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,000002da,00000011) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,000002db,00000012) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,00000295,00000011,00000047,00000009,00001e9c,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,00000295,00000011,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000296,00000011,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000295,00000012,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000002db,00000011,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,000002da,00000011,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,000002db,00000012,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,00000295,00000018) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000296,00000018) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000295,00000019) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,000002db,00000018) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,000002da,00000018) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,000002db,00000019) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,00000295,00000018,00000047,00000009,00001e9c,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,00000295,00000018,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000296,00000018,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000295,00000019,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000002db,00000018,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,000002da,00000018,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,000002db,00000019,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,00000295,0000001f) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000296,0000001f) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000295,00000020) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,000002db,0000001f) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,000002da,0000001f) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,000002db,00000020) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,00000295,0000001f,00000047,00000009,00001e9c,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,00000295,0000001f,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000296,0000001f,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000295,00000020,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000002db,0000001f,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,000002da,0000001f,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,000002db,00000020,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,00000295,00000026) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000296,00000026) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000295,00000027) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,000002db,00000026) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,000002da,00000026) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,000002db,00000027) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call user32.LoadBitmapW(01000000,0033f888 L"CARD44") ret=01005f7d 0009:Ret user32.LoadBitmapW() retval=00002014 ret=01005f7d 0009:Call gdi32.SelectObject(00001e90,00002014) ret=01005f8a 0009:Ret gdi32.SelectObject() retval=0000006c ret=01005f8a 0009:Call gdi32.BitBlt(00000314,00000295,00000026,00000047,00000060,00001e90,00000000,00000000,00cc0020) ret=01005faa 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005faa 0009:Call gdi32.SelectObject(00001e90,0000006c) ret=01005fb6 0009:Ret gdi32.SelectObject() retval=00002014 ret=01005fb6 0009:Call gdi32.DeleteObject(00002014) ret=01005fbf 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005fbf 0009:Call gdi32.SetPixel(00000314,00000295,00000026,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000296,00000026,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000295,00000027,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000002db,00000026,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,000002da,00000026,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,000002db,00000027,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,00000295,00000042) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000296,00000042) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000295,00000043) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,000002db,00000042) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,000002da,00000042) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,000002db,00000043) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.GetPixel(00000314,00000295,000000a1) ret=01005ea5 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ea5 0009:Call gdi32.GetPixel(00000314,00000296,000000a1) ret=01005eba 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005eba 0009:Call gdi32.GetPixel(00000314,00000295,000000a0) ret=01005ecd 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ecd 0009:Call gdi32.GetPixel(00000314,000002db,000000a1) ret=01005ee1 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ee1 0009:Call gdi32.GetPixel(00000314,000002da,000000a1) ret=01005ef5 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ef5 0009:Call gdi32.GetPixel(00000314,000002db,000000a0) ret=01005f09 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005f09 0009:Call user32.LoadBitmapW(01000000,0033f888 L"CARD44") ret=01005f7d 0009:Ret user32.LoadBitmapW() retval=00002034 ret=01005f7d 0009:Call gdi32.SelectObject(00001e90,00002034) ret=01005f8a 0009:Ret gdi32.SelectObject() retval=0000006c ret=01005f8a 0009:Call gdi32.BitBlt(00000314,00000295,00000042,00000047,00000060,00001e90,00000000,00000000,00cc0020) ret=01005faa 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005faa 0009:Call gdi32.SelectObject(00001e90,0000006c) ret=01005fb6 0009:Ret gdi32.SelectObject() retval=00002034 ret=01005fb6 0009:Call gdi32.DeleteObject(00002034) ret=01005fbf 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005fbf 0009:Call gdi32.SetPixel(00000314,00000295,00000042,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000296,00000042,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000295,00000043,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000002db,00000042,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,000002da,00000042,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,000002db,00000043,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.SetPixel(00000314,00000295,000000a1,ffffffff) ret=01006044 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006044 0009:Call gdi32.SetPixel(00000314,00000296,000000a1,ffffffff) ret=01006059 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006059 0009:Call gdi32.SetPixel(00000314,00000295,000000a0,ffffffff) ret=01006069 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006069 0009:Call gdi32.SetPixel(00000314,000002db,000000a1,ffffffff) ret=0100607d 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100607d 0009:Call gdi32.SetPixel(00000314,000002da,000000a1,ffffffff) ret=01006091 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006091 0009:Call gdi32.SetPixel(00000314,000002db,000000a0,ffffffff) ret=010060a5 0009:Ret gdi32.SetPixel() retval=00ffffff ret=010060a5 0009:Call gdi32.GetPixel(00000314,0000030f,0000000a) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000310,0000000a) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,0000030f,0000000b) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,00000355,0000000a) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,00000354,0000000a) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,00000355,0000000b) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,0000030f,0000000a,00000047,00000009,00001e9c,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,0000030f,0000000a,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000310,0000000a,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,0000030f,0000000b,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,00000355,0000000a,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,00000354,0000000a,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,00000355,0000000b,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,0000030f,00000011) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000310,00000011) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,0000030f,00000012) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,00000355,00000011) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,00000354,00000011) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,00000355,00000012) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,0000030f,00000011,00000047,00000009,00001e9c,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,0000030f,00000011,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000310,00000011,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,0000030f,00000012,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,00000355,00000011,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,00000354,00000011,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,00000355,00000012,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,0000030f,00000018) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000310,00000018) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,0000030f,00000019) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,00000355,00000018) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,00000354,00000018) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,00000355,00000019) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,0000030f,00000018,00000047,00000009,00001e9c,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,0000030f,00000018,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000310,00000018,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,0000030f,00000019,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,00000355,00000018,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,00000354,00000018,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,00000355,00000019,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,0000030f,0000001f) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000310,0000001f) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,0000030f,00000020) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,00000355,0000001f) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,00000354,0000001f) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,00000355,00000020) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,0000030f,0000001f,00000047,00000009,00001e9c,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,0000030f,0000001f,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000310,0000001f,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,0000030f,00000020,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,00000355,0000001f,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,00000354,0000001f,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,00000355,00000020,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,0000030f,00000026) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000310,00000026) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,0000030f,00000027) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,00000355,00000026) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,00000354,00000026) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,00000355,00000027) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call user32.LoadBitmapW(01000000,0033f888 L"CARD40") ret=01005f7d 0009:Ret user32.LoadBitmapW() retval=00002054 ret=01005f7d 0009:Call gdi32.SelectObject(00001e90,00002054) ret=01005f8a 0009:Ret gdi32.SelectObject() retval=0000006c ret=01005f8a 0009:Call gdi32.BitBlt(00000314,0000030f,00000026,00000047,00000060,00001e90,00000000,00000000,00cc0020) ret=01005faa 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005faa 0009:Call gdi32.SelectObject(00001e90,0000006c) ret=01005fb6 0009:Ret gdi32.SelectObject() retval=00002054 ret=01005fb6 0009:Call gdi32.DeleteObject(00002054) ret=01005fbf 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005fbf 0009:Call gdi32.SetPixel(00000314,0000030f,00000026,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000310,00000026,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,0000030f,00000027,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,00000355,00000026,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,00000354,00000026,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,00000355,00000027,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,0000030f,00000042) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000310,00000042) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,0000030f,00000043) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,00000355,00000042) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,00000354,00000042) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,00000355,00000043) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.GetPixel(00000314,0000030f,000000a1) ret=01005ea5 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ea5 0009:Call gdi32.GetPixel(00000314,00000310,000000a1) ret=01005eba 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005eba 0009:Call gdi32.GetPixel(00000314,0000030f,000000a0) ret=01005ecd 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ecd 0009:Call gdi32.GetPixel(00000314,00000355,000000a1) ret=01005ee1 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ee1 0009:Call gdi32.GetPixel(00000314,00000354,000000a1) ret=01005ef5 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ef5 0009:Call gdi32.GetPixel(00000314,00000355,000000a0) ret=01005f09 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005f09 0009:Call user32.LoadBitmapW(01000000,0033f888 L"CARD43") ret=01005f7d 0009:Ret user32.LoadBitmapW() retval=00002074 ret=01005f7d 0009:Call gdi32.SelectObject(00001e90,00002074) ret=01005f8a 0009:Ret gdi32.SelectObject() retval=0000006c ret=01005f8a 0009:Call gdi32.BitBlt(00000314,0000030f,00000042,00000047,00000060,00001e90,00000000,00000000,00cc0020) ret=01005faa 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005faa 0009:Call gdi32.SelectObject(00001e90,0000006c) ret=01005fb6 0009:Ret gdi32.SelectObject() retval=00002074 ret=01005fb6 0009:Call gdi32.DeleteObject(00002074) ret=01005fbf 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005fbf 0009:Call gdi32.SetPixel(00000314,0000030f,00000042,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000310,00000042,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,0000030f,00000043,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,00000355,00000042,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,00000354,00000042,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,00000355,00000043,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.SetPixel(00000314,0000030f,000000a1,ffffffff) ret=01006044 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006044 0009:Call gdi32.SetPixel(00000314,00000310,000000a1,ffffffff) ret=01006059 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006059 0009:Call gdi32.SetPixel(00000314,0000030f,000000a0,ffffffff) ret=01006069 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006069 0009:Call gdi32.SetPixel(00000314,00000355,000000a1,ffffffff) ret=0100607d 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100607d 0009:Call gdi32.SetPixel(00000314,00000354,000000a1,ffffffff) ret=01006091 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006091 0009:Call gdi32.SetPixel(00000314,00000355,000000a0,ffffffff) ret=010060a5 0009:Ret gdi32.SetPixel() retval=00ffffff ret=010060a5 0009:Call gdi32.GetPixel(00000314,00000389,0000000a) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,0000038a,0000000a) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000389,0000000b) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,000003cf,0000000a) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,000003ce,0000000a) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,000003cf,0000000b) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,00000389,0000000a,00000047,00000009,00001e9c,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,00000389,0000000a,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,0000038a,0000000a,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000389,0000000b,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000003cf,0000000a,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,000003ce,0000000a,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,000003cf,0000000b,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,00000389,00000011) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,0000038a,00000011) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000389,00000012) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,000003cf,00000011) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,000003ce,00000011) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,000003cf,00000012) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,00000389,00000011,00000047,00000009,00001e9c,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,00000389,00000011,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,0000038a,00000011,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000389,00000012,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000003cf,00000011,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,000003ce,00000011,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,000003cf,00000012,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,00000389,00000018) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,0000038a,00000018) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000389,00000019) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,000003cf,00000018) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,000003ce,00000018) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,000003cf,00000019) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,00000389,00000018,00000047,00000009,00001e9c,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,00000389,00000018,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,0000038a,00000018,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000389,00000019,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000003cf,00000018,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,000003ce,00000018,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,000003cf,00000019,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,00000389,0000001f) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,0000038a,0000001f) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000389,00000020) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,000003cf,0000001f) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,000003ce,0000001f) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,000003cf,00000020) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,00000389,0000001f,00000047,00000009,00001e9c,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,00000389,0000001f,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,0000038a,0000001f,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000389,00000020,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000003cf,0000001f,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,000003ce,0000001f,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,000003cf,00000020,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,00000389,00000026) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,0000038a,00000026) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000389,00000027) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,000003cf,00000026) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,000003ce,00000026) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,000003cf,00000027) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call user32.LoadBitmapW(01000000,0033f888 L"CARD43") ret=01005f7d 0009:Ret user32.LoadBitmapW() retval=00002094 ret=01005f7d 0009:Call gdi32.SelectObject(00001e90,00002094) ret=01005f8a 0009:Ret gdi32.SelectObject() retval=0000006c ret=01005f8a 0009:Call gdi32.BitBlt(00000314,00000389,00000026,00000047,00000060,00001e90,00000000,00000000,00cc0020) ret=01005faa 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005faa 0009:Call gdi32.SelectObject(00001e90,0000006c) ret=01005fb6 0009:Ret gdi32.SelectObject() retval=00002094 ret=01005fb6 0009:Call gdi32.DeleteObject(00002094) ret=01005fbf 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005fbf 0009:Call gdi32.SetPixel(00000314,00000389,00000026,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,0000038a,00000026,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000389,00000027,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000003cf,00000026,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,000003ce,00000026,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,000003cf,00000027,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,00000389,00000042) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,0000038a,00000042) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000389,00000043) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,000003cf,00000042) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,000003ce,00000042) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,000003cf,00000043) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.GetPixel(00000314,00000389,000000a1) ret=01005ea5 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ea5 0009:Call gdi32.GetPixel(00000314,0000038a,000000a1) ret=01005eba 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005eba 0009:Call gdi32.GetPixel(00000314,00000389,000000a0) ret=01005ecd 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ecd 0009:Call gdi32.GetPixel(00000314,000003cf,000000a1) ret=01005ee1 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ee1 0009:Call gdi32.GetPixel(00000314,000003ce,000000a1) ret=01005ef5 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ef5 0009:Call gdi32.GetPixel(00000314,000003cf,000000a0) ret=01005f09 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005f09 0009:Call user32.LoadBitmapW(01000000,0033f888 L"CARD48") ret=01005f7d 0009:Ret user32.LoadBitmapW() retval=000020b4 ret=01005f7d 0009:Call gdi32.SelectObject(00001e90,000020b4) ret=01005f8a 0009:Ret gdi32.SelectObject() retval=0000006c ret=01005f8a 0009:Call gdi32.BitBlt(00000314,00000389,00000042,00000047,00000060,00001e90,00000000,00000000,00cc0020) ret=01005faa 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005faa 0009:Call gdi32.SelectObject(00001e90,0000006c) ret=01005fb6 0009:Ret gdi32.SelectObject() retval=000020b4 ret=01005fb6 0009:Call gdi32.DeleteObject(000020b4) ret=01005fbf 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005fbf 0009:Call gdi32.SetPixel(00000314,00000389,00000042,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,0000038a,00000042,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000389,00000043,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000003cf,00000042,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,000003ce,00000042,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,000003cf,00000043,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.SetPixel(00000314,00000389,000000a1,ffffffff) ret=01006044 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006044 0009:Call gdi32.SetPixel(00000314,0000038a,000000a1,ffffffff) ret=01006059 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006059 0009:Call gdi32.SetPixel(00000314,00000389,000000a0,ffffffff) ret=01006069 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006069 0009:Call gdi32.SetPixel(00000314,000003cf,000000a1,ffffffff) ret=0100607d 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100607d 0009:Call gdi32.SetPixel(00000314,000003ce,000000a1,ffffffff) ret=01006091 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006091 0009:Call gdi32.SetPixel(00000314,000003cf,000000a0,ffffffff) ret=010060a5 0009:Ret gdi32.SetPixel() retval=00ffffff ret=010060a5 0009:Call gdi32.GetPixel(00000314,00000403,0000000a) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000404,0000000a) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000403,0000000b) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,00000449,0000000a) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,00000448,0000000a) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,00000449,0000000b) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,00000403,0000000a,00000047,00000009,00001e9c,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,00000403,0000000a,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000404,0000000a,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000403,0000000b,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,00000449,0000000a,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,00000448,0000000a,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,00000449,0000000b,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,00000403,00000011) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000404,00000011) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000403,00000012) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,00000449,00000011) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,00000448,00000011) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,00000449,00000012) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,00000403,00000011,00000047,00000009,00001e9c,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,00000403,00000011,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000404,00000011,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000403,00000012,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,00000449,00000011,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,00000448,00000011,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,00000449,00000012,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,00000403,00000018) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000404,00000018) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000403,00000019) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,00000449,00000018) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,00000448,00000018) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,00000449,00000019) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,00000403,00000018,00000047,00000009,00001e9c,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,00000403,00000018,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000404,00000018,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000403,00000019,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,00000449,00000018,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,00000448,00000018,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,00000449,00000019,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,00000403,0000001f) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000404,0000001f) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000403,00000020) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,00000449,0000001f) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,00000448,0000001f) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,00000449,00000020) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,00000403,0000001f,00000047,00000009,00001e9c,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,00000403,0000001f,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000404,0000001f,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000403,00000020,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,00000449,0000001f,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,00000448,0000001f,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,00000449,00000020,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,00000403,00000026) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000404,00000026) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000403,00000027) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,00000449,00000026) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,00000448,00000026) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,00000449,00000027) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call user32.LoadBitmapW(01000000,0033f888 L"CARD46") ret=01005f7d 0009:Ret user32.LoadBitmapW() retval=000020d4 ret=01005f7d 0009:Call gdi32.SelectObject(00001e90,000020d4) ret=01005f8a 0009:Ret gdi32.SelectObject() retval=0000006c ret=01005f8a 0009:Call gdi32.BitBlt(00000314,00000403,00000026,00000047,00000060,00001e90,00000000,00000000,00cc0020) ret=01005faa 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005faa 0009:Call gdi32.SelectObject(00001e90,0000006c) ret=01005fb6 0009:Ret gdi32.SelectObject() retval=000020d4 ret=01005fb6 0009:Call gdi32.DeleteObject(000020d4) ret=01005fbf 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005fbf 0009:Call gdi32.SetPixel(00000314,00000403,00000026,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000404,00000026,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000403,00000027,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,00000449,00000026,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,00000448,00000026,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,00000449,00000027,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,00000403,00000042) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000404,00000042) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000403,00000043) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,00000449,00000042) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,00000448,00000042) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,00000449,00000043) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.GetPixel(00000314,00000403,000000a1) ret=01005ea5 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ea5 0009:Call gdi32.GetPixel(00000314,00000404,000000a1) ret=01005eba 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005eba 0009:Call gdi32.GetPixel(00000314,00000403,000000a0) ret=01005ecd 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ecd 0009:Call gdi32.GetPixel(00000314,00000449,000000a1) ret=01005ee1 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ee1 0009:Call gdi32.GetPixel(00000314,00000448,000000a1) ret=01005ef5 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ef5 0009:Call gdi32.GetPixel(00000314,00000449,000000a0) ret=01005f09 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005f09 0009:Call user32.LoadBitmapW(01000000,0033f888 L"CARD48") ret=01005f7d 0009:Ret user32.LoadBitmapW() retval=000020f4 ret=01005f7d 0009:Call gdi32.SelectObject(00001e90,000020f4) ret=01005f8a 0009:Ret gdi32.SelectObject() retval=0000006c ret=01005f8a 0009:Call gdi32.BitBlt(00000314,00000403,00000042,00000047,00000060,00001e90,00000000,00000000,00cc0020) ret=01005faa 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005faa 0009:Call gdi32.SelectObject(00001e90,0000006c) ret=01005fb6 0009:Ret gdi32.SelectObject() retval=000020f4 ret=01005fb6 0009:Call gdi32.DeleteObject(000020f4) ret=01005fbf 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005fbf 0009:Call gdi32.SetPixel(00000314,00000403,00000042,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000404,00000042,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000403,00000043,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,00000449,00000042,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,00000448,00000042,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,00000449,00000043,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.SetPixel(00000314,00000403,000000a1,ffffffff) ret=01006044 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006044 0009:Call gdi32.SetPixel(00000314,00000404,000000a1,ffffffff) ret=01006059 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006059 0009:Call gdi32.SetPixel(00000314,00000403,000000a0,ffffffff) ret=01006069 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006069 0009:Call gdi32.SetPixel(00000314,00000449,000000a1,ffffffff) ret=0100607d 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100607d 0009:Call gdi32.SetPixel(00000314,00000448,000000a1,ffffffff) ret=01006091 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006091 0009:Call gdi32.SetPixel(00000314,00000449,000000a0,ffffffff) ret=010060a5 0009:Ret gdi32.SetPixel() retval=00ffffff ret=010060a5 0009:Call gdi32.GetPixel(00000314,0000047d,0000000a) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,0000047e,0000000a) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,0000047d,0000000b) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,000004c3,0000000a) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,000004c2,0000000a) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,000004c3,0000000b) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,0000047d,0000000a,00000047,00000009,00001e9c,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,0000047d,0000000a,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,0000047e,0000000a,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,0000047d,0000000b,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000004c3,0000000a,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,000004c2,0000000a,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,000004c3,0000000b,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,0000047d,00000011) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,0000047e,00000011) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,0000047d,00000012) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,000004c3,00000011) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,000004c2,00000011) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,000004c3,00000012) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,0000047d,00000011,00000047,00000009,00001e9c,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,0000047d,00000011,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,0000047e,00000011,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,0000047d,00000012,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000004c3,00000011,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,000004c2,00000011,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,000004c3,00000012,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,0000047d,00000018) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,0000047e,00000018) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,0000047d,00000019) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,000004c3,00000018) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,000004c2,00000018) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,000004c3,00000019) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,0000047d,00000018,00000047,00000009,00001e9c,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,0000047d,00000018,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,0000047e,00000018,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,0000047d,00000019,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000004c3,00000018,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,000004c2,00000018,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,000004c3,00000019,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,0000047d,0000001f) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,0000047e,0000001f) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,0000047d,00000020) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,000004c3,0000001f) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,000004c2,0000001f) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,000004c3,00000020) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,0000047d,0000001f,00000047,00000009,00001e9c,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,0000047d,0000001f,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,0000047e,0000001f,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,0000047d,00000020,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000004c3,0000001f,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,000004c2,0000001f,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,000004c3,00000020,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,0000047d,00000026) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,0000047e,00000026) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,0000047d,00000027) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,000004c3,00000026) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,000004c2,00000026) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,000004c3,00000027) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call user32.LoadBitmapW(01000000,0033f888 L"CARD43") ret=01005f7d 0009:Ret user32.LoadBitmapW() retval=00002114 ret=01005f7d 0009:Call gdi32.SelectObject(00001e90,00002114) ret=01005f8a 0009:Ret gdi32.SelectObject() retval=0000006c ret=01005f8a 0009:Call gdi32.BitBlt(00000314,0000047d,00000026,00000047,00000060,00001e90,00000000,00000000,00cc0020) ret=01005faa 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005faa 0009:Call gdi32.SelectObject(00001e90,0000006c) ret=01005fb6 0009:Ret gdi32.SelectObject() retval=00002114 ret=01005fb6 0009:Call gdi32.DeleteObject(00002114) ret=01005fbf 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005fbf 0009:Call gdi32.SetPixel(00000314,0000047d,00000026,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,0000047e,00000026,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,0000047d,00000027,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000004c3,00000026,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,000004c2,00000026,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,000004c3,00000027,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,0000047d,00000042) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,0000047e,00000042) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,0000047d,00000043) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,000004c3,00000042) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,000004c2,00000042) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,000004c3,00000043) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.GetPixel(00000314,0000047d,000000a1) ret=01005ea5 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ea5 0009:Call gdi32.GetPixel(00000314,0000047e,000000a1) ret=01005eba 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005eba 0009:Call gdi32.GetPixel(00000314,0000047d,000000a0) ret=01005ecd 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ecd 0009:Call gdi32.GetPixel(00000314,000004c3,000000a1) ret=01005ee1 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ee1 0009:Call gdi32.GetPixel(00000314,000004c2,000000a1) ret=01005ef5 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ef5 0009:Call gdi32.GetPixel(00000314,000004c3,000000a0) ret=01005f09 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005f09 0009:Call user32.LoadBitmapW(01000000,0033f888 L"CARD46") ret=01005f7d 0009:Ret user32.LoadBitmapW() retval=00002134 ret=01005f7d 0009:Call gdi32.SelectObject(00001e90,00002134) ret=01005f8a 0009:Ret gdi32.SelectObject() retval=0000006c ret=01005f8a 0009:Call gdi32.BitBlt(00000314,0000047d,00000042,00000047,00000060,00001e90,00000000,00000000,00cc0020) ret=01005faa 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005faa 0009:Call gdi32.SelectObject(00001e90,0000006c) ret=01005fb6 0009:Ret gdi32.SelectObject() retval=00002134 ret=01005fb6 0009:Call gdi32.DeleteObject(00002134) ret=01005fbf 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005fbf 0009:Call gdi32.SetPixel(00000314,0000047d,00000042,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,0000047e,00000042,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,0000047d,00000043,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000004c3,00000042,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,000004c2,00000042,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,000004c3,00000043,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.SetPixel(00000314,0000047d,000000a1,ffffffff) ret=01006044 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006044 0009:Call gdi32.SetPixel(00000314,0000047e,000000a1,ffffffff) ret=01006059 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006059 0009:Call gdi32.SetPixel(00000314,0000047d,000000a0,ffffffff) ret=01006069 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006069 0009:Call gdi32.SetPixel(00000314,000004c3,000000a1,ffffffff) ret=0100607d 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100607d 0009:Call gdi32.SetPixel(00000314,000004c2,000000a1,ffffffff) ret=01006091 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006091 0009:Call gdi32.SetPixel(00000314,000004c3,000000a0,ffffffff) ret=010060a5 0009:Ret gdi32.SetPixel() retval=00ffffff ret=010060a5 0009:Call gdi32.SelectObject(00001e9c,0000006c) ret=010061a0 0009:Ret gdi32.SelectObject() retval=00001eb4 ret=010061a0 0009:Call gdi32.DeleteObject(00001eb4) ret=010061a9 0009:Ret gdi32.DeleteObject() retval=00000001 ret=010061a9 0009:Call gdi32.DeleteDC(00001e9c) ret=010061b4 0009:Ret gdi32.DeleteDC() retval=00000001 ret=010061b4 0009:Call gdi32.DeleteDC(00001e90) ret=010061b9 0009:Ret gdi32.DeleteDC() retval=00000001 ret=010061b9 0009:Call user32.GetClientRect(00010030,0033f700) ret=01003826 0009:Ret user32.GetClientRect() retval=00000001 ret=01003826 0009:Call user32.GetClientRect(00010030,0033f6b0) ret=01002b2e 0009:Ret user32.GetClientRect() retval=00000001 ret=01002b2e 0009:Call user32.OffsetRect(0033f700,00000000,00000000) ret=01004a4e 0009:Ret user32.OffsetRect() retval=00000001 ret=01004a4e 0009:Call gdi32.CreateSolidBrush(00007f00) ret=01004a59 0009:Ret gdi32.CreateSolidBrush() retval=00002148 ret=01004a59 0009:Call gdi32.GetStockObject(00000004) ret=01004a63 0009:Ret gdi32.GetStockObject() retval=00000054 ret=01004a63 0009:Call user32.FillRect(00000314,0033f700,00002148) ret=01004a78 0009:Ret user32.FillRect() retval=00000001 ret=01004a78 0009:Call gdi32.DeleteObject(00002148) ret=01004a7f 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01004a7f 0009:Call user32.FrameRect(00000314,0033f700,00000054) ret=01004a92 0009:Ret user32.FrameRect() retval=00000001 ret=01004a92 0009:Call gdi32.GetBkMode(00000314) ret=01004a99 0009:Ret gdi32.GetBkMode() retval=00000002 ret=01004a99 0009:Call gdi32.GetTextColor(00000314) ret=01004aa6 0009:Ret gdi32.GetTextColor() retval=00000000 ret=01004aa6 0009:Call gdi32.SetBkMode(00000314,00000001) ret=01004ab5 0009:Ret gdi32.SetBkMode() retval=00000002 ret=01004ab5 0009:Call gdi32.SetTextColor(00000314,00ffffff) ret=01004ac1 0009:Ret gdi32.SetTextColor() retval=00000000 ret=01004ac1 0009:Call user32.SetRect(0033f6ec,00000225,00000276,0000027f,0000028a) ret=01004aec 0009:Ret user32.SetRect() retval=00000001 ret=01004aec 0009:Call user32.LoadStringW(01000000,00000035,01011800,00000400) ret=0100361b 0009:Ret user32.LoadStringW() retval=00000006 ret=0100361b 0009:Call user32.DrawTextW(00000314,01011800 L"Score:",ffffffff,0033f6ec,00000022) ret=01004b08 0009:Ret user32.DrawTextW() retval=00000010 ret=01004b08 0009:Call user32.SetRect(0033f6ec,00000225,0000028a,0000027f,000002a8) ret=01004b2d 0009:Ret user32.SetRect() retval=00000001 ret=01004b2d 0009:Call user32.LoadStringW(01000000,00000036,01011800,00000400) ret=0100361b 0009:Ret user32.LoadStringW() retval=00000006 ret=0100361b 0009:Call user32.DrawTextW(00000314,01011800 L"Moves:",ffffffff,0033f6ec,00000022) ret=01004b43 0009:Ret user32.DrawTextW() retval=00000010 ret=01004b43 0009:Call user32.SetRect(0033f6ec,00000289,00000276,000002e3,0000028a) ret=01004b8c 0009:Ret user32.SetRect() retval=00000001 ret=01004b8c 0009:Call user32.DrawTextW(00000314,0033f714 L"500",ffffffff,0033f6ec,00000020) ret=01004ba1 0009:Ret user32.DrawTextW() retval=00000010 ret=01004ba1 0009:Call user32.SetRect(0033f6ec,00000289,0000028a,000002e3,000002a8) ret=01004bea 0009:Ret user32.SetRect() retval=00000001 ret=01004bea 0009:Call user32.DrawTextW(00000314,0033f714 L"0",ffffffff,0033f6ec,00000020) ret=01004bff 0009:Ret user32.DrawTextW() retval=00000010 ret=01004bff 0009:Call gdi32.SetBkMode(00000314,00000002) ret=01004c0c 0009:Ret gdi32.SetBkMode() retval=00000001 ret=01004c0c 0009:Call gdi32.SetTextColor(00000314,00000000) ret=01004c19 0009:Ret gdi32.SetTextColor() retval=00ffffff ret=01004c19 0009:Call user32.GetClientRect(00010030,0033f7b8) ret=01002b2e 0009:Ret user32.GetClientRect() retval=00000001 ret=01002b2e 0009:Call user32.LoadBitmapW(01000000,010012c8 L"CARDBACK") ret=010028ff 0009:Ret user32.LoadBitmapW() retval=00002178 ret=010028ff 0009:Call gdi32.CreateCompatibleDC(00000314) ret=01002909 0009:Ret gdi32.CreateCompatibleDC() retval=0000218c ret=01002909 0009:Call gdi32.SelectObject(0000218c,00002178) ret=01002917 0009:Ret gdi32.SelectObject() retval=0000006c ret=01002917 0009:Call gdi32.BitBlt(00000314,0000047d,00000258,00000047,00000060,0000218c,00000000,00000000,00cc0020) ret=01002938 0009:Ret gdi32.BitBlt() retval=00000001 ret=01002938 0009:Call gdi32.SelectObject(0000218c,0000006c) ret=0100293e 0009:Ret gdi32.SelectObject() retval=00002178 ret=0100293e 0009:Call gdi32.DeleteObject(00002178) ret=01002947 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01002947 0009:Call gdi32.DeleteDC(0000218c) ret=0100294e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100294e 0009:Call gdi32.SetPixel(00000314,0000047d,00000258,00008000) ret=01002969 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002969 0009:Call gdi32.SetPixel(00000314,0000047e,00000258,00008000) ret=01002976 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002976 0009:Call gdi32.SetPixel(00000314,0000047d,00000259,00008000) ret=01002982 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002982 0009:Call gdi32.SetPixel(00000314,000004c3,00000258,00008000) ret=0100298f 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100298f 0009:Call gdi32.SetPixel(00000314,000004c2,00000258,00008000) ret=0100299c 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100299c 0009:Call gdi32.SetPixel(00000314,000004c3,00000259,00008000) ret=010029ab 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ab 0009:Call gdi32.SetPixel(00000314,0000047d,000002b7,00008000) ret=010029bf 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029bf 0009:Call gdi32.SetPixel(00000314,0000047e,000002b7,00008000) ret=010029d0 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029d0 0009:Call gdi32.SetPixel(00000314,0000047d,000002b6,00008000) ret=010029de 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029de 0009:Call gdi32.SetPixel(00000314,000004c3,000002b7,00008000) ret=010029ef 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ef 0009:Call gdi32.SetPixel(00000314,000004c2,000002b7,00008000) ret=01002a00 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a00 0009:Call gdi32.SetPixel(00000314,000004c3,000002b6,00008000) ret=01002a11 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a11 0009:Call user32.LoadBitmapW(01000000,010012c8 L"CARDBACK") ret=010028ff 0009:Ret user32.LoadBitmapW() retval=000021a4 ret=010028ff 0009:Call gdi32.CreateCompatibleDC(00000314) ret=01002909 0009:Ret gdi32.CreateCompatibleDC() retval=000021b8 ret=01002909 0009:Call gdi32.SelectObject(000021b8,000021a4) ret=01002917 0009:Ret gdi32.SelectObject() retval=0000006c ret=01002917 0009:Call gdi32.BitBlt(00000314,00000471,00000258,00000047,00000060,000021b8,00000000,00000000,00cc0020) ret=01002938 0009:Ret gdi32.BitBlt() retval=00000001 ret=01002938 0009:Call gdi32.SelectObject(000021b8,0000006c) ret=0100293e 0009:Ret gdi32.SelectObject() retval=000021a4 ret=0100293e 0009:Call gdi32.DeleteObject(000021a4) ret=01002947 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01002947 0009:Call gdi32.DeleteDC(000021b8) ret=0100294e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100294e 0009:Call gdi32.SetPixel(00000314,00000471,00000258,00008000) ret=01002969 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002969 0009:Call gdi32.SetPixel(00000314,00000472,00000258,00008000) ret=01002976 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002976 0009:Call gdi32.SetPixel(00000314,00000471,00000259,00008000) ret=01002982 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002982 0009:Call gdi32.SetPixel(00000314,000004b7,00000258,00008000) ret=0100298f 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100298f 0009:Call gdi32.SetPixel(00000314,000004b6,00000258,00008000) ret=0100299c 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100299c 0009:Call gdi32.SetPixel(00000314,000004b7,00000259,00008000) ret=010029ab 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ab 0009:Call gdi32.SetPixel(00000314,00000471,000002b7,00008000) ret=010029bf 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029bf 0009:Call gdi32.SetPixel(00000314,00000472,000002b7,00008000) ret=010029d0 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029d0 0009:Call gdi32.SetPixel(00000314,00000471,000002b6,00008000) ret=010029de 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029de 0009:Call gdi32.SetPixel(00000314,000004b7,000002b7,00008000) ret=010029ef 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ef 0009:Call gdi32.SetPixel(00000314,000004b6,000002b7,00008000) ret=01002a00 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a00 0009:Call gdi32.SetPixel(00000314,000004b7,000002b6,00008000) ret=01002a11 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a11 0009:Call user32.LoadBitmapW(01000000,010012c8 L"CARDBACK") ret=010028ff 0009:Ret user32.LoadBitmapW() retval=000021d0 ret=010028ff 0009:Call gdi32.CreateCompatibleDC(00000314) ret=01002909 0009:Ret gdi32.CreateCompatibleDC() retval=000021e4 ret=01002909 0009:Call gdi32.SelectObject(000021e4,000021d0) ret=01002917 0009:Ret gdi32.SelectObject() retval=0000006c ret=01002917 0009:Call gdi32.BitBlt(00000314,00000465,00000258,00000047,00000060,000021e4,00000000,00000000,00cc0020) ret=01002938 0009:Ret gdi32.BitBlt() retval=00000001 ret=01002938 0009:Call gdi32.SelectObject(000021e4,0000006c) ret=0100293e 0009:Ret gdi32.SelectObject() retval=000021d0 ret=0100293e 0009:Call gdi32.DeleteObject(000021d0) ret=01002947 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01002947 0009:Call gdi32.DeleteDC(000021e4) ret=0100294e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100294e 0009:Call gdi32.SetPixel(00000314,00000465,00000258,00008000) ret=01002969 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002969 0009:Call gdi32.SetPixel(00000314,00000466,00000258,00008000) ret=01002976 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002976 0009:Call gdi32.SetPixel(00000314,00000465,00000259,00008000) ret=01002982 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002982 0009:Call gdi32.SetPixel(00000314,000004ab,00000258,00008000) ret=0100298f 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100298f 0009:Call gdi32.SetPixel(00000314,000004aa,00000258,00008000) ret=0100299c 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100299c 0009:Call gdi32.SetPixel(00000314,000004ab,00000259,00008000) ret=010029ab 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ab 0009:Call gdi32.SetPixel(00000314,00000465,000002b7,00008000) ret=010029bf 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029bf 0009:Call gdi32.SetPixel(00000314,00000466,000002b7,00008000) ret=010029d0 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029d0 0009:Call gdi32.SetPixel(00000314,00000465,000002b6,00008000) ret=010029de 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029de 0009:Call gdi32.SetPixel(00000314,000004ab,000002b7,00008000) ret=010029ef 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ef 0009:Call gdi32.SetPixel(00000314,000004aa,000002b7,00008000) ret=01002a00 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a00 0009:Call gdi32.SetPixel(00000314,000004ab,000002b6,00008000) ret=01002a11 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a11 0009:Call user32.LoadBitmapW(01000000,010012c8 L"CARDBACK") ret=010028ff 0009:Ret user32.LoadBitmapW() retval=000021fc ret=010028ff 0009:Call gdi32.CreateCompatibleDC(00000314) ret=01002909 0009:Ret gdi32.CreateCompatibleDC() retval=00002210 ret=01002909 0009:Call gdi32.SelectObject(00002210,000021fc) ret=01002917 0009:Ret gdi32.SelectObject() retval=0000006c ret=01002917 0009:Call gdi32.BitBlt(00000314,00000459,00000258,00000047,00000060,00002210,00000000,00000000,00cc0020) ret=01002938 0009:Ret gdi32.BitBlt() retval=00000001 ret=01002938 0009:Call gdi32.SelectObject(00002210,0000006c) ret=0100293e 0009:Ret gdi32.SelectObject() retval=000021fc ret=0100293e 0009:Call gdi32.DeleteObject(000021fc) ret=01002947 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01002947 0009:Call gdi32.DeleteDC(00002210) ret=0100294e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100294e 0009:Call gdi32.SetPixel(00000314,00000459,00000258,00008000) ret=01002969 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002969 0009:Call gdi32.SetPixel(00000314,0000045a,00000258,00008000) ret=01002976 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002976 0009:Call gdi32.SetPixel(00000314,00000459,00000259,00008000) ret=01002982 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002982 0009:Call gdi32.SetPixel(00000314,0000049f,00000258,00008000) ret=0100298f 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100298f 0009:Call gdi32.SetPixel(00000314,0000049e,00000258,00008000) ret=0100299c 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100299c 0009:Call gdi32.SetPixel(00000314,0000049f,00000259,00008000) ret=010029ab 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ab 0009:Call gdi32.SetPixel(00000314,00000459,000002b7,00008000) ret=010029bf 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029bf 0009:Call gdi32.SetPixel(00000314,0000045a,000002b7,00008000) ret=010029d0 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029d0 0009:Call gdi32.SetPixel(00000314,00000459,000002b6,00008000) ret=010029de 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029de 0009:Call gdi32.SetPixel(00000314,0000049f,000002b7,00008000) ret=010029ef 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ef 0009:Call gdi32.SetPixel(00000314,0000049e,000002b7,00008000) ret=01002a00 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a00 0009:Call gdi32.SetPixel(00000314,0000049f,000002b6,00008000) ret=01002a11 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a11 0009:Call user32.GetClientRect(00010030,0033f7c0) ret=01002b2e 0009:Ret user32.GetClientRect() retval=00000001 ret=01002b2e 0009:Call user32.EndPaint(00010030,0033f8d4) ret=01006ee5 0009:Ret user32.EndPaint() retval=00000001 ret=01006ee5 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_PAINT,wp=00000000,lp=00000000) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=03010251) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,03010251) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=03010251) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02bd0250) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02bd0250) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02f7023f) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02f7023f) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02f7023f) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02b3023e) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02b3023e) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02ed022f) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02ed022f) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02ed022f) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02a9022e) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02a9022e) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02e50223) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02e50223) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02e50223) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02a10222) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02a10222) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02df0219) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02df0219) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02df0219) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=029b0218) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=029b0218) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02db0213) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02db0213) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02db0213) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02970212) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02970212) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02d7020d) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02d7020d) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02d7020d) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=0293020c) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=0293020c) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02d60209) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02d60209) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02d60209) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02920208) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02920208) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02d50207) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02d50207) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02d50207) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02910206) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02910206) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02d10201) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02d10201) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02d10201) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=028d0200) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=028d0200) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02cd01fb) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02cd01fb) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02cd01fb) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=028901fa) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=028901fa) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02c901f7) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02c901f7) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02c901f7) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=028501f6) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=028501f6) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02c801f5) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02c801f5) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02c801f5) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=028401f4) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=028401f4) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02c601f4) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02c601f4) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02c601f4) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=028201f3) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=028201f3) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02c501f3) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02c501f3) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02c501f3) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=028101f2) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=028101f2) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02c401f2) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02c401f2) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02c401f2) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=028001f1) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=028001f1) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02c401f4) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02c401f4) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02c401f4) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=028001f3) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=028001f3) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02c401f7) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02c401f7) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02c401f7) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=028001f6) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=028001f6) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02c40201) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02c40201) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02c40201) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02800200) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02800200) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02c8020d) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02c8020d) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02c8020d) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=0284020c) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=0284020c) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02ce021d) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02ce021d) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02ce021d) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=028a021c) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=028a021c) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02d4022d) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02d4022d) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02d4022d) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=0290022c) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=0290022c) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02dc023d) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02dc023d) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02dc023d) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=0298023c) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=0298023c) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02e00249) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02e00249) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02e00249) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=029c0248) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=029c0248) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02e20251) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02e20251) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02e20251) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=029e0250) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=029e0250) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02e20254) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02e20254) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02e20254) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=029e0253) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=029e0253) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02e20256) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02e20256) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02e20256) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=029e0255) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=029e0255) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02e20257) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02e20257) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02e20257) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=029e0256) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=029e0256) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0019:Ret user32.GetMessageW() retval=00000001 ret=7ec5ec4b 0019:Call user32.DispatchMessageW(0033f93c) ret=7ec5ec28 0019:Call window proc 0x7ec60b80 (hwnd=0x10026,msg=WM_TIMER,wp=00000001,lp=00000000) 0019:Ret window proc 0x7ec60b80 (hwnd=0x10026,msg=WM_TIMER,wp=00000001,lp=00000000) retval=00000000 0019:Ret user32.DispatchMessageW() retval=00000000 ret=7ec5ec28 0019:Call user32.GetMessageW(0033f93c,00000000,00000000,00000000) ret=7ec5ec4b 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02e20257) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02e20257) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02e20257) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02010001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02010001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02010001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_LBUTTONDOWN,wp=00000001,lp=029e0256) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_LBUTTONDOWN,wp=00000001,lp=029e0256) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02e20257) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02e20257) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02e20257) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02020001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02020001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02020001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_LBUTTONUP,wp=00000000,lp=029e0256) 0009:Call user32.GetClientRect(00010030,0033f83c) ret=01002b53 0009:Ret user32.GetClientRect() retval=00000001 ret=01002b53 0009:Call user32.GetClientRect(00010030,0033f884) ret=01003826 0009:Ret user32.GetClientRect() retval=00000001 ret=01003826 0009:Call user32.GetClientRect(00010030,0033f82c) ret=01002b2e 0009:Ret user32.GetClientRect() retval=00000001 ret=01002b2e 0009:Call user32.PtInRect(0033f884,00000256,0000029e) ret=010067c3 0009:Ret user32.PtInRect() retval=00000001 ret=010067c3 0009:Call user32.PostMessageW(00010030,00000111,00009c4d,00000000) ret=010067d8 0009:Ret user32.PostMessageW() retval=00000001 ret=010067d8 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_LBUTTONUP,wp=00000000,lp=029e0256) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_COMMAND,wp=00009c4d,lp=00000000) 0009:Call user32.GetForegroundWindow() ret=01006c03 0009:Ret user32.GetForegroundWindow() retval=00010030 ret=01006c03 0009:Call user32.GetMenu(00010030) ret=01006c3f 0009:Ret user32.GetMenu() retval=000000f0 ret=01006c3f 0009:Call user32.GetDC(00010030) ret=01004e4d 0009:Ret user32.GetDC() retval=00000314 ret=01004e4d 0009:Call KERNEL32.GetModuleHandleW(00000000) ret=01004e64 0009:Ret KERNEL32.GetModuleHandleW() retval=01000000 ret=01004e64 0009:Call winmm.PlaySoundW(0000007e,01000000,00040007) ret=01004e6d 0009:Call ntdll.RtlAllocateHeap(00110000,00000008,0000001c) ret=7e7356bc 0009:Ret ntdll.RtlAllocateHeap() retval=00148bb0 ret=7e7356bc 0009:Call KERNEL32.ResetEvent(00000040) ret=7e735513 0009:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e735513 0009:Call KERNEL32.SetEvent(00000038) ret=7e735520 0009:Ret KERNEL32.SetEvent() retval=00000001 ret=7e735520 0009:Call msacm32.drv.wodMessage(0000ffff,0000000c,0014cb28,00000000,00000000) ret=7e728e1f 0009:Call winmm.waveOutReset(00008001) ret=7e0c0180 0009:Call winealsa.drv.wodMessage(00000000,0000000c,7e72ab2b,00000000,00000000) ret=7e728e1f 0009:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1b2580 0009:Ret KERNEL32.CreateEventW() retval=00000070 ret=7e1b2580 0041:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bd,0014cb28,0014d3a0,00000000) ret=7e1c4643 0041:Call KERNEL32.IsBadReadPtr(0014cb28,0000002c) ret=7e0bdbc9 0041:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 0041:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bd,008ceaa4,0014d3a0,00000000) ret=7e0bdf33 0041:Call KERNEL32.SetEvent(00000068) ret=7e7341f6 0040:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e73429b 0040:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 0041:Ret KERNEL32.SetEvent() retval=00000001 ret=7e7341f6 0041:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 0041:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 0041:Call KERNEL32.SetEvent(00000070) ret=7e1c4f3d 0040:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 0040:Call msacm32.drv.wodMessage(0000ffff,0000000c,0014cb28,00000000,00000000) ret=7e728e1f 0040:Call winmm.waveOutReset(00008001) ret=7e0c0180 0040:Call winealsa.drv.wodMessage(00000000,0000000c,7e72ab2b,00000000,00000000) ret=7e728e1f 0040:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1b2580 0041:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c4f3d 0040:Ret KERNEL32.CreateEventW() retval=000000c4 ret=7e1b2580 0040:Call KERNEL32.WaitForSingleObject(000000c4,ffffffff) ret=7e1b2635 0041:Call KERNEL32.SetEvent(000000c4) ret=7e1c4f3d 0041:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c4f3d 0040:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1b2635 0040:Call KERNEL32.CloseHandle(000000c4) ret=7e1b2640 0040:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1b2640 0040:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0040:Ret winmm.waveOutReset() retval=00000000 ret=7e0c0180 0040:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0040:Call msacm32.drv.wodMessage(0000ffff,00000008,0014cb28,0014d3a0,00000020) ret=7e728e1f 0040:Call winmm.waveOutUnprepareHeader(00008001,0014d3a0,00000020) ret=7e0c00b6 0040:Call winealsa.drv.wodMessage(00000000,00000008,7e72ab2b,0014d3a0,00000020) ret=7e728e1f 0040:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 0040:Ret winmm.waveOutUnprepareHeader() retval=00000000 ret=7e0c00b6 0040:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0040:Call msacm32.drv.wodMessage(0000ffff,00000008,0014cb28,0014d3c0,00000020) ret=7e728e1f 0040:Call winmm.waveOutUnprepareHeader(00008001,0014d3c0,00000020) ret=7e0c00b6 0040:Call winealsa.drv.wodMessage(00000000,00000008,7e72ab2b,0014d3c0,00000020) ret=7e728e1f 0040:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 0040:Ret winmm.waveOutUnprepareHeader() retval=00000000 ret=7e0c00b6 0040:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0040:Call KERNEL32.CloseHandle(00000068) ret=7e7349fd 0040:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e7349fd 0040:Call ntdll.RtlFreeHeap(00110000,00000000,0014d3a0) ret=7e734a23 0040:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e734a23 0040:Call ntdll.RtlFreeHeap(00110000,00000000,00148cb8) ret=7e734a49 0040:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e734a49 0040:Call msacm32.drv.wodMessage(0000ffff,00000006,0014cb28,00000000,00000000) ret=7e728e1f 0040:Call winmm.waveOutClose(00008001) ret=7e0c01a5 0040:Call winealsa.drv.wodMessage(00000000,00000006,7e72ab2b,00000000,00000000) ret=7e728e1f 0040:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1b2580 0040:Ret KERNEL32.CreateEventW() retval=00000068 ret=7e1b2580 0040:Call KERNEL32.WaitForSingleObject(00000068,ffffffff) ret=7e1b2635 0041:Call KERNEL32.SetEvent(00000068) ret=7e1c4ea1 0041:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c4ea1 0041:Call KERNEL32.ExitThread(00000000) ret=7e1c4eb0 0041:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) 0041:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0041:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) 0041:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0041:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) 0040:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1b2635 0040:Call KERNEL32.CloseHandle(00000068) ret=7e1b2640 0041:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0041:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) 0041:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) retval=1 0041:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) 0041:Call KERNEL32.TlsGetValue(00000000) ret=7e3f4071 0041:Ret KERNEL32.TlsGetValue() retval=00000000 ret=7e3f4071 0041:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0041:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) 0041:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0040:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1b2640 0040:Call ntdll.RtlFreeHeap(00110000,00000000,0014c7d0) ret=7e1b24dc 0040:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e1b24dc 0040:Call ntdll.RtlDeleteCriticalSection(0013cefc) ret=7e1b24fb 0040:Ret ntdll.RtlDeleteCriticalSection() retval=00000000 ret=7e1b24fb 0040:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bc,0014cb28,00000000,00000000) ret=7e1c4643 0040:Call KERNEL32.IsBadReadPtr(0014cb28,0000002c) ret=7e0bdbc9 0040:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 0040:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bc,008ceaa4,00000000,00000000) ret=7e0bdf33 0040:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 0040:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 0040:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0040:Call ntdll.RtlFreeHeap(00110000,00000000,0014cb60) ret=7e72ae0b 0040:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e72ae0b 0040:Ret winmm.waveOutClose() retval=00000000 ret=7e0c01a5 0040:Call ntdll.RtlFreeHeap(00110000,00000000,0014cb28) ret=7e0c01f7 0040:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e0c01f7 0040:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0040:Call ntdll.RtlFreeHeap(00110000,00000000,0014cb00) ret=7e72ae0b 0040:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e72ae0b 0009:Call KERNEL32.WaitForSingleObject(00000070,ffffffff) ret=7e1b2635 0009:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1b2635 0009:Call KERNEL32.CloseHandle(00000070) ret=7e1b2640 0009:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1b2640 0009:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0009:Ret winmm.waveOutReset() retval=00000000 ret=7e0c0180 0009:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0040:Call ntdll.RtlFreeHeap(00110000,00000000,00148c28) ret=7e731f79 0040:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e731f79 0040:Call KERNEL32.SetEvent(00000040) ret=7e7343a0 0040:Ret KERNEL32.SetEvent() retval=00000001 ret=7e7343a0 0040:Call KERNEL32.CloseHandle(00000064) ret=7e734340 0040:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e734340 0040:Call ntdll.RtlFreeHeap(00110000,00000000,0014cad8) ret=7e734360 0040:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e734360 0040:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) 0040:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0040:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) 0040:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0040:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) 0040:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0040:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) 0040:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) retval=1 0040:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) 0040:Call KERNEL32.TlsGetValue(00000000) ret=7e3f4071 0040:Ret KERNEL32.TlsGetValue() retval=00000000 ret=7e3f4071 0040:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0040:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) 0040:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0009:Call KERNEL32.WaitForSingleObject(00000040,ffffffff) ret=7e73555a 0009:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e73555a 0009:Call KERNEL32.ResetEvent(00000038) ret=7e735572 0009:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e735572 0009:Call KERNEL32.CreateThread(00000000,00000000,7e7348a0,00148bb0,00000000,0033f5b8) ret=7e73560c 0042:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) 0042:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0042:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) 0042:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0042:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) 0042:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) retval=1 0042:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) 0042:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0042:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) 0042:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0042:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) 0042:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0042:Starting thread proc 0x7e7348a0 (arg=0x148bb0) 0042:Call KERNEL32.FindResourceW(01000000,0000007e,7e741bde L"WAVE") ret=7e734ca3 0042:Ret KERNEL32.FindResourceW() retval=01014c60 ret=7e734ca3 0042:Call KERNEL32.LoadResource(01000000,01014c60) ret=7e734cb9 0042:Ret KERNEL32.LoadResource() retval=0104f710 ret=7e734cb9 0042:Call KERNEL32.LockResource(0104f710) ret=7e734cce 0042:Ret KERNEL32.LockResource() retval=0104f710 ret=7e734cce 0042:Call KERNEL32.FreeResource(0104f710) ret=7e734ce9 0042:Ret KERNEL32.FreeResource() retval=00000000 ret=7e734ce9 0042:Call ntdll.RtlAllocateHeap(00110000,00000008,0000005c) ret=7e733960 0042:Ret ntdll.RtlAllocateHeap() retval=00148c28 ret=7e733960 0042:Call KERNEL32.GetFileSize(ffffffff,00000000) ret=7e733ab9 0042:Ret KERNEL32.GetFileSize() retval=ffffffff ret=7e733ab9 0042:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7e733cf0 0042:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e733cf0 0042:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7e734e1c 0042:Ret ntdll.RtlAllocateHeap() retval=00148cb8 ret=7e734e1c 0042:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e734f1f 0042:Ret KERNEL32.CreateEventW() retval=00000068 ret=7e734f1f 0042:Call ntdll.RtlAllocateHeap(00110000,00000008,0000001c) ret=7e72abbe 0042:Ret ntdll.RtlAllocateHeap() retval=00148bd8 ret=7e72abbe 0042:Call msacm32.drv.wodMessage(0000ffff,00000005,007ce918,007ce970,00030000) ret=7e728e1f 0042:Call ntdll.RtlAllocateHeap(00110000,00000000,0000002c) ret=7e0bfd8c 0042:Ret ntdll.RtlAllocateHeap() retval=00148b18 ret=7e0bfd8c 0042:Call winmm.waveOutGetNumDevs() ret=7e0bfdb5 0042:Ret winmm.waveOutGetNumDevs() retval=00000002 ret=7e0bfdb5 0042:Call winmm.waveOutOpen(00148b20,00000000,00148cb8,7e0bde60,00148b18,00030008) ret=7e0c0313 0042:Call ntdll.RtlAllocateHeap(00110000,00000008,0000001c) ret=7e72abbe 0042:Ret ntdll.RtlAllocateHeap() retval=00148b50 ret=7e72abbe 0042:Call winealsa.drv.wodMessage(00000000,00000005,007ce5b8,007ce610,00030008) ret=7e728e1f 0042:Call ntdll.RtlAllocateHeap(00110000,00000008,00000068) ret=7e1c6c82 0042:Ret ntdll.RtlAllocateHeap() retval=0014b1d0 ret=7e1c6c82 0042:Call ntdll.RtlAllocateHeap(00110000,00000008,00000300) ret=7e1b2459 0042:Ret ntdll.RtlAllocateHeap() retval=0014c7d0 ret=7e1b2459 0042:Call KERNEL32.InitializeCriticalSection(0013cefc) ret=7e1b2469 0042:Ret KERNEL32.InitializeCriticalSection() retval=00000001 ret=7e1b2469 0042:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1c73ab 0042:Ret KERNEL32.CreateEventW() retval=00000070 ret=7e1c73ab 0042:Call KERNEL32.CreateThread(00000000,00000000,7e1c5570,00000000,00000000,0013cedc) ret=7e1c73ef 0009:Ret KERNEL32.CreateThread() retval=00000064 ret=7e73560c 0009:Call KERNEL32.SetThreadPriority(00000064,0000000f) ret=7e73562d 0009:Ret KERNEL32.SetThreadPriority() retval=00000001 ret=7e73562d 0009:Ret winmm.PlaySoundW() retval=00000001 ret=01004e6d 0009:Call user32.InvertRect(00000314,0033f670) ret=01004e95 0009:Ret user32.InvertRect() retval=00000001 ret=01004e95 0009:Call gdi32.GdiFlush() ret=01004e9b 0009:Ret gdi32.GdiFlush() retval=00000001 ret=01004e9b 0009:Call KERNEL32.Sleep(000000fa) ret=01004ea6 0043:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) 0043:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0043:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) 0043:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0043:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) 0043:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) retval=1 0043:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) 0043:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0043:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) 0043:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0043:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) 0043:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0043:Starting thread proc 0x7e1c5570 (arg=(nil)) 0043:Call KERNEL32.SetEvent(00000070) ret=7e1c55aa 0043:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c55aa 0042:Ret KERNEL32.CreateThread() retval=000000c4 ret=7e1c73ef 0042:Call KERNEL32.SetThreadPriority(000000c4,0000000f) ret=7e1c7413 0042:Ret KERNEL32.SetThreadPriority() retval=00000001 ret=7e1c7413 0042:Call KERNEL32.WaitForSingleObject(00000070,ffffffff) ret=7e1c742f 0042:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1c742f 0042:Call KERNEL32.CloseHandle(00000070) ret=7e1c7443 0042:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1c7443 0042:Call ntdll.RtlFreeHeap(00110000,00000000,0014b1d0) ret=7e1c7479 0042:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e1c7479 0042:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bb,00148b18,00000000,00000000) ret=7e1c4643 0042:Call KERNEL32.IsBadReadPtr(00148b18,0000002c) ret=7e0bdbc9 0042:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 0042:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bb,007ceaa4,00000000,00000000) ret=7e0bdf33 0042:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 0042:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 0042:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0042:Ret winmm.waveOutOpen() retval=00000000 ret=7e0c0313 0042:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0042:Call ntdll.RtlAllocateHeap(00110000,00000000,000039ac) ret=7e73520d 0042:Ret ntdll.RtlAllocateHeap() retval=0014d3a0 ret=7e73520d 0042:Call msacm32.drv.wodMessage(0000ffff,00000007,00148b18,0014d3a0,00000020) ret=7e728e1f 0042:Call winmm.waveOutPrepareHeader(00008001,0014d3a0,00000020) ret=7e0c09d8 0042:Call winealsa.drv.wodMessage(00000000,00000007,7e72ab2b,0014d3a0,00000020) ret=7e728e1f 0042:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 0042:Ret winmm.waveOutPrepareHeader() retval=00000000 ret=7e0c09d8 0042:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0042:Call msacm32.drv.wodMessage(0000ffff,00000007,00148b18,0014d3c0,00000020) ret=7e728e1f 0042:Call winmm.waveOutPrepareHeader(00008001,0014d3c0,00000020) ret=7e0c09d8 0042:Call winealsa.drv.wodMessage(00000000,00000007,7e72ab2b,0014d3c0,00000020) ret=7e728e1f 0042:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 0042:Ret winmm.waveOutPrepareHeader() retval=00000000 ret=7e0c09d8 0042:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0042:Call KERNEL32.WaitForSingleObject(00000038,00000000) ret=7e735343 0042:Ret KERNEL32.WaitForSingleObject() retval=00000102 ret=7e735343 0042:Call msacm32.drv.wodMessage(0000ffff,00000009,00148b18,0014d3a0,00000020) ret=7e728e1f 0042:Call winmm.waveOutWrite(00008001,0014d3a0,00000020) ret=7e0c09b5 0042:Call winealsa.drv.wodMessage(00000000,00000009,7e72ab2b,0014d3a0,00000020) ret=7e728e1f 0042:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0042:Ret winmm.waveOutWrite() retval=00000000 ret=7e0c09b5 0042:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0042:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 0042:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 0042:Call KERNEL32.WaitForSingleObject(00000038,00000000) ret=7e735343 0042:Ret KERNEL32.WaitForSingleObject() retval=00000102 ret=7e735343 0042:Call msacm32.drv.wodMessage(0000ffff,00000009,00148b18,0014d3c0,00000020) ret=7e728e1f 0042:Call winmm.waveOutWrite(00008001,0014d3c0,00000020) ret=7e0c09b5 0042:Call winealsa.drv.wodMessage(00000000,00000009,7e72ab2b,0014d3c0,00000020) ret=7e728e1f 0042:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0042:Ret winmm.waveOutWrite() retval=00000000 ret=7e0c09b5 0042:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0042:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 0042:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 0042:Call KERNEL32.WaitForSingleObject(00000068,ffffffff) ret=7e73429b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=01004ea6 0009:Call user32.InvertRect(00000314,0033f670) ret=01004eaf 0009:Ret user32.InvertRect() retval=00000001 ret=01004eaf 0009:Call user32.InvertRect(00000314,0033f670) ret=01004ec9 0009:Ret user32.InvertRect() retval=00000001 ret=01004ec9 0009:Call gdi32.GdiFlush() ret=01004ecf 0009:Ret gdi32.GdiFlush() retval=00000001 ret=01004ecf 0009:Call KERNEL32.Sleep(000000fa) ret=01004eda 0043:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bd,00148b18,0014d3a0,00000000) ret=7e1c4643 0043:Call KERNEL32.IsBadReadPtr(00148b18,0000002c) ret=7e0bdbc9 0043:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 0043:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bd,007ceaa4,0014d3a0,00000000) ret=7e0bdf33 0043:Call KERNEL32.SetEvent(00000068) ret=7e7341f6 0043:Ret KERNEL32.SetEvent() retval=00000001 ret=7e7341f6 0043:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 0043:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 0042:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e73429b 0042:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 0042:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 0042:Call KERNEL32.WaitForSingleObject(00000038,00000000) ret=7e735343 0042:Ret KERNEL32.WaitForSingleObject() retval=00000102 ret=7e735343 0042:Call msacm32.drv.wodMessage(0000ffff,00000009,00148b18,0014d3a0,00000020) ret=7e728e1f 0042:Call winmm.waveOutWrite(00008001,0014d3a0,00000020) ret=7e0c09b5 0042:Call winealsa.drv.wodMessage(00000000,00000009,7e72ab2b,0014d3a0,00000020) ret=7e728e1f 0042:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0042:Ret winmm.waveOutWrite() retval=00000000 ret=7e0c09b5 0042:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0042:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 0042:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 0042:Call KERNEL32.WaitForSingleObject(00000068,ffffffff) ret=7e73429b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=01004eda 0009:Call user32.InvertRect(00000314,0033f670) ret=01004ee3 0009:Ret user32.InvertRect() retval=00000001 ret=01004ee3 0009:Call user32.ReleaseDC(00010030,00000314) ret=01004eee 0009:Ret user32.ReleaseDC() retval=00000001 ret=01004eee 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_COMMAND,wp=00009c4d,lp=00000000) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0043:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bd,00148b18,0014d3c0,00000000) ret=7e1c4643 0043:Call KERNEL32.IsBadReadPtr(00148b18,0000002c) ret=7e0bdbc9 0043:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 0043:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bd,007ceaa4,0014d3c0,00000000) ret=7e0bdf33 0043:Call KERNEL32.SetEvent(00000068) ret=7e7341f6 0043:Ret KERNEL32.SetEvent() retval=00000001 ret=7e7341f6 0043:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 0043:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 0042:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e73429b 0042:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 0042:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 0042:Call KERNEL32.WaitForSingleObject(00000038,00000000) ret=7e735343 0042:Ret KERNEL32.WaitForSingleObject() retval=00000102 ret=7e735343 0042:Call msacm32.drv.wodMessage(0000ffff,00000009,00148b18,0014d3c0,00000020) ret=7e728e1f 0042:Call winmm.waveOutWrite(00008001,0014d3c0,00000020) ret=7e0c09b5 0042:Call winealsa.drv.wodMessage(00000000,00000009,7e72ab2b,0014d3c0,00000020) ret=7e728e1f 0042:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0042:Ret winmm.waveOutWrite() retval=00000000 ret=7e0c09b5 0042:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0042:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 0042:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 0042:Call KERNEL32.WaitForSingleObject(00000068,ffffffff) ret=7e73429b 0043:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bd,00148b18,0014d3a0,00000000) ret=7e1c4643 0043:Call KERNEL32.IsBadReadPtr(00148b18,0000002c) ret=7e0bdbc9 0043:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 0043:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bd,007ceaa4,0014d3a0,00000000) ret=7e0bdf33 0043:Call KERNEL32.SetEvent(00000068) ret=7e7341f6 0043:Ret KERNEL32.SetEvent() retval=00000001 ret=7e7341f6 0043:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 0043:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 0042:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e73429b 0042:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 0042:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 0042:Call KERNEL32.WaitForSingleObject(00000038,00000000) ret=7e735343 0042:Ret KERNEL32.WaitForSingleObject() retval=00000102 ret=7e735343 0042:Call msacm32.drv.wodMessage(0000ffff,00000009,00148b18,0014d3a0,00000020) ret=7e728e1f 0042:Call winmm.waveOutWrite(00008001,0014d3a0,00000020) ret=7e0c09b5 0042:Call winealsa.drv.wodMessage(00000000,00000009,7e72ab2b,0014d3a0,00000020) ret=7e728e1f 0042:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0042:Ret winmm.waveOutWrite() retval=00000000 ret=7e0c09b5 0042:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0042:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 0042:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 0042:Call KERNEL32.WaitForSingleObject(00000068,ffffffff) ret=7e73429b 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02e20258) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02e20258) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02e20258) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=029e0257) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=029e0257) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02e3025a) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02e3025a) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02e3025a) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=029f0259) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=029f0259) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02e70260) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02e70260) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02e70260) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02a3025f) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02a3025f) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02e90266) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02e90266) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02e90266) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02a50265) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02a50265) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02ea0267) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02ea0267) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02ea0267) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02a60266) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02a60266) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0043:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bd,00148b18,0014d3c0,00000000) ret=7e1c4643 0043:Call KERNEL32.IsBadReadPtr(00148b18,0000002c) ret=7e0bdbc9 0043:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 0043:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bd,007ceaa4,0014d3c0,00000000) ret=7e0bdf33 0043:Call KERNEL32.SetEvent(00000068) ret=7e7341f6 0043:Ret KERNEL32.SetEvent() retval=00000001 ret=7e7341f6 0043:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 0043:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 0042:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e73429b 0042:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 0042:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 0042:Call KERNEL32.WaitForSingleObject(00000038,00000000) ret=7e735343 0042:Ret KERNEL32.WaitForSingleObject() retval=00000102 ret=7e735343 0042:Call msacm32.drv.wodMessage(0000ffff,00000009,00148b18,0014d3c0,00000020) ret=7e728e1f 0042:Call winmm.waveOutWrite(00008001,0014d3c0,00000020) ret=7e0c09b5 0042:Call winealsa.drv.wodMessage(00000000,00000009,7e72ab2b,0014d3c0,00000020) ret=7e728e1f 0042:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0042:Ret winmm.waveOutWrite() retval=00000000 ret=7e0c09b5 0042:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0042:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 0042:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 0042:Call KERNEL32.WaitForSingleObject(00000068,ffffffff) ret=7e73429b 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02ea0269) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02ea0269) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02ea0269) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02a60268) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02a60268) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02ea026b) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02ea026b) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02ea026b) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02a6026a) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02a6026a) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02ea026d) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02ea026d) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02ea026d) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02a6026c) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02a6026c) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02ea026e) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02ea026e) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02ea026e) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02a6026d) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02a6026d) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02ea0271) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02ea0271) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02ea0271) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02a60270) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02a60270) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02ea0274) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02ea0274) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02ea0274) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02a60273) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02a60273) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02ea027c) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02ea027c) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02ea027c) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02a6027b) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02a6027b) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02e80286) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02e80286) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02e80286) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02a40285) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02a40285) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02e60292) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02e60292) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02e60292) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02a20291) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02a20291) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02e2029e) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02e2029e) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02e2029e) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=029e029d) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=029e029d) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02e002a6) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02e002a6) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02e002a6) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=029c02a5) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=029c02a5) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02de02ae) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02de02ae) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02de02ae) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=029a02ad) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=029a02ad) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02de02b0) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02de02b0) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02de02b0) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=029a02af) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=029a02af) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02dc02b6) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02dc02b6) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02dc02b6) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=029802b5) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=029802b5) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02dc02b8) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02dc02b8) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02dc02b8) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=029802b7) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=029802b7) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02dc02ba) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02dc02ba) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02dc02ba) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=029802b9) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=029802b9) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02dc02bb) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02dc02bb) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02dc02bb) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=029802ba) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=029802ba) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02dc02bc) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02dc02bc) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02dc02bc) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=029802bb) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=029802bb) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02db02bc) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02db02bc) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02db02bc) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=029702bb) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=029702bb) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02da02bc) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02da02bc) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02da02bc) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=029602bb) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=029602bb) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02d902bc) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02d902bc) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02d902bc) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=029502bb) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=029502bb) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02d602bc) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02d602bc) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02d602bc) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=029202bb) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=029202bb) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02cc02bc) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02cc02bc) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02cc02bc) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=028802bb) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=028802bb) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02c002bc) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02c002bc) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02c002bc) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=027c02bb) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=027c02bb) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02b602bc) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02b602bc) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02b602bc) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=027202bb) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=027202bb) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02aa02bc) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02aa02bc) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02aa02bc) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=026602bb) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=026602bb) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0043:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bd,00148b18,0014d3a0,00000000) ret=7e1c4643 0043:Call KERNEL32.IsBadReadPtr(00148b18,0000002c) ret=7e0bdbc9 0043:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 0043:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bd,007ceaa4,0014d3a0,00000000) ret=7e0bdf33 0043:Call KERNEL32.SetEvent(00000068) ret=7e7341f6 0043:Ret KERNEL32.SetEvent() retval=00000001 ret=7e7341f6 0043:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 0043:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 0042:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e73429b 0042:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 0042:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 0042:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 0042:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 0042:Call KERNEL32.WaitForSingleObject(00000068,ffffffff) ret=7e73429b 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=029c02bc) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,029c02bc) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=029c02bc) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=025802bb) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=025802bb) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=028e02ba) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,028e02ba) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=028e02ba) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=024a02b9) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=024a02b9) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=027e02b6) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,027e02b6) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=027e02b6) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=023a02b5) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=023a02b5) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=026c02b4) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,026c02b4) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=026c02b4) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=022802b3) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=022802b3) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=024e02b0) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,024e02b0) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=024e02b0) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=020a02af) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=020a02af) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0019:Ret user32.GetMessageW() retval=00000001 ret=7ec5ec4b 0019:Call user32.DispatchMessageW(0033f93c) ret=7ec5ec28 0019:Call window proc 0x7ec60b80 (hwnd=0x10026,msg=WM_TIMER,wp=00000001,lp=00000000) 0019:Ret window proc 0x7ec60b80 (hwnd=0x10026,msg=WM_TIMER,wp=00000001,lp=00000000) retval=00000000 0019:Ret user32.DispatchMessageW() retval=00000000 ret=7ec5ec28 0019:Call user32.GetMessageW(0033f93c,00000000,00000000,00000000) ret=7ec5ec4b 0009:Call imm32.ImmProcessKey(00010030,08090809,0000004d,00320001,00000000) ret=7eadc539 0009:Call KERNEL32.TlsGetValue(00000000) ret=7e3f02b5 0009:Ret KERNEL32.TlsGetValue() retval=00147218 ret=7e3f02b5 0009:Call user32.GetPropW(00010030,7e3f7d40 L"WineImmHIMCProperty") ret=7e3f398b 0009:Ret user32.GetPropW() retval=00000000 ret=7e3f398b 0009:Call KERNEL32.TlsGetValue(00000000) ret=7e3f02b5 0009:Ret KERNEL32.TlsGetValue() retval=00147218 ret=7e3f02b5 0009:Call user32.GetKeyboardState(0033f458) ret=7e3f3ae0 0009:Ret user32.GetKeyboardState() retval=00000001 ret=7e3f3ae0 0009:Call winex11.drv.ImeProcessKey(00147230,0000004d,00320001,0033f458) ret=7e3f3b04 0009:Ret winex11.drv.ImeProcessKey() retval=00000000 ret=7e3f3b04 0009:Ret imm32.ImmProcessKey() retval=00000000 ret=7eadc539 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_INITMENU,wp=000000f0,lp=00000000) 0009:Call user32.DefWindowProcW(00010030,00000116,000000f0,00000000) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_INITMENU,wp=000000f0,lp=00000000) retval=00000000 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_INITMENUPOPUP,wp=00000140,lp=00000000) 0009:Call user32.DefWindowProcW(00010030,00000117,00000140,00000000) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_INITMENUPOPUP,wp=00000140,lp=00000000) retval=00000000 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_COMMAND,wp=00019c4d,lp=00000000) 0009:Call user32.GetForegroundWindow() ret=01006c03 0009:Ret user32.GetForegroundWindow() retval=00010030 ret=01006c03 0009:Call user32.GetMenu(00010030) ret=01006c3f 0009:Ret user32.GetMenu() retval=000000f0 ret=01006c3f 0009:Call user32.GetDC(00010030) ret=01004e4d 0009:Ret user32.GetDC() retval=00000314 ret=01004e4d 0009:Call KERNEL32.GetModuleHandleW(00000000) ret=01004e64 0009:Ret KERNEL32.GetModuleHandleW() retval=01000000 ret=01004e64 0009:Call winmm.PlaySoundW(0000007e,01000000,00040007) ret=01004e6d 0009:Call ntdll.RtlAllocateHeap(00110000,00000008,0000001c) ret=7e7356bc 0009:Ret ntdll.RtlAllocateHeap() retval=0014b1d0 ret=7e7356bc 0009:Call KERNEL32.ResetEvent(00000040) ret=7e735513 0009:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e735513 0009:Call KERNEL32.SetEvent(00000038) ret=7e735520 0009:Ret KERNEL32.SetEvent() retval=00000001 ret=7e735520 0009:Call msacm32.drv.wodMessage(0000ffff,0000000c,00148b18,00000000,00000000) ret=7e728e1f 0009:Call winmm.waveOutReset(00008001) ret=7e0c0180 0009:Call winealsa.drv.wodMessage(00000000,0000000c,7e72ab2b,00000000,00000000) ret=7e728e1f 0009:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1b2580 0009:Ret KERNEL32.CreateEventW() retval=00000070 ret=7e1b2580 0009:Call KERNEL32.WaitForSingleObject(00000070,ffffffff) ret=7e1b2635 0043:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bd,00148b18,0014d3c0,00000000) ret=7e1c4643 0043:Call KERNEL32.IsBadReadPtr(00148b18,0000002c) ret=7e0bdbc9 0043:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 0043:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bd,007ceaa4,0014d3c0,00000000) ret=7e0bdf33 0043:Call KERNEL32.SetEvent(00000068) ret=7e7341f6 0043:Ret KERNEL32.SetEvent() retval=00000001 ret=7e7341f6 0043:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 0043:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 0043:Call KERNEL32.SetEvent(00000070) ret=7e1c4f3d 0009:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1b2635 0009:Call KERNEL32.CloseHandle(00000070) ret=7e1b2640 0009:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1b2640 0009:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0009:Ret winmm.waveOutReset() retval=00000000 ret=7e0c0180 0009:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0009:Call KERNEL32.WaitForSingleObject(00000040,ffffffff) ret=7e73555a 0043:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c4f3d 0042:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e73429b 0042:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 0042:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 0042:Call msacm32.drv.wodMessage(0000ffff,0000000c,00148b18,00000000,00000000) ret=7e728e1f 0042:Call winmm.waveOutReset(00008001) ret=7e0c0180 0042:Call winealsa.drv.wodMessage(00000000,0000000c,7e72ab2b,00000000,00000000) ret=7e728e1f 0042:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1b2580 0042:Ret KERNEL32.CreateEventW() retval=00000070 ret=7e1b2580 0042:Call KERNEL32.WaitForSingleObject(00000070,ffffffff) ret=7e1b2635 0043:Call KERNEL32.SetEvent(00000070) ret=7e1c4f3d 0043:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c4f3d 0042:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1b2635 0042:Call KERNEL32.CloseHandle(00000070) ret=7e1b2640 0042:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1b2640 0042:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0042:Ret winmm.waveOutReset() retval=00000000 ret=7e0c0180 0042:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0042:Call msacm32.drv.wodMessage(0000ffff,00000008,00148b18,0014d3a0,00000020) ret=7e728e1f 0042:Call winmm.waveOutUnprepareHeader(00008001,0014d3a0,00000020) ret=7e0c00b6 0042:Call winealsa.drv.wodMessage(00000000,00000008,7e72ab2b,0014d3a0,00000020) ret=7e728e1f 0042:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 0042:Ret winmm.waveOutUnprepareHeader() retval=00000000 ret=7e0c00b6 0042:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0042:Call msacm32.drv.wodMessage(0000ffff,00000008,00148b18,0014d3c0,00000020) ret=7e728e1f 0042:Call winmm.waveOutUnprepareHeader(00008001,0014d3c0,00000020) ret=7e0c00b6 0042:Call winealsa.drv.wodMessage(00000000,00000008,7e72ab2b,0014d3c0,00000020) ret=7e728e1f 0042:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 0042:Ret winmm.waveOutUnprepareHeader() retval=00000000 ret=7e0c00b6 0042:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0042:Call KERNEL32.CloseHandle(00000068) ret=7e7349fd 0042:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e7349fd 0042:Call ntdll.RtlFreeHeap(00110000,00000000,0014d3a0) ret=7e734a23 0042:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e734a23 0042:Call ntdll.RtlFreeHeap(00110000,00000000,00148cb8) ret=7e734a49 0042:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e734a49 0042:Call msacm32.drv.wodMessage(0000ffff,00000006,00148b18,00000000,00000000) ret=7e728e1f 0042:Call winmm.waveOutClose(00008001) ret=7e0c01a5 0042:Call winealsa.drv.wodMessage(00000000,00000006,7e72ab2b,00000000,00000000) ret=7e728e1f 0042:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1b2580 0042:Ret KERNEL32.CreateEventW() retval=00000068 ret=7e1b2580 0042:Call KERNEL32.WaitForSingleObject(00000068,ffffffff) ret=7e1b2635 0043:Call KERNEL32.SetEvent(00000068) ret=7e1c4ea1 0043:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c4ea1 0043:Call KERNEL32.ExitThread(00000000) ret=7e1c4eb0 0043:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) 0043:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0043:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) 0043:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0043:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) 0043:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0043:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) 0043:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) retval=1 0043:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) 0043:Call KERNEL32.TlsGetValue(00000000) ret=7e3f4071 0043:Ret KERNEL32.TlsGetValue() retval=00000000 ret=7e3f4071 0043:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0043:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) 0043:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0042:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1b2635 0042:Call KERNEL32.CloseHandle(00000068) ret=7e1b2640 0042:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1b2640 0042:Call ntdll.RtlFreeHeap(00110000,00000000,0014c7d0) ret=7e1b24dc 0042:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e1b24dc 0042:Call ntdll.RtlDeleteCriticalSection(0013cefc) ret=7e1b24fb 0042:Ret ntdll.RtlDeleteCriticalSection() retval=00000000 ret=7e1b24fb 0042:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bc,00148b18,00000000,00000000) ret=7e1c4643 0042:Call KERNEL32.IsBadReadPtr(00148b18,0000002c) ret=7e0bdbc9 0042:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 0042:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bc,007ceaa4,00000000,00000000) ret=7e0bdf33 0042:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 0042:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 0042:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0042:Call ntdll.RtlFreeHeap(00110000,00000000,00148b50) ret=7e72ae0b 0042:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e72ae0b 0042:Ret winmm.waveOutClose() retval=00000000 ret=7e0c01a5 0042:Call ntdll.RtlFreeHeap(00110000,00000000,00148b18) ret=7e0c01f7 0042:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e0c01f7 0042:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0042:Call ntdll.RtlFreeHeap(00110000,00000000,00148bd8) ret=7e72ae0b 0042:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e72ae0b 0042:Call ntdll.RtlFreeHeap(00110000,00000000,00148c28) ret=7e731f79 0042:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e731f79 0042:Call KERNEL32.SetEvent(00000040) ret=7e7343a0 0009:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e73555a 0042:Ret KERNEL32.SetEvent() retval=00000001 ret=7e7343a0 0042:Call KERNEL32.CloseHandle(00000064) ret=7e734340 0009:Call KERNEL32.ResetEvent(00000038) ret=7e735572 0009:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e735572 0009:Call KERNEL32.CreateThread(00000000,00000000,7e7348a0,0014b1d0,00000000,0033f448) ret=7e73560c 0042:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e734340 0042:Call ntdll.RtlFreeHeap(00110000,00000000,00148bb0) ret=7e734360 0042:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e734360 0042:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) 0042:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0042:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) 0042:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0042:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) 0042:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0042:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) 0042:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) retval=1 0042:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) 0042:Call KERNEL32.TlsGetValue(00000000) ret=7e3f4071 0042:Ret KERNEL32.TlsGetValue() retval=00000000 ret=7e3f4071 0042:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0042:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) 0042:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0044:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) 0044:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0044:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) 0044:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0044:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) 0044:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) retval=1 0044:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) 0044:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0044:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) 0044:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0044:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) 0044:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0044:Starting thread proc 0x7e7348a0 (arg=0x14b1d0) 0044:Call KERNEL32.FindResourceW(01000000,0000007e,7e741bde L"WAVE") ret=7e734ca3 0044:Ret KERNEL32.FindResourceW() retval=01014c60 ret=7e734ca3 0044:Call KERNEL32.LoadResource(01000000,01014c60) ret=7e734cb9 0044:Ret KERNEL32.LoadResource() retval=0104f710 ret=7e734cb9 0044:Call KERNEL32.LockResource(0104f710) ret=7e734cce 0044:Ret KERNEL32.LockResource() retval=0104f710 ret=7e734cce 0044:Call KERNEL32.FreeResource(0104f710) ret=7e734ce9 0044:Ret KERNEL32.FreeResource() retval=00000000 ret=7e734ce9 0044:Call ntdll.RtlAllocateHeap(00110000,00000008,0000005c) ret=7e733960 0044:Ret ntdll.RtlAllocateHeap() retval=00148c28 ret=7e733960 0044:Call KERNEL32.GetFileSize(ffffffff,00000000) ret=7e733ab9 0044:Ret KERNEL32.GetFileSize() retval=ffffffff ret=7e733ab9 0044:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7e733cf0 0044:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e733cf0 0044:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7e734e1c 0044:Ret ntdll.RtlAllocateHeap() retval=00148cb8 ret=7e734e1c 0044:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e734f1f 0044:Ret KERNEL32.CreateEventW() retval=00000068 ret=7e734f1f 0044:Call ntdll.RtlAllocateHeap(00110000,00000008,0000001c) ret=7e72abbe 0044:Ret ntdll.RtlAllocateHeap() retval=00148b18 ret=7e72abbe 0044:Call msacm32.drv.wodMessage(0000ffff,00000005,008ce918,008ce970,00030000) ret=7e728e1f 0044:Call ntdll.RtlAllocateHeap(00110000,00000000,0000002c) ret=7e0bfd8c 0044:Ret ntdll.RtlAllocateHeap() retval=00148b40 ret=7e0bfd8c 0044:Call winmm.waveOutGetNumDevs() ret=7e0bfdb5 0044:Ret winmm.waveOutGetNumDevs() retval=00000002 ret=7e0bfdb5 0044:Call winmm.waveOutOpen(00148b48,00000000,00148cb8,7e0bde60,00148b40,00030008) ret=7e0c0313 0044:Call ntdll.RtlAllocateHeap(00110000,00000008,0000001c) ret=7e72abbe 0044:Ret ntdll.RtlAllocateHeap() retval=00148b78 ret=7e72abbe 0044:Call winealsa.drv.wodMessage(00000000,00000005,008ce5b8,008ce610,00030008) ret=7e728e1f 0044:Call ntdll.RtlAllocateHeap(00110000,00000008,00000068) ret=7e1c6c82 0044:Ret ntdll.RtlAllocateHeap() retval=0014b1f8 ret=7e1c6c82 0044:Call ntdll.RtlAllocateHeap(00110000,00000008,00000300) ret=7e1b2459 0044:Ret ntdll.RtlAllocateHeap() retval=0014c7d0 ret=7e1b2459 0044:Call KERNEL32.InitializeCriticalSection(0013cefc) ret=7e1b2469 0044:Ret KERNEL32.InitializeCriticalSection() retval=00000001 ret=7e1b2469 0044:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1c73ab 0044:Ret KERNEL32.CreateEventW() retval=00000070 ret=7e1c73ab 0044:Call KERNEL32.CreateThread(00000000,00000000,7e1c5570,00000000,00000000,0013cedc) ret=7e1c73ef 0009:Ret KERNEL32.CreateThread() retval=00000064 ret=7e73560c 0009:Call KERNEL32.SetThreadPriority(00000064,0000000f) ret=7e73562d 0009:Ret KERNEL32.SetThreadPriority() retval=00000001 ret=7e73562d 0009:Ret winmm.PlaySoundW() retval=00000001 ret=01004e6d 0009:Call user32.InvertRect(00000314,0033f500) ret=01004e95 0009:Ret user32.InvertRect() retval=00000001 ret=01004e95 0009:Call gdi32.GdiFlush() ret=01004e9b 0009:Ret gdi32.GdiFlush() retval=00000001 ret=01004e9b 0009:Call KERNEL32.Sleep(000000fa) ret=01004ea6 0045:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) 0045:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0045:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) 0045:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0045:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) 0045:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) retval=1 0045:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) 0045:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0045:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) 0045:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0045:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) 0045:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0045:Starting thread proc 0x7e1c5570 (arg=(nil)) 0045:Call KERNEL32.SetEvent(00000070) ret=7e1c55aa 0045:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c55aa 0044:Ret KERNEL32.CreateThread() retval=000000c8 ret=7e1c73ef 0044:Call KERNEL32.SetThreadPriority(000000c8,0000000f) ret=7e1c7413 0044:Ret KERNEL32.SetThreadPriority() retval=00000001 ret=7e1c7413 0044:Call KERNEL32.WaitForSingleObject(00000070,ffffffff) ret=7e1c742f 0044:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1c742f 0044:Call KERNEL32.CloseHandle(00000070) ret=7e1c7443 0044:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1c7443 0044:Call ntdll.RtlFreeHeap(00110000,00000000,0014b1f8) ret=7e1c7479 0044:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e1c7479 0044:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bb,00148b40,00000000,00000000) ret=7e1c4643 0044:Call KERNEL32.IsBadReadPtr(00148b40,0000002c) ret=7e0bdbc9 0044:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 0044:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bb,008ceaa4,00000000,00000000) ret=7e0bdf33 0044:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 0044:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 0044:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0044:Ret winmm.waveOutOpen() retval=00000000 ret=7e0c0313 0044:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0044:Call ntdll.RtlAllocateHeap(00110000,00000000,000039ac) ret=7e73520d 0044:Ret ntdll.RtlAllocateHeap() retval=0014d3a0 ret=7e73520d 0044:Call msacm32.drv.wodMessage(0000ffff,00000007,00148b40,0014d3a0,00000020) ret=7e728e1f 0044:Call winmm.waveOutPrepareHeader(00008001,0014d3a0,00000020) ret=7e0c09d8 0044:Call winealsa.drv.wodMessage(00000000,00000007,7e72ab2b,0014d3a0,00000020) ret=7e728e1f 0044:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 0044:Ret winmm.waveOutPrepareHeader() retval=00000000 ret=7e0c09d8 0044:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0044:Call msacm32.drv.wodMessage(0000ffff,00000007,00148b40,0014d3c0,00000020) ret=7e728e1f 0044:Call winmm.waveOutPrepareHeader(00008001,0014d3c0,00000020) ret=7e0c09d8 0044:Call winealsa.drv.wodMessage(00000000,00000007,7e72ab2b,0014d3c0,00000020) ret=7e728e1f 0044:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 0044:Ret winmm.waveOutPrepareHeader() retval=00000000 ret=7e0c09d8 0044:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0044:Call KERNEL32.WaitForSingleObject(00000038,00000000) ret=7e735343 0044:Ret KERNEL32.WaitForSingleObject() retval=00000102 ret=7e735343 0044:Call msacm32.drv.wodMessage(0000ffff,00000009,00148b40,0014d3a0,00000020) ret=7e728e1f 0044:Call winmm.waveOutWrite(00008001,0014d3a0,00000020) ret=7e0c09b5 0044:Call winealsa.drv.wodMessage(00000000,00000009,7e72ab2b,0014d3a0,00000020) ret=7e728e1f 0044:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0044:Ret winmm.waveOutWrite() retval=00000000 ret=7e0c09b5 0044:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0044:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 0044:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 0044:Call KERNEL32.WaitForSingleObject(00000038,00000000) ret=7e735343 0044:Ret KERNEL32.WaitForSingleObject() retval=00000102 ret=7e735343 0044:Call msacm32.drv.wodMessage(0000ffff,00000009,00148b40,0014d3c0,00000020) ret=7e728e1f 0044:Call winmm.waveOutWrite(00008001,0014d3c0,00000020) ret=7e0c09b5 0044:Call winealsa.drv.wodMessage(00000000,00000009,7e72ab2b,0014d3c0,00000020) ret=7e728e1f 0044:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0044:Ret winmm.waveOutWrite() retval=00000000 ret=7e0c09b5 0044:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0044:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 0044:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 0044:Call KERNEL32.WaitForSingleObject(00000068,ffffffff) ret=7e73429b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=01004ea6 0009:Call user32.InvertRect(00000314,0033f500) ret=01004eaf 0009:Ret user32.InvertRect() retval=00000001 ret=01004eaf 0009:Call user32.InvertRect(00000314,0033f500) ret=01004ec9 0009:Ret user32.InvertRect() retval=00000001 ret=01004ec9 0009:Call gdi32.GdiFlush() ret=01004ecf 0009:Ret gdi32.GdiFlush() retval=00000001 ret=01004ecf 0009:Call KERNEL32.Sleep(000000fa) ret=01004eda 0045:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bd,00148b40,0014d3a0,00000000) ret=7e1c4643 0045:Call KERNEL32.IsBadReadPtr(00148b40,0000002c) ret=7e0bdbc9 0045:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 0045:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bd,008ceaa4,0014d3a0,00000000) ret=7e0bdf33 0045:Call KERNEL32.SetEvent(00000068) ret=7e7341f6 0045:Ret KERNEL32.SetEvent() retval=00000001 ret=7e7341f6 0045:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 0045:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 0044:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e73429b 0044:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 0044:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 0044:Call KERNEL32.WaitForSingleObject(00000038,00000000) ret=7e735343 0044:Ret KERNEL32.WaitForSingleObject() retval=00000102 ret=7e735343 0044:Call msacm32.drv.wodMessage(0000ffff,00000009,00148b40,0014d3a0,00000020) ret=7e728e1f 0044:Call winmm.waveOutWrite(00008001,0014d3a0,00000020) ret=7e0c09b5 0044:Call winealsa.drv.wodMessage(00000000,00000009,7e72ab2b,0014d3a0,00000020) ret=7e728e1f 0044:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0044:Ret winmm.waveOutWrite() retval=00000000 ret=7e0c09b5 0044:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0044:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 0044:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 0044:Call KERNEL32.WaitForSingleObject(00000068,ffffffff) ret=7e73429b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=01004eda 0009:Call user32.InvertRect(00000314,0033f500) ret=01004ee3 0009:Ret user32.InvertRect() retval=00000001 ret=01004ee3 0009:Call user32.ReleaseDC(00010030,00000314) ret=01004eee 0009:Ret user32.ReleaseDC() retval=00000001 ret=01004eee 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_COMMAND,wp=00019c4d,lp=00000000) retval=00000000 0009:Ret user32.TranslateAcceleratorW() retval=00000001 ret=01007340 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call imm32.ImmProcessKey(00010030,08090809,0000004d,c0320001,00000000) ret=7eadc539 0009:Call KERNEL32.TlsGetValue(00000000) ret=7e3f02b5 0009:Ret KERNEL32.TlsGetValue() retval=00147218 ret=7e3f02b5 0009:Call user32.GetPropW(00010030,7e3f7d40 L"WineImmHIMCProperty") ret=7e3f398b 0009:Ret user32.GetPropW() retval=00000000 ret=7e3f398b 0009:Call KERNEL32.TlsGetValue(00000000) ret=7e3f02b5 0009:Ret KERNEL32.TlsGetValue() retval=00147218 ret=7e3f02b5 0009:Call user32.GetKeyboardState(0033f458) ret=7e3f3ae0 0009:Ret user32.GetKeyboardState() retval=00000001 ret=7e3f3ae0 0009:Call winex11.drv.ImeProcessKey(00147230,0000004d,c0320001,0033f458) ret=7e3f3b04 0009:Ret winex11.drv.ImeProcessKey() retval=00000000 ret=7e3f3b04 0009:Ret imm32.ImmProcessKey() retval=00000000 ret=7eadc539 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000001 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_KEYUP,wp=0000004d,lp=c0320001) 0009:Call user32.DefWindowProcW(00010030,00000101,0000004d,c0320001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_KEYUP,wp=0000004d,lp=c0320001) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=024e02af) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,024e02af) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=024e02af) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=020a02ae) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=020a02ae) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=024d02af) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,024d02af) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=024d02af) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=020902ae) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=020902ae) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=024b02b7) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,024b02b7) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=024b02b7) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=020702b6) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=020702b6) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=024102d7) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,024102d7) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=024102d7) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=01fd02d6) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=01fd02d6) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0045:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bd,00148b40,0014d3c0,00000000) ret=7e1c4643 0045:Call KERNEL32.IsBadReadPtr(00148b40,0000002c) ret=7e0bdbc9 0045:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 0045:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bd,008ceaa4,0014d3c0,00000000) ret=7e0bdf33 0045:Call KERNEL32.SetEvent(00000068) ret=7e7341f6 0044:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e73429b 0044:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 0044:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 0044:Call KERNEL32.WaitForSingleObject(00000038,00000000) ret=7e735343 0044:Ret KERNEL32.WaitForSingleObject() retval=00000102 ret=7e735343 0044:Call msacm32.drv.wodMessage(0000ffff,00000009,00148b40,0014d3c0,00000020) ret=7e728e1f 0044:Call winmm.waveOutWrite(00008001,0014d3c0,00000020) ret=7e0c09b5 0044:Call winealsa.drv.wodMessage(00000000,00000009,7e72ab2b,0014d3c0,00000020) ret=7e728e1f 0044:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0044:Ret winmm.waveOutWrite() retval=00000000 ret=7e0c09b5 0044:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0044:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 0044:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 0044:Call KERNEL32.WaitForSingleObject(00000068,ffffffff) ret=7e73429b 0045:Ret KERNEL32.SetEvent() retval=00000001 ret=7e7341f6 0045:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 0045:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=0237030f) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,0237030f) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=0237030f) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=01f3030e) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=01f3030e) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02350345) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02350345) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02350345) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=01f10344) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=01f10344) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=0237037d) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,0237037d) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=0237037d) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=01f3037c) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=01f3037c) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=024103b1) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,024103b1) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=024103b1) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=01fd03b0) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=01fd03b0) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=025103e1) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,025103e1) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=025103e1) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=020d03e0) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=020d03e0) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02630407) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02630407) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02630407) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=021f0406) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=021f0406) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=026d041f) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,026d041f) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=026d041f) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=0229041e) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=0229041e) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02730429) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02730429) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02730429) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=022f0428) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=022f0428) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=0273042b) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,0273042b) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=0273042b) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=022f042a) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=022f042a) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0045:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bd,00148b40,0014d3a0,00000000) ret=7e1c4643 0045:Call KERNEL32.IsBadReadPtr(00148b40,0000002c) ret=7e0bdbc9 0045:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 0045:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bd,008ceaa4,0014d3a0,00000000) ret=7e0bdf33 0045:Call KERNEL32.SetEvent(00000068) ret=7e7341f6 0044:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e73429b 0044:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 0044:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 0044:Call KERNEL32.WaitForSingleObject(00000038,00000000) ret=7e735343 0044:Ret KERNEL32.WaitForSingleObject() retval=00000102 ret=7e735343 0044:Call msacm32.drv.wodMessage(0000ffff,00000009,00148b40,0014d3a0,00000020) ret=7e728e1f 0044:Call winmm.waveOutWrite(00008001,0014d3a0,00000020) ret=7e0c09b5 0044:Call winealsa.drv.wodMessage(00000000,00000009,7e72ab2b,0014d3a0,00000020) ret=7e728e1f 0044:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0044:Ret winmm.waveOutWrite() retval=00000000 ret=7e0c09b5 0044:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0044:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 0044:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 0044:Call KERNEL32.WaitForSingleObject(00000068,ffffffff) ret=7e73429b 0045:Ret KERNEL32.SetEvent() retval=00000001 ret=7e7341f6 0045:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 0045:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=027b0431) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,027b0431) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=027b0431) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02370430) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02370430) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02850437) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02850437) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02850437) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02410436) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02410436) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=028f043f) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,028f043f) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=028f043f) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=024b043e) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=024b043e) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02970445) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02970445) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02970445) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02530444) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02530444) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=029f044b) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,029f044b) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=029f044b) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=025b044a) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=025b044a) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02a70453) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02a70453) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02a70453) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02630452) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02630452) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02af0459) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02af0459) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02af0459) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=026b0458) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=026b0458) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02b70461) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02b70461) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02b70461) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02730460) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02730460) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02bd0467) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02bd0467) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02bd0467) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02790466) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02790466) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02c1046d) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02c1046d) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02c1046d) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=027d046c) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=027d046c) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02c50473) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02c50473) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02c50473) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02810472) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02810472) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02c60474) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02c60474) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02c60474) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02820473) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02820473) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02c60474) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02c60474) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02c60474) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02010001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02010001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02010001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_LBUTTONDOWN,wp=00000001,lp=02820473) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_LBUTTONDOWN,wp=00000001,lp=02820473) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02c60474) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02c60474) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02c60474) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02020001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02020001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02020001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_LBUTTONUP,wp=00000000,lp=02820473) 0009:Call user32.GetClientRect(00010030,0033f83c) ret=01002b53 0009:Ret user32.GetClientRect() retval=00000001 ret=01002b53 0009:Call user32.PostMessageW(00010030,00000111,00009c47,00000000) ret=010067a8 0009:Ret user32.PostMessageW() retval=00000001 ret=010067a8 0009:Call user32.GetClientRect(00010030,0033f884) ret=01003826 0009:Ret user32.GetClientRect() retval=00000001 ret=01003826 0009:Call user32.GetClientRect(00010030,0033f82c) ret=01002b2e 0009:Ret user32.GetClientRect() retval=00000001 ret=01002b2e 0009:Call user32.PtInRect(0033f884,00000473,00000282) ret=010067c3 0009:Ret user32.PtInRect() retval=00000000 ret=010067c3 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_LBUTTONUP,wp=00000000,lp=02820473) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_COMMAND,wp=00009c47,lp=00000000) 0009:Call user32.GetForegroundWindow() ret=01006c03 0009:Ret user32.GetForegroundWindow() retval=00010030 ret=01006c03 0009:Call user32.GetMenu(00010030) ret=01006c3f 0009:Ret user32.GetMenu() retval=000000f0 ret=01006c3f 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,0000000c) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c58b0 ret=0100a7d2 0009:Call user32.GetClientRect(00010030,0033f608) ret=01005145 0009:Ret user32.GetClientRect() retval=00000001 ret=01005145 0009:Call user32.GetDC(00010030) ret=010051ad 0009:Ret user32.GetDC() retval=00000314 ret=010051ad 0009:Call gdi32.CreateCompatibleDC(00000314) ret=010051bc 0009:Ret gdi32.CreateCompatibleDC() retval=00002238 ret=010051bc 0009:Call gdi32.CreateCompatibleDC(00000314) ret=010051ca 0009:Ret gdi32.CreateCompatibleDC() retval=00002244 ret=010051ca 0009:Call gdi32.CreateCompatibleDC(00000314) ret=010051d8 0009:Ret gdi32.CreateCompatibleDC() retval=00002250 ret=010051d8 0009:Call gdi32.CreateCompatibleBitmap(00000314,00000047,00000060) ret=010051f8 0009:Ret gdi32.CreateCompatibleBitmap() retval=0000225c ret=010051f8 0009:Call gdi32.CreateCompatibleBitmap(00000314,00000047,00000060) ret=01005212 0009:Ret gdi32.CreateCompatibleBitmap() retval=00002260 ret=01005212 0009:Call gdi32.CreateCompatibleBitmap(00000314,00000047,00000060) ret=0100522c 0009:Ret gdi32.CreateCompatibleBitmap() retval=00002264 ret=0100522c 0009:Call gdi32.SelectObject(00002238,0000225c) ret=01005246 0009:Ret gdi32.SelectObject() retval=0000006c ret=01005246 0009:Call gdi32.SelectObject(00002244,00002260) ret=0100525a 0009:Ret gdi32.SelectObject() retval=0000006c ret=0100525a 0009:Call gdi32.SelectObject(00002250,00002264) ret=0100526e 0009:Ret gdi32.SelectObject() retval=0000006c ret=0100526e 0009:Call user32.LoadBitmapW(01000000,0033f5a0 L"CARD51") ret=010028ff 0009:Ret user32.LoadBitmapW() retval=00002274 ret=010028ff 0009:Call gdi32.CreateCompatibleDC(00002244) ret=01002909 0009:Ret gdi32.CreateCompatibleDC() retval=00002288 ret=01002909 0009:Call gdi32.SelectObject(00002288,00002274) ret=01002917 0009:Ret gdi32.SelectObject() retval=0000006c ret=01002917 0009:Call gdi32.BitBlt(00002244,00000000,00000000,00000047,00000060,00002288,00000000,00000000,00cc0020) ret=01002938 0009:Ret gdi32.BitBlt() retval=00000001 ret=01002938 0009:Call gdi32.SelectObject(00002288,0000006c) ret=0100293e 0009:Ret gdi32.SelectObject() retval=00002274 ret=0100293e 0009:Call gdi32.DeleteObject(00002274) ret=01002947 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01002947 0009:Call gdi32.DeleteDC(00002288) ret=0100294e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100294e 0009:Call gdi32.SetPixel(00002244,00000000,00000000,00008000) ret=01002969 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002969 0009:Call gdi32.SetPixel(00002244,00000001,00000000,00008000) ret=01002976 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002976 0009:Call gdi32.SetPixel(00002244,00000000,00000001,00008000) ret=01002982 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002982 0009:Call gdi32.SetPixel(00002244,00000046,00000000,00008000) ret=0100298f 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100298f 0009:Call gdi32.SetPixel(00002244,00000045,00000000,00008000) ret=0100299c 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100299c 0009:Call gdi32.SetPixel(00002244,00000046,00000001,00008000) ret=010029ab 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ab 0009:Call gdi32.SetPixel(00002244,00000000,0000005f,00008000) ret=010029bf 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029bf 0009:Call gdi32.SetPixel(00002244,00000001,0000005f,00008000) ret=010029d0 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029d0 0009:Call gdi32.SetPixel(00002244,00000000,0000005e,00008000) ret=010029de 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029de 0009:Call gdi32.SetPixel(00002244,00000046,0000005f,00008000) ret=010029ef 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ef 0009:Call gdi32.SetPixel(00002244,00000045,0000005f,00008000) ret=01002a00 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a00 0009:Call gdi32.SetPixel(00002244,00000046,0000005e,00008000) ret=01002a11 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a11 0009:Call user32.LoadBitmapW(01000000,010012c8 L"CARDBACK") ret=010028ff 0009:Ret user32.LoadBitmapW() retval=000022a0 ret=010028ff 0009:Call gdi32.CreateCompatibleDC(00002238) ret=01002909 0009:Ret gdi32.CreateCompatibleDC() retval=000022b4 ret=01002909 0009:Call gdi32.SelectObject(000022b4,000022a0) ret=01002917 0009:Ret gdi32.SelectObject() retval=0000006c ret=01002917 0009:Call gdi32.BitBlt(00002238,00000000,00000000,00000047,00000060,000022b4,00000000,00000000,00cc0020) ret=01002938 0009:Ret gdi32.BitBlt() retval=00000001 ret=01002938 0009:Call gdi32.SelectObject(000022b4,0000006c) ret=0100293e 0009:Ret gdi32.SelectObject() retval=000022a0 ret=0100293e 0009:Call gdi32.DeleteObject(000022a0) ret=01002947 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01002947 0009:Call gdi32.DeleteDC(000022b4) ret=0100294e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100294e 0009:Call gdi32.SetPixel(00002238,00000000,00000000,00008000) ret=01002969 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002969 0009:Call gdi32.SetPixel(00002238,00000001,00000000,00008000) ret=01002976 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002976 0009:Call gdi32.SetPixel(00002238,00000000,00000001,00008000) ret=01002982 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002982 0009:Call gdi32.SetPixel(00002238,00000046,00000000,00008000) ret=0100298f 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100298f 0009:Call gdi32.SetPixel(00002238,00000045,00000000,00008000) ret=0100299c 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100299c 0009:Call gdi32.SetPixel(00002238,00000046,00000001,00008000) ret=010029ab 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ab 0009:Call gdi32.SetPixel(00002238,00000000,0000005f,00008000) ret=010029bf 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029bf 0009:Call gdi32.SetPixel(00002238,00000001,0000005f,00008000) ret=010029d0 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029d0 0009:Call gdi32.SetPixel(00002238,00000000,0000005e,00008000) ret=010029de 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029de 0009:Call gdi32.SetPixel(00002238,00000046,0000005f,00008000) ret=010029ef 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ef 0009:Call gdi32.SetPixel(00002238,00000045,0000005f,00008000) ret=01002a00 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a00 0009:Call gdi32.SetPixel(00002238,00000046,0000005e,00008000) ret=01002a11 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a11 0009:Call winmm.timeGetTime() ret=010047d1 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000037b2 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000037b2 ret=010047d1 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000037b2 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000037b2 ret=01004881 0009:Call gdi32.BitBlt(00002238,00000000,00000000,00000048,00000061,00002238,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00000314,00000459,00000258,00000047,00000060,00002244,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0045:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bd,00148b40,0014d3c0,00000000) ret=7e1c4643 0045:Call KERNEL32.IsBadReadPtr(00148b40,0000002c) ret=7e0bdbc9 0045:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 0045:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bd,008ceaa4,0014d3c0,00000000) ret=7e0bdf33 0045:Call KERNEL32.SetEvent(00000068) ret=7e7341f6 0044:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e73429b 0044:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 0044:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 0044:Call KERNEL32.WaitForSingleObject(00000038,00000000) ret=7e735343 0044:Ret KERNEL32.WaitForSingleObject() retval=00000102 ret=7e735343 0044:Call msacm32.drv.wodMessage(0000ffff,00000009,00148b40,0014d3c0,00000020) ret=7e728e1f 0044:Call winmm.waveOutWrite(00008001,0014d3c0,00000020) ret=7e0c09b5 0044:Call winealsa.drv.wodMessage(00000000,00000009,7e72ab2b,0014d3c0,00000020) ret=7e728e1f 0044:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0044:Ret winmm.waveOutWrite() retval=00000000 ret=7e0c09b5 0044:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0044:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 0044:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 0044:Call KERNEL32.WaitForSingleObject(00000068,ffffffff) ret=7e73429b 0045:Ret KERNEL32.SetEvent() retval=00000001 ret=7e7341f6 0045:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 0045:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000037b7 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000037b7 ret=01004881 0009:Call gdi32.BitBlt(00002250,00000000,00000048,00000047,00000018,00002238,00000000,00000048,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00002250,00000012,00000000,00000035,00000048,00002238,00000012,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00002238,00000035,00000018,00000013,00000049,00002238,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00002238,00000000,00000000,00000047,00000018,00000314,00000424,00000240,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00002238,00000000,00000018,00000035,00000048,00000314,00000424,00000258,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000424,00000240,00000047,00000060,00002244,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000459,000002a0,00000047,00000018,00002250,00000000,00000048,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000046b,00000258,00000035,00000048,00002250,00000012,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000037bf ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000037bf ret=01004881 0009:Call gdi32.BitBlt(00002250,00000000,00000038,00000047,00000028,00002238,00000000,00000038,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00002250,fffffff2,00000000,00000055,00000038,00002238,fffffff2,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00002238,00000000,00000000,00000047,00000028,00000314,000003cf,00000218,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00002238,00000000,00000028,00000055,00000038,00000314,000003cf,00000240,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000003cf,00000218,00000047,00000060,00002244,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000424,00000278,00000047,00000028,00002250,00000000,00000038,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000424,00000240,00000047,00000038,00002250,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000037c7 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000037c7 ret=01004881 0009:Call gdi32.BitBlt(00002250,00000000,00000038,00000047,00000028,00002238,00000000,00000038,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00002250,fffffff2,00000000,00000055,00000038,00002238,fffffff2,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00002238,00000000,00000000,00000047,00000028,00000314,0000037a,000001f0,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00002238,00000000,00000028,00000055,00000038,00000314,0000037a,00000218,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,0000037a,000001f0,00000047,00000060,00002244,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000003cf,00000250,00000047,00000028,00002250,00000000,00000038,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,000003cf,00000218,00000047,00000038,00002250,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000037cf ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000037cf ret=01004881 0009:Call gdi32.BitBlt(00002250,00000000,00000038,00000047,00000028,00002238,00000000,00000038,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00002250,fffffff3,00000000,00000054,00000038,00002238,fffffff3,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00002238,00000000,00000000,00000047,00000028,00000314,00000326,000001c8,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00002238,00000000,00000028,00000054,00000038,00000314,00000326,000001f0,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000326,000001c8,00000047,00000060,00002244,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,0000037a,00000228,00000047,00000028,00002250,00000000,00000038,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000037a,000001f0,00000047,00000038,00002250,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000037d7 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000037d7 ret=01004881 0009:Call gdi32.BitBlt(00002250,00000000,00000038,00000047,00000028,00002238,00000000,00000038,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00002250,fffffff2,00000000,00000055,00000038,00002238,fffffff2,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00002238,00000000,00000000,00000047,00000028,00000314,000002d1,000001a0,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00002238,00000000,00000028,00000055,00000038,00000314,000002d1,000001c8,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000002d1,000001a0,00000047,00000060,00002244,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000326,00000200,00000047,00000028,00002250,00000000,00000038,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000326,000001c8,00000047,00000038,00002250,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000037df ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000037df ret=01004881 0009:Call gdi32.BitBlt(00002250,00000000,00000038,00000047,00000028,00002238,00000000,00000038,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00002250,fffffff2,00000000,00000055,00000038,00002238,fffffff2,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00002238,00000000,00000000,00000047,00000028,00000314,0000027c,00000178,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00002238,00000000,00000028,00000055,00000038,00000314,0000027c,000001a0,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,0000027c,00000178,00000047,00000060,00002244,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000002d1,000001d8,00000047,00000028,00002250,00000000,00000038,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,000002d1,000001a0,00000047,00000038,00002250,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000037e7 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000037e7 ret=01004881 0009:Call gdi32.BitBlt(00002250,00000000,00000038,00000047,00000028,00002238,00000000,00000038,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00002250,fffffff2,00000000,00000055,00000038,00002238,fffffff2,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00002238,00000000,00000000,00000047,00000028,00000314,00000227,00000150,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00002238,00000000,00000028,00000055,00000038,00000314,00000227,00000178,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000227,00000150,00000047,00000060,00002244,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,0000027c,000001b0,00000047,00000028,00002250,00000000,00000038,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000027c,00000178,00000047,00000038,00002250,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000037ef ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000037ef ret=01004881 0009:Call gdi32.BitBlt(00002250,00000000,00000038,00000047,00000028,00002238,00000000,00000038,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00002250,fffffff2,00000000,00000055,00000038,00002238,fffffff2,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00002238,00000000,00000000,00000047,00000028,00000314,000001d2,00000128,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00002238,00000000,00000028,00000055,00000038,00000314,000001d2,00000150,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000001d2,00000128,00000047,00000060,00002244,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000227,00000188,00000047,00000028,00002250,00000000,00000038,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000227,00000150,00000047,00000038,00002250,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000037f7 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000037f7 ret=01004881 0009:Call gdi32.BitBlt(00002250,00000000,00000038,00000047,00000028,00002238,00000000,00000038,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00002250,fffffff2,00000000,00000055,00000038,00002238,fffffff2,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00002238,00000000,00000000,00000047,00000028,00000314,0000017d,00000100,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00002238,00000000,00000028,00000055,00000038,00000314,0000017d,00000128,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,0000017d,00000100,00000047,00000060,00002244,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000001d2,00000160,00000047,00000028,00002250,00000000,00000038,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,000001d2,00000128,00000047,00000038,00002250,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000037ff ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000037ff ret=01004881 0009:Call gdi32.BitBlt(00002250,00000000,00000038,00000047,00000028,00002238,00000000,00000038,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00002250,fffffff2,00000000,00000055,00000038,00002238,fffffff2,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00002238,00000000,00000000,00000047,00000028,00000314,00000128,000000d8,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00002238,00000000,00000028,00000055,00000038,00000314,00000128,00000100,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000128,000000d8,00000047,00000060,00002244,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,0000017d,00000138,00000047,00000028,00002250,00000000,00000038,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000017d,00000100,00000047,00000038,00002250,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00003807 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00003807 ret=01004881 0009:Call gdi32.BitBlt(00002250,00000000,00000038,00000047,00000028,00002238,00000000,00000038,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00002250,fffffff2,00000000,00000055,00000038,00002238,fffffff2,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00002238,00000000,00000000,00000047,00000028,00000314,000000d3,000000b0,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00002238,00000000,00000028,00000055,00000038,00000314,000000d3,000000d8,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000000d3,000000b0,00000047,00000060,00002244,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000128,00000110,00000047,00000028,00002250,00000000,00000038,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000128,000000d8,00000047,00000038,00002250,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=0000380f ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=0000380f ret=01004881 0009:Call gdi32.BitBlt(00002250,00000000,00000038,00000047,00000028,00002238,00000000,00000038,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00002250,fffffff2,00000000,00000055,00000038,00002238,fffffff2,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00002238,00000000,00000000,00000047,00000028,00000314,0000007e,00000088,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00002238,00000000,00000028,00000055,00000038,00000314,0000007e,000000b0,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,0000007e,00000088,00000047,00000060,00002244,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000000d3,000000e8,00000047,00000028,00002250,00000000,00000038,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,000000d3,000000b0,00000047,00000038,00002250,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00003817 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00003817 ret=01004881 0009:Call gdi32.BitBlt(00002250,00000000,0000003d,00000047,00000023,00002238,00000000,0000003d,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00002250,fffffffc,00000000,0000004b,0000003d,00002238,fffffffc,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00002238,00000000,00000000,00000047,00000023,00000314,00000033,00000065,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00002238,00000000,00000023,0000004b,0000003d,00000314,00000033,00000088,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000033,00000065,00000047,00000060,00002244,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,0000007e,000000c5,00000047,00000023,00002250,00000000,0000003d,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000007e,00000088,00000047,0000003d,00002250,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call gdi32.SelectObject(00002238,0000006c) ret=01005316 0009:Ret gdi32.SelectObject() retval=0000225c ret=01005316 0009:Call gdi32.SelectObject(00002244,0000006c) ret=01005324 0009:Ret gdi32.SelectObject() retval=00002260 ret=01005324 0009:Call gdi32.SelectObject(00002250,0000006c) ret=01005332 0009:Ret gdi32.SelectObject() retval=00002264 ret=01005332 0009:Call gdi32.DeleteObject(0000225c) ret=01005340 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005340 0009:Call gdi32.DeleteObject(00002260) ret=01005348 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005348 0009:Call gdi32.DeleteObject(00002264) ret=01005350 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005350 0009:Call gdi32.DeleteDC(00002238) ret=0100535e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100535e 0009:Call gdi32.DeleteDC(00002244) ret=01005366 0009:Ret gdi32.DeleteDC() retval=00000001 ret=01005366 0009:Call gdi32.DeleteDC(00002250) ret=0100536e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100536e 0009:Call user32.ReleaseDC(00010030,00000314) ret=0100537c 0009:Ret user32.ReleaseDC() retval=00000001 ret=0100537c 0009:Call user32.InvalidateRect(00010030,0033f618,00000000) ret=0100538a 0009:Ret user32.InvalidateRect() retval=00000001 ret=0100538a 0009:Call KERNEL32.GetModuleHandleW(00000000) ret=01006a97 0009:Ret KERNEL32.GetModuleHandleW() retval=01000000 ret=01006a97 0009:Call winmm.PlaySoundW(0000007c,01000000,00040007) ret=01006aa0 0009:Call ntdll.RtlAllocateHeap(00110000,00000008,0000001c) ret=7e7356bc 0009:Ret ntdll.RtlAllocateHeap() retval=0014b290 ret=7e7356bc 0009:Call KERNEL32.ResetEvent(00000040) ret=7e735513 0009:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e735513 0009:Call KERNEL32.SetEvent(00000038) ret=7e735520 0009:Ret KERNEL32.SetEvent() retval=00000001 ret=7e735520 0009:Call msacm32.drv.wodMessage(0000ffff,0000000c,00148b40,00000000,00000000) ret=7e728e1f 0009:Call winmm.waveOutReset(00008001) ret=7e0c0180 0009:Call winealsa.drv.wodMessage(00000000,0000000c,7e72ab2b,00000000,00000000) ret=7e728e1f 0009:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1b2580 0009:Ret KERNEL32.CreateEventW() retval=00000070 ret=7e1b2580 0009:Call KERNEL32.WaitForSingleObject(00000070,ffffffff) ret=7e1b2635 0045:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bd,00148b40,0014d3a0,00000000) ret=7e1c4643 0045:Call KERNEL32.IsBadReadPtr(00148b40,0000002c) ret=7e0bdbc9 0045:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 0045:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bd,008ceaa4,0014d3a0,00000000) ret=7e0bdf33 0045:Call KERNEL32.SetEvent(00000068) ret=7e7341f6 0044:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e73429b 0044:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 0044:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 0044:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 0044:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 0044:Call KERNEL32.WaitForSingleObject(00000068,ffffffff) ret=7e73429b 0045:Ret KERNEL32.SetEvent() retval=00000001 ret=7e7341f6 0045:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 0045:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 0045:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bd,00148b40,0014d3c0,00000000) ret=7e1c4643 0045:Call KERNEL32.IsBadReadPtr(00148b40,0000002c) ret=7e0bdbc9 0045:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 0045:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bd,008ceaa4,0014d3c0,00000000) ret=7e0bdf33 0045:Call KERNEL32.SetEvent(00000068) ret=7e7341f6 0044:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e73429b 0044:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 0044:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 0044:Call msacm32.drv.wodMessage(0000ffff,0000000c,00148b40,00000000,00000000) ret=7e728e1f 0044:Call winmm.waveOutReset(00008001) ret=7e0c0180 0044:Call winealsa.drv.wodMessage(00000000,0000000c,7e72ab2b,00000000,00000000) ret=7e728e1f 0044:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1b2580 0044:Ret KERNEL32.CreateEventW() retval=000000cc ret=7e1b2580 0044:Call KERNEL32.WaitForSingleObject(000000cc,ffffffff) ret=7e1b2635 0045:Ret KERNEL32.SetEvent() retval=00000001 ret=7e7341f6 0045:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 0045:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 0045:fixme:wave:wodPlayer_Reset shouldn't have headers left 0045:Call KERNEL32.SetEvent(000000cc) ret=7e1c4bb8 0044:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1b2635 0044:Call KERNEL32.CloseHandle(000000cc) ret=7e1b2640 0044:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1b2640 0044:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0044:Ret winmm.waveOutReset() retval=00000000 ret=7e0c0180 0044:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0044:Call msacm32.drv.wodMessage(0000ffff,00000008,00148b40,0014d3a0,00000020) ret=7e728e1f 0044:Call winmm.waveOutUnprepareHeader(00008001,0014d3a0,00000020) ret=7e0c00b6 0044:Call winealsa.drv.wodMessage(00000000,00000008,7e72ab2b,0014d3a0,00000020) ret=7e728e1f 0044:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 0044:Ret winmm.waveOutUnprepareHeader() retval=00000000 ret=7e0c00b6 0044:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0044:Call msacm32.drv.wodMessage(0000ffff,00000008,00148b40,0014d3c0,00000020) ret=7e728e1f 0044:Call winmm.waveOutUnprepareHeader(00008001,0014d3c0,00000020) ret=7e0c00b6 0044:Call winealsa.drv.wodMessage(00000000,00000008,7e72ab2b,0014d3c0,00000020) ret=7e728e1f 0044:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 0044:Ret winmm.waveOutUnprepareHeader() retval=00000000 ret=7e0c00b6 0044:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0044:Call KERNEL32.CloseHandle(00000068) ret=7e7349fd 0044:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e7349fd 0044:Call ntdll.RtlFreeHeap(00110000,00000000,0014d3a0) ret=7e734a23 0044:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e734a23 0044:Call ntdll.RtlFreeHeap(00110000,00000000,00148cb8) ret=7e734a49 0044:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e734a49 0044:Call msacm32.drv.wodMessage(0000ffff,00000006,00148b40,00000000,00000000) ret=7e728e1f 0044:Call winmm.waveOutClose(00008001) ret=7e0c01a5 0044:Call winealsa.drv.wodMessage(00000000,00000006,7e72ab2b,00000000,00000000) ret=7e728e1f 0045:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c4bb8 0045:Call KERNEL32.SetEvent(00000070) ret=7e1c4f3d 0044:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1b2580 0044:Ret KERNEL32.CreateEventW() retval=00000068 ret=7e1b2580 0044:Call KERNEL32.WaitForSingleObject(00000068,ffffffff) ret=7e1b2635 0009:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1b2635 0009:Call KERNEL32.CloseHandle(00000070) ret=7e1b2640 0009:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1b2640 0009:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0009:Ret winmm.waveOutReset() retval=00000000 ret=7e0c0180 0009:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0009:Call KERNEL32.WaitForSingleObject(00000040,ffffffff) ret=7e73555a 0045:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c4f3d 0045:Call KERNEL32.SetEvent(00000068) ret=7e1c4ea1 0044:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1b2635 0044:Call KERNEL32.CloseHandle(00000068) ret=7e1b2640 0044:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1b2640 0044:Call ntdll.RtlFreeHeap(00110000,00000000,0014c7d0) ret=7e1b24dc 0044:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e1b24dc 0044:Call ntdll.RtlDeleteCriticalSection(0013cefc) ret=7e1b24fb 0044:Ret ntdll.RtlDeleteCriticalSection() retval=00000000 ret=7e1b24fb 0044:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bc,00148b40,00000000,00000000) ret=7e1c4643 0044:Call KERNEL32.IsBadReadPtr(00148b40,0000002c) ret=7e0bdbc9 0044:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 0044:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bc,008ceaa4,00000000,00000000) ret=7e0bdf33 0044:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 0044:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 0044:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0044:Call ntdll.RtlFreeHeap(00110000,00000000,00148b78) ret=7e72ae0b 0044:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e72ae0b 0044:Ret winmm.waveOutClose() retval=00000000 ret=7e0c01a5 0044:Call ntdll.RtlFreeHeap(00110000,00000000,00148b40) ret=7e0c01f7 0044:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e0c01f7 0044:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0044:Call ntdll.RtlFreeHeap(00110000,00000000,00148b18) ret=7e72ae0b 0044:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e72ae0b 0044:Call ntdll.RtlFreeHeap(00110000,00000000,00148c28) ret=7e731f79 0044:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e731f79 0044:Call KERNEL32.SetEvent(00000040) ret=7e7343a0 0044:Ret KERNEL32.SetEvent() retval=00000001 ret=7e7343a0 0044:Call KERNEL32.CloseHandle(00000064) ret=7e734340 0044:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e734340 0044:Call ntdll.RtlFreeHeap(00110000,00000000,0014b1d0) ret=7e734360 0044:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e734360 0044:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) 0044:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0044:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) 0044:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0044:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) 0044:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0044:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) 0044:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) retval=1 0044:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) 0044:Call KERNEL32.TlsGetValue(00000000) ret=7e3f4071 0044:Ret KERNEL32.TlsGetValue() retval=00000000 ret=7e3f4071 0044:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0044:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) 0044:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0009:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e73555a 0009:Call KERNEL32.ResetEvent(00000038) ret=7e735572 0009:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e735572 0009:Call KERNEL32.CreateThread(00000000,00000000,7e7348a0,0014b290,00000000,0033f598) ret=7e73560c 0045:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c4ea1 0045:Call KERNEL32.ExitThread(00000000) ret=7e1c4eb0 0045:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) 0045:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0045:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) 0045:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0045:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) 0045:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0045:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) 0045:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) retval=1 0045:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) 0045:Call KERNEL32.TlsGetValue(00000000) ret=7e3f4071 0045:Ret KERNEL32.TlsGetValue() retval=00000000 ret=7e3f4071 0045:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0045:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) 0045:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0046:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) 0046:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0046:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) 0046:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0046:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) 0046:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) retval=1 0046:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) 0046:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0046:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) 0046:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0046:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) 0046:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0046:Starting thread proc 0x7e7348a0 (arg=0x14b290) 0046:Call KERNEL32.FindResourceW(01000000,0000007c,7e741bde L"WAVE") ret=7e734ca3 0046:Ret KERNEL32.FindResourceW() retval=01014c40 ret=7e734ca3 0046:Call KERNEL32.LoadResource(01000000,01014c40) ret=7e734cb9 0046:Ret KERNEL32.LoadResource() retval=0104d668 ret=7e734cb9 0046:Call KERNEL32.LockResource(0104d668) ret=7e734cce 0046:Ret KERNEL32.LockResource() retval=0104d668 ret=7e734cce 0046:Call KERNEL32.FreeResource(0104d668) ret=7e734ce9 0046:Ret KERNEL32.FreeResource() retval=00000000 ret=7e734ce9 0046:Call ntdll.RtlAllocateHeap(00110000,00000008,0000005c) ret=7e733960 0046:Ret ntdll.RtlAllocateHeap() retval=00148c28 ret=7e733960 0046:Call KERNEL32.GetFileSize(ffffffff,00000000) ret=7e733ab9 0046:Ret KERNEL32.GetFileSize() retval=ffffffff ret=7e733ab9 0046:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7e733cf0 0046:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e733cf0 0046:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7e734e1c 0046:Ret ntdll.RtlAllocateHeap() retval=00148cb8 ret=7e734e1c 0046:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e734f1f 0046:Ret KERNEL32.CreateEventW() retval=00000068 ret=7e734f1f 0046:Call ntdll.RtlAllocateHeap(00110000,00000008,0000001c) ret=7e72abbe 0046:Ret ntdll.RtlAllocateHeap() retval=0014b1d0 ret=7e72abbe 0046:Call msacm32.drv.wodMessage(0000ffff,00000005,007ce918,007ce970,00030000) ret=7e728e1f 0046:Call ntdll.RtlAllocateHeap(00110000,00000000,0000002c) ret=7e0bfd8c 0046:Ret ntdll.RtlAllocateHeap() retval=0014b1f8 ret=7e0bfd8c 0046:Call winmm.waveOutGetNumDevs() ret=7e0bfdb5 0046:Ret winmm.waveOutGetNumDevs() retval=00000002 ret=7e0bfdb5 0046:Call winmm.waveOutOpen(0014b200,00000000,00148cb8,7e0bde60,0014b1f8,00030008) ret=7e0c0313 0046:Call ntdll.RtlAllocateHeap(00110000,00000008,0000001c) ret=7e72abbe 0046:Ret ntdll.RtlAllocateHeap() retval=0014b230 ret=7e72abbe 0046:Call winealsa.drv.wodMessage(00000000,00000005,007ce5b8,007ce610,00030008) ret=7e728e1f 0046:Call ntdll.RtlAllocateHeap(00110000,00000008,00000068) ret=7e1c6c82 0046:Ret ntdll.RtlAllocateHeap() retval=00148b18 ret=7e1c6c82 0046:Call ntdll.RtlAllocateHeap(00110000,00000008,00000300) ret=7e1b2459 0046:Ret ntdll.RtlAllocateHeap() retval=0014c7d0 ret=7e1b2459 0046:Call KERNEL32.InitializeCriticalSection(0013cefc) ret=7e1b2469 0046:Ret KERNEL32.InitializeCriticalSection() retval=00000001 ret=7e1b2469 0046:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1c73ab 0009:Ret KERNEL32.CreateThread() retval=00000064 ret=7e73560c 0009:Call KERNEL32.SetThreadPriority(00000064,0000000f) ret=7e73562d 0009:Ret KERNEL32.SetThreadPriority() retval=00000001 ret=7e73562d 0009:Ret winmm.PlaySoundW() retval=00000001 ret=01006aa0 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,0000000c) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c58c8 ret=0100a7d2 0009:Call user32.GetClientRect(00010030,0033f608) ret=01005145 0009:Ret user32.GetClientRect() retval=00000001 ret=01005145 0009:Call user32.GetDC(00010030) ret=010051ad 0009:Ret user32.GetDC() retval=00000314 ret=010051ad 0009:Call gdi32.CreateCompatibleDC(00000314) ret=010051bc 0009:Ret gdi32.CreateCompatibleDC() retval=000022c4 ret=010051bc 0009:Call gdi32.CreateCompatibleDC(00000314) ret=010051ca 0009:Ret gdi32.CreateCompatibleDC() retval=000022d0 ret=010051ca 0009:Call gdi32.CreateCompatibleDC(00000314) ret=010051d8 0009:Ret gdi32.CreateCompatibleDC() retval=000022dc ret=010051d8 0009:Call gdi32.CreateCompatibleBitmap(00000314,00000047,00000060) ret=010051f8 0009:Ret gdi32.CreateCompatibleBitmap() retval=000022e8 ret=010051f8 0009:Call gdi32.CreateCompatibleBitmap(00000314,00000047,00000060) ret=01005212 0009:Ret gdi32.CreateCompatibleBitmap() retval=000022ec ret=01005212 0009:Call gdi32.CreateCompatibleBitmap(00000314,00000047,00000060) ret=0100522c 0009:Ret gdi32.CreateCompatibleBitmap() retval=000022f0 ret=0100522c 0009:Call gdi32.SelectObject(000022c4,000022e8) ret=01005246 0009:Ret gdi32.SelectObject() retval=0000006c ret=01005246 0009:Call gdi32.SelectObject(000022d0,000022ec) ret=0100525a 0009:Ret gdi32.SelectObject() retval=0000006c ret=0100525a 0009:Call gdi32.SelectObject(000022dc,000022f0) ret=0100526e 0009:Ret gdi32.SelectObject() retval=0000006c ret=0100526e 0009:Call user32.LoadBitmapW(01000000,0033f5a0 L"CARD42") ret=010028ff 0046:Ret KERNEL32.CreateEventW() retval=00000070 ret=7e1c73ab 0046:Call KERNEL32.CreateThread(00000000,00000000,7e1c5570,00000000,00000000,0013cedc) ret=7e1c73ef 0009:Ret user32.LoadBitmapW() retval=00002300 ret=010028ff 0009:Call gdi32.CreateCompatibleDC(000022d0) ret=01002909 0009:Ret gdi32.CreateCompatibleDC() retval=00002314 ret=01002909 0009:Call gdi32.SelectObject(00002314,00002300) ret=01002917 0009:Ret gdi32.SelectObject() retval=0000006c ret=01002917 0009:Call gdi32.BitBlt(000022d0,00000000,00000000,00000047,00000060,00002314,00000000,00000000,00cc0020) ret=01002938 0009:Ret gdi32.BitBlt() retval=00000001 ret=01002938 0009:Call gdi32.SelectObject(00002314,0000006c) ret=0100293e 0009:Ret gdi32.SelectObject() retval=00002300 ret=0100293e 0009:Call gdi32.DeleteObject(00002300) ret=01002947 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01002947 0009:Call gdi32.DeleteDC(00002314) ret=0100294e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100294e 0009:Call gdi32.SetPixel(000022d0,00000000,00000000,00008000) ret=01002969 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002969 0009:Call gdi32.SetPixel(000022d0,00000001,00000000,00008000) ret=01002976 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002976 0009:Call gdi32.SetPixel(000022d0,00000000,00000001,00008000) ret=01002982 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002982 0009:Call gdi32.SetPixel(000022d0,00000046,00000000,00008000) ret=0100298f 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100298f 0009:Call gdi32.SetPixel(000022d0,00000045,00000000,00008000) ret=0100299c 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100299c 0009:Call gdi32.SetPixel(000022d0,00000046,00000001,00008000) ret=010029ab 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ab 0009:Call gdi32.SetPixel(000022d0,00000000,0000005f,00008000) ret=010029bf 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029bf 0009:Call gdi32.SetPixel(000022d0,00000001,0000005f,00008000) ret=010029d0 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029d0 0009:Call gdi32.SetPixel(000022d0,00000000,0000005e,00008000) ret=010029de 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029de 0009:Call gdi32.SetPixel(000022d0,00000046,0000005f,00008000) ret=010029ef 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ef 0009:Call gdi32.SetPixel(000022d0,00000045,0000005f,00008000) ret=01002a00 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a00 0009:Call gdi32.SetPixel(000022d0,00000046,0000005e,00008000) ret=01002a11 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a11 0009:Call user32.LoadBitmapW(01000000,010012c8 L"CARDBACK") ret=010028ff 0009:Ret user32.LoadBitmapW() retval=0000232c ret=010028ff 0009:Call gdi32.CreateCompatibleDC(000022c4) ret=01002909 0009:Ret gdi32.CreateCompatibleDC() retval=00002340 ret=01002909 0009:Call gdi32.SelectObject(00002340,0000232c) ret=01002917 0009:Ret gdi32.SelectObject() retval=0000006c ret=01002917 0009:Call gdi32.BitBlt(000022c4,00000000,00000000,00000047,00000060,00002340,00000000,00000000,00cc0020) ret=01002938 0009:Ret gdi32.BitBlt() retval=00000001 ret=01002938 0009:Call gdi32.SelectObject(00002340,0000006c) ret=0100293e 0009:Ret gdi32.SelectObject() retval=0000232c ret=0100293e 0009:Call gdi32.DeleteObject(0000232c) ret=01002947 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01002947 0009:Call gdi32.DeleteDC(00002340) ret=0100294e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100294e 0009:Call gdi32.SetPixel(000022c4,00000000,00000000,00008000) ret=01002969 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002969 0009:Call gdi32.SetPixel(000022c4,00000001,00000000,00008000) ret=01002976 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002976 0009:Call gdi32.SetPixel(000022c4,00000000,00000001,00008000) ret=01002982 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002982 0009:Call gdi32.SetPixel(000022c4,00000046,00000000,00008000) ret=0100298f 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100298f 0009:Call gdi32.SetPixel(000022c4,00000045,00000000,00008000) ret=0100299c 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100299c 0009:Call gdi32.SetPixel(000022c4,00000046,00000001,00008000) ret=010029ab 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ab 0009:Call gdi32.SetPixel(000022c4,00000000,0000005f,00008000) ret=010029bf 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029bf 0009:Call gdi32.SetPixel(000022c4,00000001,0000005f,00008000) ret=010029d0 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029d0 0009:Call gdi32.SetPixel(000022c4,00000000,0000005e,00008000) ret=010029de 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029de 0009:Call gdi32.SetPixel(000022c4,00000046,0000005f,00008000) ret=010029ef 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ef 0009:Call gdi32.SetPixel(000022c4,00000045,0000005f,00008000) ret=01002a00 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a00 0009:Call gdi32.SetPixel(000022c4,00000046,0000005e,00008000) ret=01002a11 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a11 0009:Call winmm.timeGetTime() ret=010047d1 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=0000384b ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=0000384b ret=010047d1 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=0000384b ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=0000384b ret=01004881 0009:Call gdi32.BitBlt(000022c4,00000000,00000000,00000048,00000061,000022c4,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00000314,00000459,00000258,00000047,00000060,000022d0,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0047:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) 0047:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0047:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) 0047:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0047:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) 0047:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) retval=1 0047:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) 0047:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0047:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) 0047:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0047:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) 0047:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0047:Starting thread proc 0x7e1c5570 (arg=(nil)) 0047:Call KERNEL32.SetEvent(00000070) ret=7e1c55aa 0047:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c55aa 0046:Ret KERNEL32.CreateThread() retval=000000cc ret=7e1c73ef 0046:Call KERNEL32.SetThreadPriority(000000cc,0000000f) ret=7e1c7413 0046:Ret KERNEL32.SetThreadPriority() retval=00000001 ret=7e1c7413 0046:Call KERNEL32.WaitForSingleObject(00000070,ffffffff) ret=7e1c742f 0046:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1c742f 0046:Call KERNEL32.CloseHandle(00000070) ret=7e1c7443 0046:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1c7443 0046:Call ntdll.RtlFreeHeap(00110000,00000000,00148b18) ret=7e1c7479 0046:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e1c7479 0046:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bb,0014b1f8,00000000,00000000) ret=7e1c4643 0046:Call KERNEL32.IsBadReadPtr(0014b1f8,0000002c) ret=7e0bdbc9 0046:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 0046:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bb,007ceaa4,00000000,00000000) ret=7e0bdf33 0046:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 0046:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 0046:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0046:Ret winmm.waveOutOpen() retval=00000000 ret=7e0c0313 0046:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0046:Call ntdll.RtlAllocateHeap(00110000,00000000,000039ac) ret=7e73520d 0046:Ret ntdll.RtlAllocateHeap() retval=0014d3a0 ret=7e73520d 0046:Call msacm32.drv.wodMessage(0000ffff,00000007,0014b1f8,0014d3a0,00000020) ret=7e728e1f 0046:Call winmm.waveOutPrepareHeader(00008001,0014d3a0,00000020) ret=7e0c09d8 0046:Call winealsa.drv.wodMessage(00000000,00000007,7e72ab2b,0014d3a0,00000020) ret=7e728e1f 0046:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 0046:Ret winmm.waveOutPrepareHeader() retval=00000000 ret=7e0c09d8 0046:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0046:Call msacm32.drv.wodMessage(0000ffff,00000007,0014b1f8,0014d3c0,00000020) ret=7e728e1f 0046:Call winmm.waveOutPrepareHeader(00008001,0014d3c0,00000020) ret=7e0c09d8 0046:Call winealsa.drv.wodMessage(00000000,00000007,7e72ab2b,0014d3c0,00000020) ret=7e728e1f 0046:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 0046:Ret winmm.waveOutPrepareHeader() retval=00000000 ret=7e0c09d8 0046:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0046:Call KERNEL32.WaitForSingleObject(00000038,00000000) ret=7e735343 0046:Ret KERNEL32.WaitForSingleObject() retval=00000102 ret=7e735343 0046:Call msacm32.drv.wodMessage(0000ffff,00000009,0014b1f8,0014d3a0,00000020) ret=7e728e1f 0046:Call winmm.waveOutWrite(00008001,0014d3a0,00000020) ret=7e0c09b5 0046:Call winealsa.drv.wodMessage(00000000,00000009,7e72ab2b,0014d3a0,00000020) ret=7e728e1f 0046:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0046:Ret winmm.waveOutWrite() retval=00000000 ret=7e0c09b5 0046:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0046:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 0046:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 0046:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 0046:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 0046:Call KERNEL32.WaitForSingleObject(00000068,ffffffff) ret=7e73429b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00003853 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00003853 ret=01004881 0009:Call gdi32.BitBlt(000022dc,00000000,00000039,00000047,00000027,000022c4,00000000,00000039,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000022dc,fffffffc,00000000,0000004b,00000039,000022c4,fffffffc,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000022c4,00000000,00000000,00000047,00000027,00000314,0000040e,00000231,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000022c4,00000000,00000027,0000004b,00000039,00000314,0000040e,00000258,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,0000040e,00000231,00000047,00000060,000022d0,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000459,00000291,00000047,00000027,000022dc,00000000,00000039,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000459,00000258,00000047,00000039,000022dc,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=0000385b ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=0000385b ret=01004881 0009:Call gdi32.BitBlt(000022dc,00000000,00000038,00000047,00000028,000022c4,00000000,00000038,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000022dc,fffffffc,00000000,0000004b,00000038,000022c4,fffffffc,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000022c4,00000000,00000000,00000047,00000028,00000314,000003c3,00000209,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000022c4,00000000,00000028,0000004b,00000038,00000314,000003c3,00000231,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000003c3,00000209,00000047,00000060,000022d0,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,0000040e,00000269,00000047,00000028,000022dc,00000000,00000038,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000040e,00000231,00000047,00000038,000022dc,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00003863 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00003863 ret=01004881 0009:Call gdi32.BitBlt(000022dc,00000000,00000038,00000047,00000028,000022c4,00000000,00000038,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000022dc,fffffffc,00000000,0000004b,00000038,000022c4,fffffffc,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000022c4,00000000,00000000,00000047,00000028,00000314,00000378,000001e1,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000022c4,00000000,00000028,0000004b,00000038,00000314,00000378,00000209,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000378,000001e1,00000047,00000060,000022d0,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000003c3,00000241,00000047,00000028,000022dc,00000000,00000038,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,000003c3,00000209,00000047,00000038,000022dc,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=0000386b ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=0000386b ret=01004881 0009:Call gdi32.BitBlt(000022dc,00000000,00000038,00000047,00000028,000022c4,00000000,00000038,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000022dc,fffffffc,00000000,0000004b,00000038,000022c4,fffffffc,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000022c4,00000000,00000000,00000047,00000028,00000314,0000032d,000001b9,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000022c4,00000000,00000028,0000004b,00000038,00000314,0000032d,000001e1,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,0000032d,000001b9,00000047,00000060,000022d0,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000378,00000219,00000047,00000028,000022dc,00000000,00000038,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000378,000001e1,00000047,00000038,000022dc,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00003873 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00003873 ret=01004881 0009:Call gdi32.BitBlt(000022dc,00000000,00000038,00000047,00000028,000022c4,00000000,00000038,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000022dc,fffffffc,00000000,0000004b,00000038,000022c4,fffffffc,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000022c4,00000000,00000000,00000047,00000028,00000314,000002e2,00000191,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000022c4,00000000,00000028,0000004b,00000038,00000314,000002e2,000001b9,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000002e2,00000191,00000047,00000060,000022d0,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,0000032d,000001f1,00000047,00000028,000022dc,00000000,00000038,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000032d,000001b9,00000047,00000038,000022dc,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=0000387b ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=0000387b ret=01004881 0009:Call gdi32.BitBlt(000022dc,00000000,00000038,00000047,00000028,000022c4,00000000,00000038,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000022dc,fffffffb,00000000,0000004c,00000038,000022c4,fffffffb,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000022c4,00000000,00000000,00000047,00000028,00000314,00000296,00000169,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000022c4,00000000,00000028,0000004c,00000038,00000314,00000296,00000191,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000296,00000169,00000047,00000060,000022d0,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000002e2,000001c9,00000047,00000028,000022dc,00000000,00000038,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,000002e2,00000191,00000047,00000038,000022dc,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00003883 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00003883 ret=01004881 0009:Call gdi32.BitBlt(000022dc,00000000,00000038,00000047,00000028,000022c4,00000000,00000038,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000022dc,fffffffc,00000000,0000004b,00000038,000022c4,fffffffc,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000022c4,00000000,00000000,00000047,00000028,00000314,0000024b,00000141,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000022c4,00000000,00000028,0000004b,00000038,00000314,0000024b,00000169,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,0000024b,00000141,00000047,00000060,000022d0,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000296,000001a1,00000047,00000028,000022dc,00000000,00000038,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000296,00000169,00000047,00000038,000022dc,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=0000388b ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=0000388b ret=01004881 0009:Call gdi32.BitBlt(000022dc,00000000,00000038,00000047,00000028,000022c4,00000000,00000038,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000022dc,fffffffc,00000000,0000004b,00000038,000022c4,fffffffc,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000022c4,00000000,00000000,00000047,00000028,00000314,00000200,00000119,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000022c4,00000000,00000028,0000004b,00000038,00000314,00000200,00000141,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000200,00000119,00000047,00000060,000022d0,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,0000024b,00000179,00000047,00000028,000022dc,00000000,00000038,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000024b,00000141,00000047,00000038,000022dc,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00003893 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00003893 ret=01004881 0009:Call gdi32.BitBlt(000022dc,00000000,00000038,00000047,00000028,000022c4,00000000,00000038,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000022dc,fffffffc,00000000,0000004b,00000038,000022c4,fffffffc,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000022c4,00000000,00000000,00000047,00000028,00000314,000001b5,000000f1,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000022c4,00000000,00000028,0000004b,00000038,00000314,000001b5,00000119,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000001b5,000000f1,00000047,00000060,000022d0,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000200,00000151,00000047,00000028,000022dc,00000000,00000038,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000200,00000119,00000047,00000038,000022dc,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=0000389b ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=0000389b ret=01004881 0009:Call gdi32.BitBlt(000022dc,00000000,00000038,00000047,00000028,000022c4,00000000,00000038,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000022dc,fffffffc,00000000,0000004b,00000038,000022c4,fffffffc,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000022c4,00000000,00000000,00000047,00000028,00000314,0000016a,000000c9,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000022c4,00000000,00000028,0000004b,00000038,00000314,0000016a,000000f1,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,0000016a,000000c9,00000047,00000060,000022d0,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000001b5,00000129,00000047,00000028,000022dc,00000000,00000038,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,000001b5,000000f1,00000047,00000038,000022dc,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000038a3 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000038a3 ret=01004881 0009:Call gdi32.BitBlt(000022dc,00000000,00000038,00000047,00000028,000022c4,00000000,00000038,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000022dc,fffffffb,00000000,0000004c,00000038,000022c4,fffffffb,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000022c4,00000000,00000000,00000047,00000028,00000314,0000011e,000000a1,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000022c4,00000000,00000028,0000004c,00000038,00000314,0000011e,000000c9,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,0000011e,000000a1,00000047,00000060,000022d0,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,0000016a,00000101,00000047,00000028,000022dc,00000000,00000038,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000016a,000000c9,00000047,00000038,000022dc,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000038ab ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000038ab ret=01004881 0009:Call gdi32.BitBlt(000022dc,00000000,00000038,00000047,00000028,000022c4,00000000,00000038,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000022dc,fffffffc,00000000,0000004b,00000038,000022c4,fffffffc,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000022c4,00000000,00000000,00000047,00000028,00000314,000000d3,00000079,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000022c4,00000000,00000028,0000004b,00000038,00000314,000000d3,000000a1,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000000d3,00000079,00000047,00000060,000022d0,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,0000011e,000000d9,00000047,00000028,000022dc,00000000,00000038,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000011e,000000a1,00000047,00000038,000022dc,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000038b4 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000038b4 ret=01004881 0009:Call gdi32.BitBlt(000022dc,00000000,0000004c,00000047,00000014,000022c4,00000000,0000004c,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000022dc,00000021,00000000,00000026,0000004c,000022c4,00000021,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000022c4,00000026,00000014,00000022,0000004d,000022c4,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(000022c4,00000000,00000000,00000047,00000014,00000314,000000ad,00000065,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000022c4,00000000,00000014,00000026,0000004c,00000314,000000ad,00000079,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000000ad,00000065,00000047,00000060,000022d0,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000000d3,000000c5,00000047,00000014,000022dc,00000000,0000004c,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,000000f4,00000079,00000026,0000004c,000022dc,00000021,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call gdi32.SelectObject(000022c4,0000006c) ret=01005316 0009:Ret gdi32.SelectObject() retval=000022e8 ret=01005316 0009:Call gdi32.SelectObject(000022d0,0000006c) ret=01005324 0009:Ret gdi32.SelectObject() retval=000022ec ret=01005324 0009:Call gdi32.SelectObject(000022dc,0000006c) ret=01005332 0009:Ret gdi32.SelectObject() retval=000022f0 ret=01005332 0009:Call gdi32.DeleteObject(000022e8) ret=01005340 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005340 0009:Call gdi32.DeleteObject(000022ec) ret=01005348 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005348 0009:Call gdi32.DeleteObject(000022f0) ret=01005350 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005350 0009:Call gdi32.DeleteDC(000022c4) ret=0100535e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100535e 0009:Call gdi32.DeleteDC(000022d0) ret=01005366 0009:Ret gdi32.DeleteDC() retval=00000001 ret=01005366 0009:Call gdi32.DeleteDC(000022dc) ret=0100536e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100536e 0009:Call user32.ReleaseDC(00010030,00000314) ret=0100537c 0009:Ret user32.ReleaseDC() retval=00000001 ret=0100537c 0009:Call user32.InvalidateRect(00010030,0033f618,00000000) ret=0100538a 0009:Ret user32.InvalidateRect() retval=00000001 ret=0100538a 0009:Call KERNEL32.GetModuleHandleW(00000000) ret=01006a97 0009:Ret KERNEL32.GetModuleHandleW() retval=01000000 ret=01006a97 0009:Call winmm.PlaySoundW(0000007c,01000000,00040007) ret=01006aa0 0009:Call ntdll.RtlAllocateHeap(00110000,00000008,0000001c) ret=7e7356bc 0009:Ret ntdll.RtlAllocateHeap() retval=0014bef8 ret=7e7356bc 0009:Call KERNEL32.ResetEvent(00000040) ret=7e735513 0009:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e735513 0009:Call KERNEL32.SetEvent(00000038) ret=7e735520 0009:Ret KERNEL32.SetEvent() retval=00000001 ret=7e735520 0009:Call msacm32.drv.wodMessage(0000ffff,0000000c,0014b1f8,00000000,00000000) ret=7e728e1f 0009:Call winmm.waveOutReset(00008001) ret=7e0c0180 0009:Call winealsa.drv.wodMessage(00000000,0000000c,7e72ab2b,00000000,00000000) ret=7e728e1f 0009:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1b2580 0009:Ret KERNEL32.CreateEventW() retval=00000070 ret=7e1b2580 0009:Call KERNEL32.WaitForSingleObject(00000070,ffffffff) ret=7e1b2635 0047:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bd,0014b1f8,0014d3a0,00000000) ret=7e1c4643 0047:Call KERNEL32.IsBadReadPtr(0014b1f8,0000002c) ret=7e0bdbc9 0047:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 0047:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bd,007ceaa4,0014d3a0,00000000) ret=7e0bdf33 0047:Call KERNEL32.SetEvent(00000068) ret=7e7341f6 0047:Ret KERNEL32.SetEvent() retval=00000001 ret=7e7341f6 0047:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 0047:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 0047:Call KERNEL32.SetEvent(00000070) ret=7e1c4f3d 0047:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c4f3d 0046:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e73429b 0046:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 0046:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 0046:Call msacm32.drv.wodMessage(0000ffff,0000000c,0014b1f8,00000000,00000000) ret=7e728e1f 0046:Call winmm.waveOutReset(00008001) ret=7e0c0180 0046:Call winealsa.drv.wodMessage(00000000,0000000c,7e72ab2b,00000000,00000000) ret=7e728e1f 0046:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1b2580 0046:Ret KERNEL32.CreateEventW() retval=000000d0 ret=7e1b2580 0046:Call KERNEL32.WaitForSingleObject(000000d0,ffffffff) ret=7e1b2635 0047:Call KERNEL32.SetEvent(000000d0) ret=7e1c4f3d 0047:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c4f3d 0046:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1b2635 0046:Call KERNEL32.CloseHandle(000000d0) ret=7e1b2640 0046:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1b2640 0046:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0046:Ret winmm.waveOutReset() retval=00000000 ret=7e0c0180 0046:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0046:Call msacm32.drv.wodMessage(0000ffff,00000008,0014b1f8,0014d3a0,00000020) ret=7e728e1f 0046:Call winmm.waveOutUnprepareHeader(00008001,0014d3a0,00000020) ret=7e0c00b6 0046:Call winealsa.drv.wodMessage(00000000,00000008,7e72ab2b,0014d3a0,00000020) ret=7e728e1f 0046:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 0046:Ret winmm.waveOutUnprepareHeader() retval=00000000 ret=7e0c00b6 0046:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0046:Call msacm32.drv.wodMessage(0000ffff,00000008,0014b1f8,0014d3c0,00000020) ret=7e728e1f 0046:Call winmm.waveOutUnprepareHeader(00008001,0014d3c0,00000020) ret=7e0c00b6 0046:Call winealsa.drv.wodMessage(00000000,00000008,7e72ab2b,0014d3c0,00000020) ret=7e728e1f 0046:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 0046:Ret winmm.waveOutUnprepareHeader() retval=00000000 ret=7e0c00b6 0046:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0046:Call KERNEL32.CloseHandle(00000068) ret=7e7349fd 0046:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e7349fd 0046:Call ntdll.RtlFreeHeap(00110000,00000000,0014d3a0) ret=7e734a23 0046:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e734a23 0046:Call ntdll.RtlFreeHeap(00110000,00000000,00148cb8) ret=7e734a49 0046:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e734a49 0046:Call msacm32.drv.wodMessage(0000ffff,00000006,0014b1f8,00000000,00000000) ret=7e728e1f 0046:Call winmm.waveOutClose(00008001) ret=7e0c01a5 0046:Call winealsa.drv.wodMessage(00000000,00000006,7e72ab2b,00000000,00000000) ret=7e728e1f 0046:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1b2580 0046:Ret KERNEL32.CreateEventW() retval=00000068 ret=7e1b2580 0046:Call KERNEL32.WaitForSingleObject(00000068,ffffffff) ret=7e1b2635 0047:Call KERNEL32.SetEvent(00000068) ret=7e1c4ea1 0047:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c4ea1 0047:Call KERNEL32.ExitThread(00000000) ret=7e1c4eb0 0047:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) 0047:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0047:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) 0047:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0047:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) 0047:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0047:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) 0047:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) retval=1 0047:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) 0047:Call KERNEL32.TlsGetValue(00000000) ret=7e3f4071 0047:Ret KERNEL32.TlsGetValue() retval=00000000 ret=7e3f4071 0047:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0047:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) 0047:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0046:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1b2635 0046:Call KERNEL32.CloseHandle(00000068) ret=7e1b2640 0046:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1b2640 0046:Call ntdll.RtlFreeHeap(00110000,00000000,0014c7d0) ret=7e1b24dc 0046:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e1b24dc 0046:Call ntdll.RtlDeleteCriticalSection(0013cefc) ret=7e1b24fb 0046:Ret ntdll.RtlDeleteCriticalSection() retval=00000000 ret=7e1b24fb 0046:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bc,0014b1f8,00000000,00000000) ret=7e1c4643 0046:Call KERNEL32.IsBadReadPtr(0014b1f8,0000002c) ret=7e0bdbc9 0046:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 0046:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bc,007ceaa4,00000000,00000000) ret=7e0bdf33 0046:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 0046:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 0046:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0046:Call ntdll.RtlFreeHeap(00110000,00000000,0014b230) ret=7e72ae0b 0046:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e72ae0b 0046:Ret winmm.waveOutClose() retval=00000000 ret=7e0c01a5 0046:Call ntdll.RtlFreeHeap(00110000,00000000,0014b1f8) ret=7e0c01f7 0046:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e0c01f7 0046:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0046:Call ntdll.RtlFreeHeap(00110000,00000000,0014b1d0) ret=7e72ae0b 0046:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e72ae0b 0009:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1b2635 0009:Call KERNEL32.CloseHandle(00000070) ret=7e1b2640 0009:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1b2640 0009:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0009:Ret winmm.waveOutReset() retval=00000000 ret=7e0c0180 0009:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0009:Call KERNEL32.WaitForSingleObject(00000040,ffffffff) ret=7e73555a 0046:Call ntdll.RtlFreeHeap(00110000,00000000,00148c28) ret=7e731f79 0046:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e731f79 0046:Call KERNEL32.SetEvent(00000040) ret=7e7343a0 0046:Ret KERNEL32.SetEvent() retval=00000001 ret=7e7343a0 0046:Call KERNEL32.CloseHandle(00000064) ret=7e734340 0046:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e734340 0046:Call ntdll.RtlFreeHeap(00110000,00000000,0014b290) ret=7e734360 0046:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e734360 0046:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) 0046:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0046:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) 0046:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0046:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) 0046:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0046:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) 0046:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) retval=1 0046:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) 0046:Call KERNEL32.TlsGetValue(00000000) ret=7e3f4071 0046:Ret KERNEL32.TlsGetValue() retval=00000000 ret=7e3f4071 0046:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0046:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) 0046:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0009:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e73555a 0009:Call KERNEL32.ResetEvent(00000038) ret=7e735572 0009:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e735572 0009:Call KERNEL32.CreateThread(00000000,00000000,7e7348a0,0014bef8,00000000,0033f598) ret=7e73560c 000b:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) 000b:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 000b:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) 000b:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 000b:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) 000b:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) retval=1 000b:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) 000b:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 000b:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) 000b:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 000b:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) 000b:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 000b:Starting thread proc 0x7e7348a0 (arg=0x14bef8) 000b:Call KERNEL32.FindResourceW(01000000,0000007c,7e741bde L"WAVE") ret=7e734ca3 000b:Ret KERNEL32.FindResourceW() retval=01014c40 ret=7e734ca3 000b:Call KERNEL32.LoadResource(01000000,01014c40) ret=7e734cb9 000b:Ret KERNEL32.LoadResource() retval=0104d668 ret=7e734cb9 000b:Call KERNEL32.LockResource(0104d668) ret=7e734cce 000b:Ret KERNEL32.LockResource() retval=0104d668 ret=7e734cce 000b:Call KERNEL32.FreeResource(0104d668) ret=7e734ce9 000b:Ret KERNEL32.FreeResource() retval=00000000 ret=7e734ce9 000b:Call ntdll.RtlAllocateHeap(00110000,00000008,0000005c) ret=7e733960 000b:Ret ntdll.RtlAllocateHeap() retval=00148c28 ret=7e733960 000b:Call KERNEL32.GetFileSize(ffffffff,00000000) ret=7e733ab9 000b:Ret KERNEL32.GetFileSize() retval=ffffffff ret=7e733ab9 000b:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7e733cf0 000b:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e733cf0 000b:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7e734e1c 000b:Ret ntdll.RtlAllocateHeap() retval=00148cb8 ret=7e734e1c 000b:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e734f1f 000b:Ret KERNEL32.CreateEventW() retval=00000068 ret=7e734f1f 000b:Call ntdll.RtlAllocateHeap(00110000,00000008,0000001c) ret=7e72abbe 000b:Ret ntdll.RtlAllocateHeap() retval=0014b1d0 ret=7e72abbe 000b:Call msacm32.drv.wodMessage(0000ffff,00000005,008ce918,008ce970,00030000) ret=7e728e1f 000b:Call ntdll.RtlAllocateHeap(00110000,00000000,0000002c) ret=7e0bfd8c 000b:Ret ntdll.RtlAllocateHeap() retval=0014b1f8 ret=7e0bfd8c 000b:Call winmm.waveOutGetNumDevs() ret=7e0bfdb5 000b:Ret winmm.waveOutGetNumDevs() retval=00000002 ret=7e0bfdb5 000b:Call winmm.waveOutOpen(0014b200,00000000,00148cb8,7e0bde60,0014b1f8,00030008) ret=7e0c0313 000b:Call ntdll.RtlAllocateHeap(00110000,00000008,0000001c) ret=7e72abbe 000b:Ret ntdll.RtlAllocateHeap() retval=0014b230 ret=7e72abbe 000b:Call winealsa.drv.wodMessage(00000000,00000005,008ce5b8,008ce610,00030008) ret=7e728e1f 000b:Call ntdll.RtlAllocateHeap(00110000,00000008,00000068) ret=7e1c6c82 000b:Ret ntdll.RtlAllocateHeap() retval=0014b258 ret=7e1c6c82 000b:Call ntdll.RtlAllocateHeap(00110000,00000008,00000300) ret=7e1b2459 000b:Ret ntdll.RtlAllocateHeap() retval=0014c7d0 ret=7e1b2459 000b:Call KERNEL32.InitializeCriticalSection(0013cefc) ret=7e1b2469 000b:Ret KERNEL32.InitializeCriticalSection() retval=00000001 ret=7e1b2469 000b:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1c73ab 0009:Ret KERNEL32.CreateThread() retval=00000064 ret=7e73560c 0009:Call KERNEL32.SetThreadPriority(00000064,0000000f) ret=7e73562d 0009:Ret KERNEL32.SetThreadPriority() retval=00000001 ret=7e73562d 0009:Ret winmm.PlaySoundW() retval=00000001 ret=01006aa0 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,0000000c) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c58e0 ret=0100a7d2 0009:Call user32.GetClientRect(00010030,0033f608) ret=01005145 0009:Ret user32.GetClientRect() retval=00000001 ret=01005145 0009:Call user32.GetDC(00010030) ret=010051ad 0009:Ret user32.GetDC() retval=00000314 ret=010051ad 0009:Call gdi32.CreateCompatibleDC(00000314) ret=010051bc 0009:Ret gdi32.CreateCompatibleDC() retval=00002350 ret=010051bc 0009:Call gdi32.CreateCompatibleDC(00000314) ret=010051ca 0009:Ret gdi32.CreateCompatibleDC() retval=0000235c ret=010051ca 0009:Call gdi32.CreateCompatibleDC(00000314) ret=010051d8 0009:Ret gdi32.CreateCompatibleDC() retval=00002368 ret=010051d8 0009:Call gdi32.CreateCompatibleBitmap(00000314,00000047,00000060) ret=010051f8 0009:Ret gdi32.CreateCompatibleBitmap() retval=00002374 ret=010051f8 0009:Call gdi32.CreateCompatibleBitmap(00000314,00000047,00000060) ret=01005212 0009:Ret gdi32.CreateCompatibleBitmap() retval=00002378 ret=01005212 0009:Call gdi32.CreateCompatibleBitmap(00000314,00000047,00000060) ret=0100522c 0009:Ret gdi32.CreateCompatibleBitmap() retval=0000237c ret=0100522c 0009:Call gdi32.SelectObject(00002350,00002374) ret=01005246 0009:Ret gdi32.SelectObject() retval=0000006c ret=01005246 0009:Call gdi32.SelectObject(0000235c,00002378) ret=0100525a 0009:Ret gdi32.SelectObject() retval=0000006c ret=0100525a 0009:Call gdi32.SelectObject(00002368,0000237c) ret=0100526e 0009:Ret gdi32.SelectObject() retval=0000006c ret=0100526e 0009:Call user32.LoadBitmapW(01000000,0033f5a0 L"CARD44") ret=010028ff 000b:Ret KERNEL32.CreateEventW() retval=00000070 ret=7e1c73ab 000b:Call KERNEL32.CreateThread(00000000,00000000,7e1c5570,00000000,00000000,0013cedc) ret=7e1c73ef 000d:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) 000d:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 000d:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) 000d:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 000d:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) 000d:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) retval=1 000d:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) 000d:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 000d:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) 000d:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 000d:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) 000d:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 000d:Starting thread proc 0x7e1c5570 (arg=(nil)) 000d:Call KERNEL32.SetEvent(00000070) ret=7e1c55aa 000d:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c55aa 000b:Ret KERNEL32.CreateThread() retval=000000d0 ret=7e1c73ef 000b:Call KERNEL32.SetThreadPriority(000000d0,0000000f) ret=7e1c7413 000b:Ret KERNEL32.SetThreadPriority() retval=00000001 ret=7e1c7413 000b:Call KERNEL32.WaitForSingleObject(00000070,ffffffff) ret=7e1c742f 000b:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1c742f 000b:Call KERNEL32.CloseHandle(00000070) ret=7e1c7443 000b:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1c7443 000b:Call ntdll.RtlFreeHeap(00110000,00000000,0014b258) ret=7e1c7479 000b:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e1c7479 000b:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bb,0014b1f8,00000000,00000000) ret=7e1c4643 000b:Call KERNEL32.IsBadReadPtr(0014b1f8,0000002c) ret=7e0bdbc9 000b:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 000b:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bb,008ceaa4,00000000,00000000) ret=7e0bdf33 000b:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 000b:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 000b:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 000b:Ret winmm.waveOutOpen() retval=00000000 ret=7e0c0313 000b:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 000b:Call ntdll.RtlAllocateHeap(00110000,00000000,000039ac) ret=7e73520d 000b:Ret ntdll.RtlAllocateHeap() retval=0014d3a0 ret=7e73520d 000b:Call msacm32.drv.wodMessage(0000ffff,00000007,0014b1f8,0014d3a0,00000020) ret=7e728e1f 000b:Call winmm.waveOutPrepareHeader(00008001,0014d3a0,00000020) ret=7e0c09d8 000b:Call winealsa.drv.wodMessage(00000000,00000007,7e72ab2b,0014d3a0,00000020) ret=7e728e1f 000b:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 000b:Ret winmm.waveOutPrepareHeader() retval=00000000 ret=7e0c09d8 000b:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 000b:Call msacm32.drv.wodMessage(0000ffff,00000007,0014b1f8,0014d3c0,00000020) ret=7e728e1f 000b:Call winmm.waveOutPrepareHeader(00008001,0014d3c0,00000020) ret=7e0c09d8 000b:Call winealsa.drv.wodMessage(00000000,00000007,7e72ab2b,0014d3c0,00000020) ret=7e728e1f 000b:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 000b:Ret winmm.waveOutPrepareHeader() retval=00000000 ret=7e0c09d8 000b:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 000b:Call KERNEL32.WaitForSingleObject(00000038,00000000) ret=7e735343 000b:Ret KERNEL32.WaitForSingleObject() retval=00000102 ret=7e735343 000b:Call msacm32.drv.wodMessage(0000ffff,00000009,0014b1f8,0014d3a0,00000020) ret=7e728e1f 000b:Call winmm.waveOutWrite(00008001,0014d3a0,00000020) ret=7e0c09b5 000b:Call winealsa.drv.wodMessage(00000000,00000009,7e72ab2b,0014d3a0,00000020) ret=7e728e1f 000b:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 000b:Ret winmm.waveOutWrite() retval=00000000 ret=7e0c09b5 000b:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 000b:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 000b:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 000b:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 000b:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 000b:Call KERNEL32.WaitForSingleObject(00000068,ffffffff) ret=7e73429b 0009:Ret user32.LoadBitmapW() retval=0000238c ret=010028ff 0009:Call gdi32.CreateCompatibleDC(0000235c) ret=01002909 0009:Ret gdi32.CreateCompatibleDC() retval=000023a0 ret=01002909 0009:Call gdi32.SelectObject(000023a0,0000238c) ret=01002917 0009:Ret gdi32.SelectObject() retval=0000006c ret=01002917 0009:Call gdi32.BitBlt(0000235c,00000000,00000000,00000047,00000060,000023a0,00000000,00000000,00cc0020) ret=01002938 0009:Ret gdi32.BitBlt() retval=00000001 ret=01002938 0009:Call gdi32.SelectObject(000023a0,0000006c) ret=0100293e 0009:Ret gdi32.SelectObject() retval=0000238c ret=0100293e 0009:Call gdi32.DeleteObject(0000238c) ret=01002947 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01002947 0009:Call gdi32.DeleteDC(000023a0) ret=0100294e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100294e 0009:Call gdi32.SetPixel(0000235c,00000000,00000000,00008000) ret=01002969 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002969 0009:Call gdi32.SetPixel(0000235c,00000001,00000000,00008000) ret=01002976 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002976 0009:Call gdi32.SetPixel(0000235c,00000000,00000001,00008000) ret=01002982 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002982 0009:Call gdi32.SetPixel(0000235c,00000046,00000000,00008000) ret=0100298f 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100298f 0009:Call gdi32.SetPixel(0000235c,00000045,00000000,00008000) ret=0100299c 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100299c 0009:Call gdi32.SetPixel(0000235c,00000046,00000001,00008000) ret=010029ab 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ab 0009:Call gdi32.SetPixel(0000235c,00000000,0000005f,00008000) ret=010029bf 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029bf 0009:Call gdi32.SetPixel(0000235c,00000001,0000005f,00008000) ret=010029d0 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029d0 0009:Call gdi32.SetPixel(0000235c,00000000,0000005e,00008000) ret=010029de 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029de 0009:Call gdi32.SetPixel(0000235c,00000046,0000005f,00008000) ret=010029ef 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ef 0009:Call gdi32.SetPixel(0000235c,00000045,0000005f,00008000) ret=01002a00 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a00 0009:Call gdi32.SetPixel(0000235c,00000046,0000005e,00008000) ret=01002a11 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a11 0009:Call user32.LoadBitmapW(01000000,010012c8 L"CARDBACK") ret=010028ff 0009:Ret user32.LoadBitmapW() retval=000023b8 ret=010028ff 0009:Call gdi32.CreateCompatibleDC(00002350) ret=01002909 0009:Ret gdi32.CreateCompatibleDC() retval=000023cc ret=01002909 0009:Call gdi32.SelectObject(000023cc,000023b8) ret=01002917 0009:Ret gdi32.SelectObject() retval=0000006c ret=01002917 0009:Call gdi32.BitBlt(00002350,00000000,00000000,00000047,00000060,000023cc,00000000,00000000,00cc0020) ret=01002938 0009:Ret gdi32.BitBlt() retval=00000001 ret=01002938 0009:Call gdi32.SelectObject(000023cc,0000006c) ret=0100293e 0009:Ret gdi32.SelectObject() retval=000023b8 ret=0100293e 0009:Call gdi32.DeleteObject(000023b8) ret=01002947 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01002947 0009:Call gdi32.DeleteDC(000023cc) ret=0100294e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100294e 0009:Call gdi32.SetPixel(00002350,00000000,00000000,00008000) ret=01002969 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002969 0009:Call gdi32.SetPixel(00002350,00000001,00000000,00008000) ret=01002976 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002976 0009:Call gdi32.SetPixel(00002350,00000000,00000001,00008000) ret=01002982 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002982 0009:Call gdi32.SetPixel(00002350,00000046,00000000,00008000) ret=0100298f 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100298f 0009:Call gdi32.SetPixel(00002350,00000045,00000000,00008000) ret=0100299c 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100299c 0009:Call gdi32.SetPixel(00002350,00000046,00000001,00008000) ret=010029ab 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ab 0009:Call gdi32.SetPixel(00002350,00000000,0000005f,00008000) ret=010029bf 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029bf 0009:Call gdi32.SetPixel(00002350,00000001,0000005f,00008000) ret=010029d0 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029d0 0009:Call gdi32.SetPixel(00002350,00000000,0000005e,00008000) ret=010029de 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029de 0009:Call gdi32.SetPixel(00002350,00000046,0000005f,00008000) ret=010029ef 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ef 0009:Call gdi32.SetPixel(00002350,00000045,0000005f,00008000) ret=01002a00 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a00 0009:Call gdi32.SetPixel(00002350,00000046,0000005e,00008000) ret=01002a11 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a11 0009:Call winmm.timeGetTime() ret=010047d1 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000038ea ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000038ea ret=010047d1 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000038ea ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000038ea ret=01004881 0009:Call gdi32.BitBlt(00002350,00000000,00000000,00000048,00000061,00002350,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00000314,00000459,00000258,00000047,00000060,0000235c,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000038ef ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000038ef ret=01004881 0009:Call gdi32.BitBlt(00002368,00000000,00000048,00000047,00000018,00002350,00000000,00000048,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00002368,0000001f,00000000,00000028,00000048,00002350,0000001f,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00002350,00000028,00000018,00000020,00000049,00002350,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00002350,00000000,00000000,00000047,00000018,00000314,00000431,00000240,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00002350,00000000,00000018,00000028,00000048,00000314,00000431,00000258,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000431,00000240,00000047,00000060,0000235c,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000459,000002a0,00000047,00000018,00002368,00000000,00000048,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000478,00000258,00000028,00000048,00002368,0000001f,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000038f7 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000038f7 ret=01004881 0009:Call gdi32.BitBlt(00002368,00000000,00000038,00000047,00000028,00002350,00000000,00000038,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00002368,00000005,00000000,00000042,00000038,00002350,00000005,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00002350,00000042,00000028,00000006,00000039,00002350,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00002350,00000000,00000000,00000047,00000028,00000314,000003ef,00000218,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00002350,00000000,00000028,00000042,00000038,00000314,000003ef,00000240,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000003ef,00000218,00000047,00000060,0000235c,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000431,00000278,00000047,00000028,00002368,00000000,00000038,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000436,00000240,00000042,00000038,00002368,00000005,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000038ff ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000038ff ret=01004881 0009:Call gdi32.BitBlt(00002368,00000000,00000038,00000047,00000028,00002350,00000000,00000038,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00002368,00000006,00000000,00000041,00000038,00002350,00000006,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00002350,00000041,00000028,00000007,00000039,00002350,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00002350,00000000,00000000,00000047,00000028,00000314,000003ae,000001f0,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00002350,00000000,00000028,00000041,00000038,00000314,000003ae,00000218,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000003ae,000001f0,00000047,00000060,0000235c,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000003ef,00000250,00000047,00000028,00002368,00000000,00000038,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,000003f5,00000218,00000041,00000038,00002368,00000006,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00003907 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00003907 ret=01004881 0009:Call gdi32.BitBlt(00002368,00000000,00000038,00000047,00000028,00002350,00000000,00000038,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00002368,00000005,00000000,00000042,00000038,00002350,00000005,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00002350,00000042,00000028,00000006,00000039,00002350,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00002350,00000000,00000000,00000047,00000028,00000314,0000036c,000001c8,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00002350,00000000,00000028,00000042,00000038,00000314,0000036c,000001f0,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,0000036c,000001c8,00000047,00000060,0000235c,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000003ae,00000228,00000047,00000028,00002368,00000000,00000038,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,000003b3,000001f0,00000042,00000038,00002368,00000005,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=0000390f ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=0000390f ret=01004881 0009:Call gdi32.BitBlt(00002368,00000000,00000038,00000047,00000028,00002350,00000000,00000038,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00002368,00000006,00000000,00000041,00000038,00002350,00000006,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00002350,00000041,00000028,00000007,00000039,00002350,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00002350,00000000,00000000,00000047,00000028,00000314,0000032b,000001a0,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00002350,00000000,00000028,00000041,00000038,00000314,0000032b,000001c8,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,0000032b,000001a0,00000047,00000060,0000235c,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,0000036c,00000200,00000047,00000028,00002368,00000000,00000038,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000372,000001c8,00000041,00000038,00002368,00000006,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00003917 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00003917 ret=01004881 0009:Call gdi32.BitBlt(00002368,00000000,00000038,00000047,00000028,00002350,00000000,00000038,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00002368,00000005,00000000,00000042,00000038,00002350,00000005,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00002350,00000042,00000028,00000006,00000039,00002350,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00002350,00000000,00000000,00000047,00000028,00000314,000002e9,00000178,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00002350,00000000,00000028,00000042,00000038,00000314,000002e9,000001a0,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000002e9,00000178,00000047,00000060,0000235c,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,0000032b,000001d8,00000047,00000028,00002368,00000000,00000038,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000330,000001a0,00000042,00000038,00002368,00000005,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=0000391f ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=0000391f ret=01004881 0009:Call gdi32.BitBlt(00002368,00000000,00000038,00000047,00000028,00002350,00000000,00000038,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00002368,00000006,00000000,00000041,00000038,00002350,00000006,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00002350,00000041,00000028,00000007,00000039,00002350,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00002350,00000000,00000000,00000047,00000028,00000314,000002a8,00000150,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00002350,00000000,00000028,00000041,00000038,00000314,000002a8,00000178,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000002a8,00000150,00000047,00000060,0000235c,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000002e9,000001b0,00000047,00000028,00002368,00000000,00000038,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,000002ef,00000178,00000041,00000038,00002368,00000006,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00003927 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00003927 ret=01004881 0009:Call gdi32.BitBlt(00002368,00000000,00000038,00000047,00000028,00002350,00000000,00000038,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00002368,00000006,00000000,00000041,00000038,00002350,00000006,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00002350,00000041,00000028,00000007,00000039,00002350,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00002350,00000000,00000000,00000047,00000028,00000314,00000267,00000128,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00002350,00000000,00000028,00000041,00000038,00000314,00000267,00000150,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000267,00000128,00000047,00000060,0000235c,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000002a8,00000188,00000047,00000028,00002368,00000000,00000038,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,000002ae,00000150,00000041,00000038,00002368,00000006,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=0000392f ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=0000392f ret=01004881 0009:Call gdi32.BitBlt(00002368,00000000,00000038,00000047,00000028,00002350,00000000,00000038,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00002368,00000005,00000000,00000042,00000038,00002350,00000005,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00002350,00000042,00000028,00000006,00000039,00002350,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00002350,00000000,00000000,00000047,00000028,00000314,00000225,00000100,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00002350,00000000,00000028,00000042,00000038,00000314,00000225,00000128,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000225,00000100,00000047,00000060,0000235c,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000267,00000160,00000047,00000028,00002368,00000000,00000038,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000026c,00000128,00000042,00000038,00002368,00000005,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00003938 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00003938 ret=01004881 0009:Call gdi32.BitBlt(00002368,00000000,00000033,00000047,0000002d,00002350,00000000,00000033,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00002368,fffffffd,00000000,0000004a,00000033,00002350,fffffffd,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00002350,00000000,00000000,00000047,0000002d,00000314,000001db,000000d3,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00002350,00000000,0000002d,0000004a,00000033,00000314,000001db,00000100,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000001db,000000d3,00000047,00000060,0000235c,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000225,00000133,00000047,0000002d,00002368,00000000,00000033,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000225,00000100,00000047,00000033,00002368,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=0000393f ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=0000393f ret=01004881 0009:Call gdi32.BitBlt(00002368,00000000,0000003d,00000047,00000023,00002350,00000000,0000003d,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00002368,0000000e,00000000,00000039,0000003d,00002350,0000000e,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00002350,00000039,00000023,0000000f,0000003e,00002350,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00002350,00000000,00000000,00000047,00000023,00000314,000001a2,000000b0,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00002350,00000000,00000023,00000039,0000003d,00000314,000001a2,000000d3,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000001a2,000000b0,00000047,00000060,0000235c,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000001db,00000110,00000047,00000023,00002368,00000000,0000003d,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,000001e9,000000d3,00000039,0000003d,00002368,0000000e,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00003947 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00003947 ret=01004881 0009:Call gdi32.BitBlt(00002368,00000000,00000038,00000047,00000028,00002350,00000000,00000038,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00002368,00000006,00000000,00000041,00000038,00002350,00000006,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00002350,00000041,00000028,00000007,00000039,00002350,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00002350,00000000,00000000,00000047,00000028,00000314,00000161,00000088,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00002350,00000000,00000028,00000041,00000038,00000314,00000161,000000b0,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000161,00000088,00000047,00000060,0000235c,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000001a2,000000e8,00000047,00000028,00002368,00000000,00000038,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,000001a8,000000b0,00000041,00000038,00002368,00000006,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0019:Ret user32.GetMessageW() retval=00000001 ret=7ec5ec4b 0019:Call user32.DispatchMessageW(0033f93c) ret=7ec5ec28 0019:Call window proc 0x7ec60b80 (hwnd=0x10026,msg=WM_TIMER,wp=00000001,lp=00000000) 0019:Ret window proc 0x7ec60b80 (hwnd=0x10026,msg=WM_TIMER,wp=00000001,lp=00000000) retval=00000000 0019:Ret user32.DispatchMessageW() retval=00000000 ret=7ec5ec28 0019:Call user32.GetMessageW(0033f93c,00000000,00000000,00000000) ret=7ec5ec4b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00003950 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00003950 ret=01004881 0009:Call gdi32.BitBlt(00002368,00000000,0000003d,00000047,00000023,00002350,00000000,0000003d,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00002368,0000000d,00000000,0000003a,0000003d,00002350,0000000d,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00002350,0000003a,00000023,0000000e,0000003e,00002350,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00002350,00000000,00000000,00000047,00000023,00000314,00000127,00000065,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00002350,00000000,00000023,0000003a,0000003d,00000314,00000127,00000088,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000127,00000065,00000047,00000060,0000235c,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000161,000000c5,00000047,00000023,00002368,00000000,0000003d,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000016e,00000088,0000003a,0000003d,00002368,0000000d,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call gdi32.SelectObject(00002350,0000006c) ret=01005316 0009:Ret gdi32.SelectObject() retval=00002374 ret=01005316 0009:Call gdi32.SelectObject(0000235c,0000006c) ret=01005324 0009:Ret gdi32.SelectObject() retval=00002378 ret=01005324 0009:Call gdi32.SelectObject(00002368,0000006c) ret=01005332 0009:Ret gdi32.SelectObject() retval=0000237c ret=01005332 0009:Call gdi32.DeleteObject(00002374) ret=01005340 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005340 0009:Call gdi32.DeleteObject(00002378) ret=01005348 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005348 0009:Call gdi32.DeleteObject(0000237c) ret=01005350 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005350 0009:Call gdi32.DeleteDC(00002350) ret=0100535e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100535e 0009:Call gdi32.DeleteDC(0000235c) ret=01005366 0009:Ret gdi32.DeleteDC() retval=00000001 ret=01005366 0009:Call gdi32.DeleteDC(00002368) ret=0100536e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100536e 0009:Call user32.ReleaseDC(00010030,00000314) ret=0100537c 0009:Ret user32.ReleaseDC() retval=00000001 ret=0100537c 0009:Call user32.InvalidateRect(00010030,0033f618,00000000) ret=0100538a 0009:Ret user32.InvalidateRect() retval=00000001 ret=0100538a 0009:Call KERNEL32.GetModuleHandleW(00000000) ret=01006a97 0009:Ret KERNEL32.GetModuleHandleW() retval=01000000 ret=01006a97 0009:Call winmm.PlaySoundW(0000007c,01000000,00040007) ret=01006aa0 0009:Call ntdll.RtlAllocateHeap(00110000,00000008,0000001c) ret=7e7356bc 0009:Ret ntdll.RtlAllocateHeap() retval=0014b258 ret=7e7356bc 0009:Call KERNEL32.ResetEvent(00000040) ret=7e735513 0009:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e735513 0009:Call KERNEL32.SetEvent(00000038) ret=7e735520 0009:Ret KERNEL32.SetEvent() retval=00000001 ret=7e735520 0009:Call msacm32.drv.wodMessage(0000ffff,0000000c,0014b1f8,00000000,00000000) ret=7e728e1f 0009:Call winmm.waveOutReset(00008001) ret=7e0c0180 0009:Call winealsa.drv.wodMessage(00000000,0000000c,7e72ab2b,00000000,00000000) ret=7e728e1f 0009:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1b2580 0009:Ret KERNEL32.CreateEventW() retval=00000070 ret=7e1b2580 0009:Call KERNEL32.WaitForSingleObject(00000070,ffffffff) ret=7e1b2635 000d:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bd,0014b1f8,0014d3a0,00000000) ret=7e1c4643 000d:Call KERNEL32.IsBadReadPtr(0014b1f8,0000002c) ret=7e0bdbc9 000d:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 000d:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bd,008ceaa4,0014d3a0,00000000) ret=7e0bdf33 000d:Call KERNEL32.SetEvent(00000068) ret=7e7341f6 000d:Ret KERNEL32.SetEvent() retval=00000001 ret=7e7341f6 000d:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 000d:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 000d:Call KERNEL32.SetEvent(00000070) ret=7e1c4f3d 000d:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c4f3d 000b:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e73429b 000b:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 000b:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 000b:Call msacm32.drv.wodMessage(0000ffff,0000000c,0014b1f8,00000000,00000000) ret=7e728e1f 000b:Call winmm.waveOutReset(00008001) ret=7e0c0180 000b:Call winealsa.drv.wodMessage(00000000,0000000c,7e72ab2b,00000000,00000000) ret=7e728e1f 000b:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1b2580 000b:Ret KERNEL32.CreateEventW() retval=000000d4 ret=7e1b2580 000b:Call KERNEL32.WaitForSingleObject(000000d4,ffffffff) ret=7e1b2635 000d:Call KERNEL32.SetEvent(000000d4) ret=7e1c4f3d 000d:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c4f3d 000b:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1b2635 000b:Call KERNEL32.CloseHandle(000000d4) ret=7e1b2640 000b:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1b2640 000b:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 000b:Ret winmm.waveOutReset() retval=00000000 ret=7e0c0180 000b:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 000b:Call msacm32.drv.wodMessage(0000ffff,00000008,0014b1f8,0014d3a0,00000020) ret=7e728e1f 000b:Call winmm.waveOutUnprepareHeader(00008001,0014d3a0,00000020) ret=7e0c00b6 000b:Call winealsa.drv.wodMessage(00000000,00000008,7e72ab2b,0014d3a0,00000020) ret=7e728e1f 000b:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 000b:Ret winmm.waveOutUnprepareHeader() retval=00000000 ret=7e0c00b6 000b:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 000b:Call msacm32.drv.wodMessage(0000ffff,00000008,0014b1f8,0014d3c0,00000020) ret=7e728e1f 000b:Call winmm.waveOutUnprepareHeader(00008001,0014d3c0,00000020) ret=7e0c00b6 000b:Call winealsa.drv.wodMessage(00000000,00000008,7e72ab2b,0014d3c0,00000020) ret=7e728e1f 000b:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 000b:Ret winmm.waveOutUnprepareHeader() retval=00000000 ret=7e0c00b6 000b:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 000b:Call KERNEL32.CloseHandle(00000068) ret=7e7349fd 000b:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e7349fd 000b:Call ntdll.RtlFreeHeap(00110000,00000000,0014d3a0) ret=7e734a23 000b:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e734a23 000b:Call ntdll.RtlFreeHeap(00110000,00000000,00148cb8) ret=7e734a49 000b:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e734a49 000b:Call msacm32.drv.wodMessage(0000ffff,00000006,0014b1f8,00000000,00000000) ret=7e728e1f 000b:Call winmm.waveOutClose(00008001) ret=7e0c01a5 000b:Call winealsa.drv.wodMessage(00000000,00000006,7e72ab2b,00000000,00000000) ret=7e728e1f 000b:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1b2580 000b:Ret KERNEL32.CreateEventW() retval=00000068 ret=7e1b2580 000b:Call KERNEL32.WaitForSingleObject(00000068,ffffffff) ret=7e1b2635 000d:Call KERNEL32.SetEvent(00000068) ret=7e1c4ea1 000d:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c4ea1 000d:Call KERNEL32.ExitThread(00000000) ret=7e1c4eb0 000d:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) 000d:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 000d:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) 000d:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) retval=1 000d:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) 000d:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 000d:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) 000d:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) retval=1 000d:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) 000d:Call KERNEL32.TlsGetValue(00000000) ret=7e3f4071 000d:Ret KERNEL32.TlsGetValue() retval=00000000 ret=7e3f4071 000d:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 000d:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) 000d:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 000b:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1b2635 000b:Call KERNEL32.CloseHandle(00000068) ret=7e1b2640 000b:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1b2640 000b:Call ntdll.RtlFreeHeap(00110000,00000000,0014c7d0) ret=7e1b24dc 000b:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e1b24dc 000b:Call ntdll.RtlDeleteCriticalSection(0013cefc) ret=7e1b24fb 000b:Ret ntdll.RtlDeleteCriticalSection() retval=00000000 ret=7e1b24fb 000b:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bc,0014b1f8,00000000,00000000) ret=7e1c4643 000b:Call KERNEL32.IsBadReadPtr(0014b1f8,0000002c) ret=7e0bdbc9 000b:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 000b:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bc,008ceaa4,00000000,00000000) ret=7e0bdf33 000b:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 000b:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 000b:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 000b:Call ntdll.RtlFreeHeap(00110000,00000000,0014b230) ret=7e72ae0b 000b:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e72ae0b 000b:Ret winmm.waveOutClose() retval=00000000 ret=7e0c01a5 000b:Call ntdll.RtlFreeHeap(00110000,00000000,0014b1f8) ret=7e0c01f7 000b:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e0c01f7 000b:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 000b:Call ntdll.RtlFreeHeap(00110000,00000000,0014b1d0) ret=7e72ae0b 000b:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e72ae0b 0009:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1b2635 0009:Call KERNEL32.CloseHandle(00000070) ret=7e1b2640 0009:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1b2640 0009:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0009:Ret winmm.waveOutReset() retval=00000000 ret=7e0c0180 0009:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0009:Call KERNEL32.WaitForSingleObject(00000040,ffffffff) ret=7e73555a 000b:Call ntdll.RtlFreeHeap(00110000,00000000,00148c28) ret=7e731f79 000b:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e731f79 000b:Call KERNEL32.SetEvent(00000040) ret=7e7343a0 000b:Ret KERNEL32.SetEvent() retval=00000001 ret=7e7343a0 000b:Call KERNEL32.CloseHandle(00000064) ret=7e734340 000b:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e734340 000b:Call ntdll.RtlFreeHeap(00110000,00000000,0014bef8) ret=7e734360 000b:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e734360 000b:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) 000b:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 000b:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) 000b:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) retval=1 000b:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) 000b:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 000b:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) 000b:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) retval=1 000b:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) 000b:Call KERNEL32.TlsGetValue(00000000) ret=7e3f4071 000b:Ret KERNEL32.TlsGetValue() retval=00000000 ret=7e3f4071 000b:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 000b:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) 000b:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0009:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e73555a 0009:Call KERNEL32.ResetEvent(00000038) ret=7e735572 0009:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e735572 0009:Call KERNEL32.CreateThread(00000000,00000000,7e7348a0,0014b258,00000000,0033f598) ret=7e73560c 000c:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) 000c:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 000c:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) 000c:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 000c:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) 000c:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) retval=1 000c:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) 000c:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 000c:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) 000c:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 000c:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) 000c:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 000c:Starting thread proc 0x7e7348a0 (arg=0x14b258) 000c:Call KERNEL32.FindResourceW(01000000,0000007c,7e741bde L"WAVE") ret=7e734ca3 000c:Ret KERNEL32.FindResourceW() retval=01014c40 ret=7e734ca3 000c:Call KERNEL32.LoadResource(01000000,01014c40) ret=7e734cb9 000c:Ret KERNEL32.LoadResource() retval=0104d668 ret=7e734cb9 000c:Call KERNEL32.LockResource(0104d668) ret=7e734cce 000c:Ret KERNEL32.LockResource() retval=0104d668 ret=7e734cce 000c:Call KERNEL32.FreeResource(0104d668) ret=7e734ce9 000c:Ret KERNEL32.FreeResource() retval=00000000 ret=7e734ce9 000c:Call ntdll.RtlAllocateHeap(00110000,00000008,0000005c) ret=7e733960 000c:Ret ntdll.RtlAllocateHeap() retval=00148c28 ret=7e733960 000c:Call KERNEL32.GetFileSize(ffffffff,00000000) ret=7e733ab9 000c:Ret KERNEL32.GetFileSize() retval=ffffffff ret=7e733ab9 000c:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7e733cf0 000c:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e733cf0 000c:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7e734e1c 000c:Ret ntdll.RtlAllocateHeap() retval=00148cb8 ret=7e734e1c 000c:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e734f1f 000c:Ret KERNEL32.CreateEventW() retval=00000068 ret=7e734f1f 000c:Call ntdll.RtlAllocateHeap(00110000,00000008,0000001c) ret=7e72abbe 000c:Ret ntdll.RtlAllocateHeap() retval=0014b280 ret=7e72abbe 000c:Call msacm32.drv.wodMessage(0000ffff,00000005,007ce918,007ce970,00030000) ret=7e728e1f 000c:Call ntdll.RtlAllocateHeap(00110000,00000000,0000002c) ret=7e0bfd8c 000c:Ret ntdll.RtlAllocateHeap() retval=0014b1d0 ret=7e0bfd8c 000c:Call winmm.waveOutGetNumDevs() ret=7e0bfdb5 000c:Ret winmm.waveOutGetNumDevs() retval=00000002 ret=7e0bfdb5 000c:Call winmm.waveOutOpen(0014b1d8,00000000,00148cb8,7e0bde60,0014b1d0,00030008) ret=7e0c0313 000c:Call ntdll.RtlAllocateHeap(00110000,00000008,0000001c) ret=7e72abbe 000c:Ret ntdll.RtlAllocateHeap() retval=0014b208 ret=7e72abbe 000c:Call winealsa.drv.wodMessage(00000000,00000005,007ce5b8,007ce610,00030008) ret=7e728e1f 000c:Call ntdll.RtlAllocateHeap(00110000,00000008,00000068) ret=7e1c6c82 000c:Ret ntdll.RtlAllocateHeap() retval=0014bef8 ret=7e1c6c82 000c:Call ntdll.RtlAllocateHeap(00110000,00000008,00000300) ret=7e1b2459 000c:Ret ntdll.RtlAllocateHeap() retval=0014c7d0 ret=7e1b2459 000c:Call KERNEL32.InitializeCriticalSection(0013cefc) ret=7e1b2469 000c:Ret KERNEL32.InitializeCriticalSection() retval=00000001 ret=7e1b2469 000c:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1c73ab 000c:Ret KERNEL32.CreateEventW() retval=00000070 ret=7e1c73ab 000c:Call KERNEL32.CreateThread(00000000,00000000,7e1c5570,00000000,00000000,0013cedc) ret=7e1c73ef 0009:Ret KERNEL32.CreateThread() retval=00000064 ret=7e73560c 0009:Call KERNEL32.SetThreadPriority(00000064,0000000f) ret=7e73562d 0009:Ret KERNEL32.SetThreadPriority() retval=00000001 ret=7e73562d 0009:Ret winmm.PlaySoundW() retval=00000001 ret=01006aa0 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,0000000c) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c58f8 ret=0100a7d2 0009:Call user32.GetClientRect(00010030,0033f608) ret=01005145 0009:Ret user32.GetClientRect() retval=00000001 ret=01005145 0009:Call user32.GetDC(00010030) ret=010051ad 0009:Ret user32.GetDC() retval=00000314 ret=010051ad 0009:Call gdi32.CreateCompatibleDC(00000314) ret=010051bc 0009:Ret gdi32.CreateCompatibleDC() retval=000023dc ret=010051bc 0009:Call gdi32.CreateCompatibleDC(00000314) ret=010051ca 0009:Ret gdi32.CreateCompatibleDC() retval=000023e8 ret=010051ca 0009:Call gdi32.CreateCompatibleDC(00000314) ret=010051d8 0009:Ret gdi32.CreateCompatibleDC() retval=000023f4 ret=010051d8 0009:Call gdi32.CreateCompatibleBitmap(00000314,00000047,00000060) ret=010051f8 0009:Ret gdi32.CreateCompatibleBitmap() retval=00002400 ret=010051f8 0009:Call gdi32.CreateCompatibleBitmap(00000314,00000047,00000060) ret=01005212 0009:Ret gdi32.CreateCompatibleBitmap() retval=00002404 ret=01005212 0009:Call gdi32.CreateCompatibleBitmap(00000314,00000047,00000060) ret=0100522c 0009:Ret gdi32.CreateCompatibleBitmap() retval=00002408 ret=0100522c 0009:Call gdi32.SelectObject(000023dc,00002400) ret=01005246 0009:Ret gdi32.SelectObject() retval=0000006c ret=01005246 0009:Call gdi32.SelectObject(000023e8,00002404) ret=0100525a 0009:Ret gdi32.SelectObject() retval=0000006c ret=0100525a 0009:Call gdi32.SelectObject(000023f4,00002408) ret=0100526e 0009:Ret gdi32.SelectObject() retval=0000006c ret=0100526e 0009:Call user32.LoadBitmapW(01000000,0033f5a0 L"CARD47") ret=010028ff 001a:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) 001a:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 001a:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) 001a:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 001a:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) 001a:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) retval=1 001a:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) 001a:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 001a:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) 001a:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 001a:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) 001a:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 001a:Starting thread proc 0x7e1c5570 (arg=(nil)) 001a:Call KERNEL32.SetEvent(00000070) ret=7e1c55aa 001a:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c55aa 000c:Ret KERNEL32.CreateThread() retval=000000d4 ret=7e1c73ef 000c:Call KERNEL32.SetThreadPriority(000000d4,0000000f) ret=7e1c7413 000c:Ret KERNEL32.SetThreadPriority() retval=00000001 ret=7e1c7413 000c:Call KERNEL32.WaitForSingleObject(00000070,ffffffff) ret=7e1c742f 000c:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1c742f 000c:Call KERNEL32.CloseHandle(00000070) ret=7e1c7443 000c:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1c7443 000c:Call ntdll.RtlFreeHeap(00110000,00000000,0014bef8) ret=7e1c7479 000c:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e1c7479 000c:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bb,0014b1d0,00000000,00000000) ret=7e1c4643 000c:Call KERNEL32.IsBadReadPtr(0014b1d0,0000002c) ret=7e0bdbc9 000c:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 000c:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bb,007ceaa4,00000000,00000000) ret=7e0bdf33 000c:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 000c:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 000c:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 000c:Ret winmm.waveOutOpen() retval=00000000 ret=7e0c0313 000c:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 000c:Call ntdll.RtlAllocateHeap(00110000,00000000,000039ac) ret=7e73520d 000c:Ret ntdll.RtlAllocateHeap() retval=0014d3a0 ret=7e73520d 000c:Call msacm32.drv.wodMessage(0000ffff,00000007,0014b1d0,0014d3a0,00000020) ret=7e728e1f 000c:Call winmm.waveOutPrepareHeader(00008001,0014d3a0,00000020) ret=7e0c09d8 000c:Call winealsa.drv.wodMessage(00000000,00000007,7e72ab2b,0014d3a0,00000020) ret=7e728e1f 000c:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 000c:Ret winmm.waveOutPrepareHeader() retval=00000000 ret=7e0c09d8 000c:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 000c:Call msacm32.drv.wodMessage(0000ffff,00000007,0014b1d0,0014d3c0,00000020) ret=7e728e1f 000c:Call winmm.waveOutPrepareHeader(00008001,0014d3c0,00000020) ret=7e0c09d8 000c:Call winealsa.drv.wodMessage(00000000,00000007,7e72ab2b,0014d3c0,00000020) ret=7e728e1f 000c:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 000c:Ret winmm.waveOutPrepareHeader() retval=00000000 ret=7e0c09d8 000c:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 000c:Call KERNEL32.WaitForSingleObject(00000038,00000000) ret=7e735343 000c:Ret KERNEL32.WaitForSingleObject() retval=00000102 ret=7e735343 000c:Call msacm32.drv.wodMessage(0000ffff,00000009,0014b1d0,0014d3a0,00000020) ret=7e728e1f 000c:Call winmm.waveOutWrite(00008001,0014d3a0,00000020) ret=7e0c09b5 000c:Call winealsa.drv.wodMessage(00000000,00000009,7e72ab2b,0014d3a0,00000020) ret=7e728e1f 000c:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 000c:Ret winmm.waveOutWrite() retval=00000000 ret=7e0c09b5 000c:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 000c:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 000c:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 000c:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 000c:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 000c:Call KERNEL32.WaitForSingleObject(00000068,ffffffff) ret=7e73429b 0009:Ret user32.LoadBitmapW() retval=00002418 ret=010028ff 0009:Call gdi32.CreateCompatibleDC(000023e8) ret=01002909 0009:Ret gdi32.CreateCompatibleDC() retval=0000242c ret=01002909 0009:Call gdi32.SelectObject(0000242c,00002418) ret=01002917 0009:Ret gdi32.SelectObject() retval=0000006c ret=01002917 0009:Call gdi32.BitBlt(000023e8,00000000,00000000,00000047,00000060,0000242c,00000000,00000000,00cc0020) ret=01002938 0009:Ret gdi32.BitBlt() retval=00000001 ret=01002938 0009:Call gdi32.SelectObject(0000242c,0000006c) ret=0100293e 0009:Ret gdi32.SelectObject() retval=00002418 ret=0100293e 0009:Call gdi32.DeleteObject(00002418) ret=01002947 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01002947 0009:Call gdi32.DeleteDC(0000242c) ret=0100294e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100294e 0009:Call gdi32.SetPixel(000023e8,00000000,00000000,00008000) ret=01002969 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002969 0009:Call gdi32.SetPixel(000023e8,00000001,00000000,00008000) ret=01002976 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002976 0009:Call gdi32.SetPixel(000023e8,00000000,00000001,00008000) ret=01002982 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002982 0009:Call gdi32.SetPixel(000023e8,00000046,00000000,00008000) ret=0100298f 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100298f 0009:Call gdi32.SetPixel(000023e8,00000045,00000000,00008000) ret=0100299c 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100299c 0009:Call gdi32.SetPixel(000023e8,00000046,00000001,00008000) ret=010029ab 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ab 0009:Call gdi32.SetPixel(000023e8,00000000,0000005f,00008000) ret=010029bf 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029bf 0009:Call gdi32.SetPixel(000023e8,00000001,0000005f,00008000) ret=010029d0 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029d0 0009:Call gdi32.SetPixel(000023e8,00000000,0000005e,00008000) ret=010029de 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029de 0009:Call gdi32.SetPixel(000023e8,00000046,0000005f,00008000) ret=010029ef 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ef 0009:Call gdi32.SetPixel(000023e8,00000045,0000005f,00008000) ret=01002a00 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a00 0009:Call gdi32.SetPixel(000023e8,00000046,0000005e,00008000) ret=01002a11 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a11 0009:Call user32.LoadBitmapW(01000000,010012c8 L"CARDBACK") ret=010028ff 0009:Ret user32.LoadBitmapW() retval=00002444 ret=010028ff 0009:Call gdi32.CreateCompatibleDC(000023dc) ret=01002909 0009:Ret gdi32.CreateCompatibleDC() retval=00002458 ret=01002909 0009:Call gdi32.SelectObject(00002458,00002444) ret=01002917 0009:Ret gdi32.SelectObject() retval=0000006c ret=01002917 0009:Call gdi32.BitBlt(000023dc,00000000,00000000,00000047,00000060,00002458,00000000,00000000,00cc0020) ret=01002938 0009:Ret gdi32.BitBlt() retval=00000001 ret=01002938 0009:Call gdi32.SelectObject(00002458,0000006c) ret=0100293e 0009:Ret gdi32.SelectObject() retval=00002444 ret=0100293e 0009:Call gdi32.DeleteObject(00002444) ret=01002947 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01002947 0009:Call gdi32.DeleteDC(00002458) ret=0100294e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100294e 0009:Call gdi32.SetPixel(000023dc,00000000,00000000,00008000) ret=01002969 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002969 0009:Call gdi32.SetPixel(000023dc,00000001,00000000,00008000) ret=01002976 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002976 0009:Call gdi32.SetPixel(000023dc,00000000,00000001,00008000) ret=01002982 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002982 0009:Call gdi32.SetPixel(000023dc,00000046,00000000,00008000) ret=0100298f 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100298f 0009:Call gdi32.SetPixel(000023dc,00000045,00000000,00008000) ret=0100299c 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100299c 0009:Call gdi32.SetPixel(000023dc,00000046,00000001,00008000) ret=010029ab 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ab 0009:Call gdi32.SetPixel(000023dc,00000000,0000005f,00008000) ret=010029bf 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029bf 0009:Call gdi32.SetPixel(000023dc,00000001,0000005f,00008000) ret=010029d0 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029d0 0009:Call gdi32.SetPixel(000023dc,00000000,0000005e,00008000) ret=010029de 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029de 0009:Call gdi32.SetPixel(000023dc,00000046,0000005f,00008000) ret=010029ef 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ef 0009:Call gdi32.SetPixel(000023dc,00000045,0000005f,00008000) ret=01002a00 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a00 0009:Call gdi32.SetPixel(000023dc,00000046,0000005e,00008000) ret=01002a11 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a11 0009:Call winmm.timeGetTime() ret=010047d1 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00003987 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00003987 ret=010047d1 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00003987 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00003987 ret=01004881 0009:Call gdi32.BitBlt(000023dc,00000000,00000000,00000048,00000061,000023dc,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00000314,00000459,00000258,00000047,00000060,000023e8,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=0000398f ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=0000398f ret=01004881 0009:Call gdi32.BitBlt(000023f4,00000000,00000039,00000047,00000027,000023dc,00000000,00000039,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000023f4,00000010,00000000,00000037,00000039,000023dc,00000010,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000023dc,00000037,00000027,00000011,0000003a,000023dc,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(000023dc,00000000,00000000,00000047,00000027,00000314,00000422,00000231,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000023dc,00000000,00000027,00000037,00000039,00000314,00000422,00000258,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000422,00000231,00000047,00000060,000023e8,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000459,00000291,00000047,00000027,000023f4,00000000,00000039,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000469,00000258,00000037,00000039,000023f4,00000010,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00003997 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00003997 ret=01004881 0009:Call gdi32.BitBlt(000023f4,00000000,00000038,00000047,00000028,000023dc,00000000,00000038,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000023f4,0000000f,00000000,00000038,00000038,000023dc,0000000f,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000023dc,00000038,00000028,00000010,00000039,000023dc,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(000023dc,00000000,00000000,00000047,00000028,00000314,000003ea,00000209,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000023dc,00000000,00000028,00000038,00000038,00000314,000003ea,00000231,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000003ea,00000209,00000047,00000060,000023e8,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000422,00000269,00000047,00000028,000023f4,00000000,00000038,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000431,00000231,00000038,00000038,000023f4,0000000f,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=0000399f ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=0000399f ret=01004881 0009:Call gdi32.BitBlt(000023f4,00000000,00000038,00000047,00000028,000023dc,00000000,00000038,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000023f4,0000000f,00000000,00000038,00000038,000023dc,0000000f,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000023dc,00000038,00000028,00000010,00000039,000023dc,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(000023dc,00000000,00000000,00000047,00000028,00000314,000003b2,000001e1,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000023dc,00000000,00000028,00000038,00000038,00000314,000003b2,00000209,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000003b2,000001e1,00000047,00000060,000023e8,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000003ea,00000241,00000047,00000028,000023f4,00000000,00000038,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,000003f9,00000209,00000038,00000038,000023f4,0000000f,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000039a7 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000039a7 ret=01004881 0009:Call gdi32.BitBlt(000023f4,00000000,00000038,00000047,00000028,000023dc,00000000,00000038,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000023f4,00000010,00000000,00000037,00000038,000023dc,00000010,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000023dc,00000037,00000028,00000011,00000039,000023dc,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(000023dc,00000000,00000000,00000047,00000028,00000314,0000037b,000001b9,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000023dc,00000000,00000028,00000037,00000038,00000314,0000037b,000001e1,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,0000037b,000001b9,00000047,00000060,000023e8,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000003b2,00000219,00000047,00000028,000023f4,00000000,00000038,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,000003c2,000001e1,00000037,00000038,000023f4,00000010,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000039af ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000039af ret=01004881 0009:Call gdi32.BitBlt(000023f4,00000000,00000038,00000047,00000028,000023dc,00000000,00000038,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000023f4,0000000f,00000000,00000038,00000038,000023dc,0000000f,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000023dc,00000038,00000028,00000010,00000039,000023dc,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(000023dc,00000000,00000000,00000047,00000028,00000314,00000343,00000191,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000023dc,00000000,00000028,00000038,00000038,00000314,00000343,000001b9,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000343,00000191,00000047,00000060,000023e8,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,0000037b,000001f1,00000047,00000028,000023f4,00000000,00000038,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000038a,000001b9,00000038,00000038,000023f4,0000000f,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000039b7 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000039b7 ret=01004881 0009:Call gdi32.BitBlt(000023f4,00000000,00000038,00000047,00000028,000023dc,00000000,00000038,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000023f4,0000000f,00000000,00000038,00000038,000023dc,0000000f,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000023dc,00000038,00000028,00000010,00000039,000023dc,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(000023dc,00000000,00000000,00000047,00000028,00000314,0000030b,00000169,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000023dc,00000000,00000028,00000038,00000038,00000314,0000030b,00000191,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,0000030b,00000169,00000047,00000060,000023e8,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000343,000001c9,00000047,00000028,000023f4,00000000,00000038,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000352,00000191,00000038,00000038,000023f4,0000000f,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000039bf ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000039bf ret=01004881 0009:Call gdi32.BitBlt(000023f4,00000000,00000038,00000047,00000028,000023dc,00000000,00000038,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000023f4,00000010,00000000,00000037,00000038,000023dc,00000010,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000023dc,00000037,00000028,00000011,00000039,000023dc,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(000023dc,00000000,00000000,00000047,00000028,00000314,000002d4,00000141,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000023dc,00000000,00000028,00000037,00000038,00000314,000002d4,00000169,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000002d4,00000141,00000047,00000060,000023e8,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,0000030b,000001a1,00000047,00000028,000023f4,00000000,00000038,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000031b,00000169,00000037,00000038,000023f4,00000010,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000039c7 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000039c7 ret=01004881 0009:Call gdi32.BitBlt(000023f4,00000000,00000038,00000047,00000028,000023dc,00000000,00000038,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000023f4,0000000f,00000000,00000038,00000038,000023dc,0000000f,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000023dc,00000038,00000028,00000010,00000039,000023dc,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(000023dc,00000000,00000000,00000047,00000028,00000314,0000029c,00000119,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000023dc,00000000,00000028,00000038,00000038,00000314,0000029c,00000141,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,0000029c,00000119,00000047,00000060,000023e8,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000002d4,00000179,00000047,00000028,000023f4,00000000,00000038,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,000002e3,00000141,00000038,00000038,000023f4,0000000f,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000039cf ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000039cf ret=01004881 0009:Call gdi32.BitBlt(000023f4,00000000,00000038,00000047,00000028,000023dc,00000000,00000038,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000023f4,0000000f,00000000,00000038,00000038,000023dc,0000000f,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000023dc,00000038,00000028,00000010,00000039,000023dc,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(000023dc,00000000,00000000,00000047,00000028,00000314,00000264,000000f1,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000023dc,00000000,00000028,00000038,00000038,00000314,00000264,00000119,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000264,000000f1,00000047,00000060,000023e8,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,0000029c,00000151,00000047,00000028,000023f4,00000000,00000038,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,000002ab,00000119,00000038,00000038,000023f4,0000000f,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000039d7 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000039d7 ret=01004881 0009:Call gdi32.BitBlt(000023f4,00000000,00000038,00000047,00000028,000023dc,00000000,00000038,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000023f4,00000010,00000000,00000037,00000038,000023dc,00000010,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000023dc,00000037,00000028,00000011,00000039,000023dc,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(000023dc,00000000,00000000,00000047,00000028,00000314,0000022d,000000c9,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000023dc,00000000,00000028,00000037,00000038,00000314,0000022d,000000f1,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,0000022d,000000c9,00000047,00000060,000023e8,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000264,00000129,00000047,00000028,000023f4,00000000,00000038,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000274,000000f1,00000037,00000038,000023f4,00000010,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000039df ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000039df ret=01004881 0009:Call gdi32.BitBlt(000023f4,00000000,00000038,00000047,00000028,000023dc,00000000,00000038,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000023f4,0000000f,00000000,00000038,00000038,000023dc,0000000f,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000023dc,00000038,00000028,00000010,00000039,000023dc,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(000023dc,00000000,00000000,00000047,00000028,00000314,000001f5,000000a1,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000023dc,00000000,00000028,00000038,00000038,00000314,000001f5,000000c9,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000001f5,000000a1,00000047,00000060,000023e8,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,0000022d,00000101,00000047,00000028,000023f4,00000000,00000038,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000023c,000000c9,00000038,00000038,000023f4,0000000f,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000039e7 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000039e7 ret=01004881 0009:Call gdi32.BitBlt(000023f4,00000000,00000038,00000047,00000028,000023dc,00000000,00000038,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000023f4,0000000f,00000000,00000038,00000038,000023dc,0000000f,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000023dc,00000038,00000028,00000010,00000039,000023dc,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(000023dc,00000000,00000000,00000047,00000028,00000314,000001bd,00000079,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000023dc,00000000,00000028,00000038,00000038,00000314,000001bd,000000a1,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000001bd,00000079,00000047,00000060,000023e8,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000001f5,000000d9,00000047,00000028,000023f4,00000000,00000038,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000204,000000a1,00000038,00000038,000023f4,0000000f,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=000039ef ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=000039ef ret=01004881 0009:Call gdi32.BitBlt(000023f4,00000000,0000004c,00000047,00000014,000023dc,00000000,0000004c,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000023f4,0000002b,00000000,0000001c,0000004c,000023dc,0000002b,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000023dc,0000001c,00000014,0000002c,0000004d,000023dc,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(000023dc,00000000,00000000,00000047,00000014,00000314,000001a1,00000065,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000023dc,00000000,00000014,0000001c,0000004c,00000314,000001a1,00000079,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000001a1,00000065,00000047,00000060,000023e8,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000001bd,000000c5,00000047,00000014,000023f4,00000000,0000004c,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,000001e8,00000079,0000001c,0000004c,000023f4,0000002b,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call gdi32.SelectObject(000023dc,0000006c) ret=01005316 0009:Ret gdi32.SelectObject() retval=00002400 ret=01005316 0009:Call gdi32.SelectObject(000023e8,0000006c) ret=01005324 0009:Ret gdi32.SelectObject() retval=00002404 ret=01005324 0009:Call gdi32.SelectObject(000023f4,0000006c) ret=01005332 0009:Ret gdi32.SelectObject() retval=00002408 ret=01005332 0009:Call gdi32.DeleteObject(00002400) ret=01005340 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005340 0009:Call gdi32.DeleteObject(00002404) ret=01005348 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005348 0009:Call gdi32.DeleteObject(00002408) ret=01005350 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005350 0009:Call gdi32.DeleteDC(000023dc) ret=0100535e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100535e 0009:Call gdi32.DeleteDC(000023e8) ret=01005366 0009:Ret gdi32.DeleteDC() retval=00000001 ret=01005366 0009:Call gdi32.DeleteDC(000023f4) ret=0100536e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100536e 0009:Call user32.ReleaseDC(00010030,00000314) ret=0100537c 0009:Ret user32.ReleaseDC() retval=00000001 ret=0100537c 0009:Call user32.InvalidateRect(00010030,0033f618,00000000) ret=0100538a 0009:Ret user32.InvalidateRect() retval=00000001 ret=0100538a 0009:Call KERNEL32.GetModuleHandleW(00000000) ret=01006a97 0009:Ret KERNEL32.GetModuleHandleW() retval=01000000 ret=01006a97 0009:Call winmm.PlaySoundW(0000007c,01000000,00040007) ret=01006aa0 0009:Call ntdll.RtlAllocateHeap(00110000,00000008,0000001c) ret=7e7356bc 0009:Ret ntdll.RtlAllocateHeap() retval=0014cad8 ret=7e7356bc 0009:Call KERNEL32.ResetEvent(00000040) ret=7e735513 0009:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e735513 0009:Call KERNEL32.SetEvent(00000038) ret=7e735520 0009:Ret KERNEL32.SetEvent() retval=00000001 ret=7e735520 0009:Call msacm32.drv.wodMessage(0000ffff,0000000c,0014b1d0,00000000,00000000) ret=7e728e1f 0009:Call winmm.waveOutReset(00008001) ret=7e0c0180 0009:Call winealsa.drv.wodMessage(00000000,0000000c,7e72ab2b,00000000,00000000) ret=7e728e1f 0009:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1b2580 0009:Ret KERNEL32.CreateEventW() retval=00000070 ret=7e1b2580 001a:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bd,0014b1d0,0014d3a0,00000000) ret=7e1c4643 001a:Call KERNEL32.IsBadReadPtr(0014b1d0,0000002c) ret=7e0bdbc9 001a:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 001a:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bd,007ceaa4,0014d3a0,00000000) ret=7e0bdf33 001a:Call KERNEL32.SetEvent(00000068) ret=7e7341f6 001a:Ret KERNEL32.SetEvent() retval=00000001 ret=7e7341f6 001a:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 001a:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 001a:Call KERNEL32.SetEvent(00000070) ret=7e1c4f3d 001a:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c4f3d 000c:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e73429b 000c:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 000c:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 000c:Call msacm32.drv.wodMessage(0000ffff,0000000c,0014b1d0,00000000,00000000) ret=7e728e1f 000c:Call winmm.waveOutReset(00008001) ret=7e0c0180 000c:Call winealsa.drv.wodMessage(00000000,0000000c,7e72ab2b,00000000,00000000) ret=7e728e1f 000c:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1b2580 000c:Ret KERNEL32.CreateEventW() retval=000000d8 ret=7e1b2580 000c:Call KERNEL32.WaitForSingleObject(000000d8,ffffffff) ret=7e1b2635 001a:Call KERNEL32.SetEvent(000000d8) ret=7e1c4f3d 001a:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c4f3d 000c:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1b2635 000c:Call KERNEL32.CloseHandle(000000d8) ret=7e1b2640 000c:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1b2640 000c:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 000c:Ret winmm.waveOutReset() retval=00000000 ret=7e0c0180 000c:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 000c:Call msacm32.drv.wodMessage(0000ffff,00000008,0014b1d0,0014d3a0,00000020) ret=7e728e1f 000c:Call winmm.waveOutUnprepareHeader(00008001,0014d3a0,00000020) ret=7e0c00b6 000c:Call winealsa.drv.wodMessage(00000000,00000008,7e72ab2b,0014d3a0,00000020) ret=7e728e1f 000c:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 000c:Ret winmm.waveOutUnprepareHeader() retval=00000000 ret=7e0c00b6 000c:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 000c:Call msacm32.drv.wodMessage(0000ffff,00000008,0014b1d0,0014d3c0,00000020) ret=7e728e1f 000c:Call winmm.waveOutUnprepareHeader(00008001,0014d3c0,00000020) ret=7e0c00b6 000c:Call winealsa.drv.wodMessage(00000000,00000008,7e72ab2b,0014d3c0,00000020) ret=7e728e1f 000c:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 000c:Ret winmm.waveOutUnprepareHeader() retval=00000000 ret=7e0c00b6 000c:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 000c:Call KERNEL32.CloseHandle(00000068) ret=7e7349fd 000c:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e7349fd 000c:Call ntdll.RtlFreeHeap(00110000,00000000,0014d3a0) ret=7e734a23 000c:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e734a23 000c:Call ntdll.RtlFreeHeap(00110000,00000000,00148cb8) ret=7e734a49 000c:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e734a49 000c:Call msacm32.drv.wodMessage(0000ffff,00000006,0014b1d0,00000000,00000000) ret=7e728e1f 000c:Call winmm.waveOutClose(00008001) ret=7e0c01a5 000c:Call winealsa.drv.wodMessage(00000000,00000006,7e72ab2b,00000000,00000000) ret=7e728e1f 000c:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1b2580 000c:Ret KERNEL32.CreateEventW() retval=00000068 ret=7e1b2580 000c:Call KERNEL32.WaitForSingleObject(00000068,ffffffff) ret=7e1b2635 001a:Call KERNEL32.SetEvent(00000068) ret=7e1c4ea1 001a:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c4ea1 001a:Call KERNEL32.ExitThread(00000000) ret=7e1c4eb0 001a:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) 001a:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 001a:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) 001a:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) retval=1 001a:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) 001a:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 001a:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) 001a:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) retval=1 001a:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) 001a:Call KERNEL32.TlsGetValue(00000000) ret=7e3f4071 001a:Ret KERNEL32.TlsGetValue() retval=00000000 ret=7e3f4071 001a:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 001a:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) 001a:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 000c:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1b2635 000c:Call KERNEL32.CloseHandle(00000068) ret=7e1b2640 000c:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1b2640 000c:Call ntdll.RtlFreeHeap(00110000,00000000,0014c7d0) ret=7e1b24dc 000c:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e1b24dc 000c:Call ntdll.RtlDeleteCriticalSection(0013cefc) ret=7e1b24fb 000c:Ret ntdll.RtlDeleteCriticalSection() retval=00000000 ret=7e1b24fb 000c:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bc,0014b1d0,00000000,00000000) ret=7e1c4643 000c:Call KERNEL32.IsBadReadPtr(0014b1d0,0000002c) ret=7e0bdbc9 000c:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 000c:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bc,007ceaa4,00000000,00000000) ret=7e0bdf33 000c:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 000c:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 000c:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 000c:Call ntdll.RtlFreeHeap(00110000,00000000,0014b208) ret=7e72ae0b 000c:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e72ae0b 000c:Ret winmm.waveOutClose() retval=00000000 ret=7e0c01a5 000c:Call ntdll.RtlFreeHeap(00110000,00000000,0014b1d0) ret=7e0c01f7 000c:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e0c01f7 000c:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 000c:Call ntdll.RtlFreeHeap(00110000,00000000,0014b280) ret=7e72ae0b 000c:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e72ae0b 0009:Call KERNEL32.WaitForSingleObject(00000070,ffffffff) ret=7e1b2635 0009:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1b2635 0009:Call KERNEL32.CloseHandle(00000070) ret=7e1b2640 0009:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1b2640 0009:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0009:Ret winmm.waveOutReset() retval=00000000 ret=7e0c0180 0009:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0009:Call KERNEL32.WaitForSingleObject(00000040,ffffffff) ret=7e73555a 000c:Call ntdll.RtlFreeHeap(00110000,00000000,00148c28) ret=7e731f79 000c:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e731f79 000c:Call KERNEL32.SetEvent(00000040) ret=7e7343a0 000c:Ret KERNEL32.SetEvent() retval=00000001 ret=7e7343a0 000c:Call KERNEL32.CloseHandle(00000064) ret=7e734340 000c:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e734340 000c:Call ntdll.RtlFreeHeap(00110000,00000000,0014b258) ret=7e734360 000c:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e734360 000c:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) 000c:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 000c:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) 000c:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) retval=1 000c:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) 000c:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 000c:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) 000c:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) retval=1 000c:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) 000c:Call KERNEL32.TlsGetValue(00000000) ret=7e3f4071 000c:Ret KERNEL32.TlsGetValue() retval=00000000 ret=7e3f4071 000c:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 000c:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) 000c:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0009:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e73555a 0009:Call KERNEL32.ResetEvent(00000038) ret=7e735572 0009:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e735572 0009:Call KERNEL32.CreateThread(00000000,00000000,7e7348a0,0014cad8,00000000,0033f598) ret=7e73560c 001c:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) 001c:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 001c:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) 001c:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 001c:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) 001c:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) retval=1 001c:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) 001c:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 001c:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) 001c:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 001c:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) 001c:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 001c:Starting thread proc 0x7e7348a0 (arg=0x14cad8) 001c:Call KERNEL32.FindResourceW(01000000,0000007c,7e741bde L"WAVE") ret=7e734ca3 001c:Ret KERNEL32.FindResourceW() retval=01014c40 ret=7e734ca3 001c:Call KERNEL32.LoadResource(01000000,01014c40) ret=7e734cb9 001c:Ret KERNEL32.LoadResource() retval=0104d668 ret=7e734cb9 001c:Call KERNEL32.LockResource(0104d668) ret=7e734cce 001c:Ret KERNEL32.LockResource() retval=0104d668 ret=7e734cce 001c:Call KERNEL32.FreeResource(0104d668) ret=7e734ce9 001c:Ret KERNEL32.FreeResource() retval=00000000 ret=7e734ce9 001c:Call ntdll.RtlAllocateHeap(00110000,00000008,0000005c) ret=7e733960 001c:Ret ntdll.RtlAllocateHeap() retval=00148c28 ret=7e733960 001c:Call KERNEL32.GetFileSize(ffffffff,00000000) ret=7e733ab9 001c:Ret KERNEL32.GetFileSize() retval=ffffffff ret=7e733ab9 001c:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7e733cf0 001c:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e733cf0 001c:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7e734e1c 001c:Ret ntdll.RtlAllocateHeap() retval=00148cb8 ret=7e734e1c 001c:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e734f1f 001c:Ret KERNEL32.CreateEventW() retval=00000068 ret=7e734f1f 001c:Call ntdll.RtlAllocateHeap(00110000,00000008,0000001c) ret=7e72abbe 001c:Ret ntdll.RtlAllocateHeap() retval=0014cb00 ret=7e72abbe 001c:Call msacm32.drv.wodMessage(0000ffff,00000005,008ce918,008ce970,00030000) ret=7e728e1f 001c:Call ntdll.RtlAllocateHeap(00110000,00000000,0000002c) ret=7e0bfd8c 001c:Ret ntdll.RtlAllocateHeap() retval=0014cb28 ret=7e0bfd8c 001c:Call winmm.waveOutGetNumDevs() ret=7e0bfdb5 001c:Ret winmm.waveOutGetNumDevs() retval=00000002 ret=7e0bfdb5 001c:Call winmm.waveOutOpen(0014cb30,00000000,00148cb8,7e0bde60,0014cb28,00030008) ret=7e0c0313 001c:Call ntdll.RtlAllocateHeap(00110000,00000008,0000001c) ret=7e72abbe 001c:Ret ntdll.RtlAllocateHeap() retval=0014cb60 ret=7e72abbe 001c:Call winealsa.drv.wodMessage(00000000,00000005,008ce5b8,008ce610,00030008) ret=7e728e1f 001c:Call ntdll.RtlAllocateHeap(00110000,00000008,00000068) ret=7e1c6c82 001c:Ret ntdll.RtlAllocateHeap() retval=0014b1d0 ret=7e1c6c82 001c:Call ntdll.RtlAllocateHeap(00110000,00000008,00000300) ret=7e1b2459 001c:Ret ntdll.RtlAllocateHeap() retval=0014c7d0 ret=7e1b2459 001c:Call KERNEL32.InitializeCriticalSection(0013cefc) ret=7e1b2469 001c:Ret KERNEL32.InitializeCriticalSection() retval=00000001 ret=7e1b2469 001c:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1c73ab 001c:Ret KERNEL32.CreateEventW() retval=00000070 ret=7e1c73ab 001c:Call KERNEL32.CreateThread(00000000,00000000,7e1c5570,00000000,00000000,0013cedc) ret=7e1c73ef 0009:Ret KERNEL32.CreateThread() retval=00000064 ret=7e73560c 0009:Call KERNEL32.SetThreadPriority(00000064,0000000f) ret=7e73562d 0009:Ret KERNEL32.SetThreadPriority() retval=00000001 ret=7e73562d 0009:Ret winmm.PlaySoundW() retval=00000001 ret=01006aa0 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,0000000c) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c5910 ret=0100a7d2 0009:Call user32.GetClientRect(00010030,0033f608) ret=01005145 0009:Ret user32.GetClientRect() retval=00000001 ret=01005145 0009:Call user32.GetDC(00010030) ret=010051ad 0009:Ret user32.GetDC() retval=00000314 ret=010051ad 0009:Call gdi32.CreateCompatibleDC(00000314) ret=010051bc 0009:Ret gdi32.CreateCompatibleDC() retval=00002468 ret=010051bc 0009:Call gdi32.CreateCompatibleDC(00000314) ret=010051ca 0009:Ret gdi32.CreateCompatibleDC() retval=00002474 ret=010051ca 0009:Call gdi32.CreateCompatibleDC(00000314) ret=010051d8 0009:Ret gdi32.CreateCompatibleDC() retval=00002480 ret=010051d8 0009:Call gdi32.CreateCompatibleBitmap(00000314,00000047,00000060) ret=010051f8 0009:Ret gdi32.CreateCompatibleBitmap() retval=0000248c ret=010051f8 0009:Call gdi32.CreateCompatibleBitmap(00000314,00000047,00000060) ret=01005212 0009:Ret gdi32.CreateCompatibleBitmap() retval=00002490 ret=01005212 0009:Call gdi32.CreateCompatibleBitmap(00000314,00000047,00000060) ret=0100522c 0009:Ret gdi32.CreateCompatibleBitmap() retval=00002494 ret=0100522c 0009:Call gdi32.SelectObject(00002468,0000248c) ret=01005246 0009:Ret gdi32.SelectObject() retval=0000006c ret=01005246 0009:Call gdi32.SelectObject(00002474,00002490) ret=0100525a 0009:Ret gdi32.SelectObject() retval=0000006c ret=0100525a 0009:Call gdi32.SelectObject(00002480,00002494) ret=0100526e 0009:Ret gdi32.SelectObject() retval=0000006c ret=0100526e 0009:Call user32.LoadBitmapW(01000000,0033f5a0 L"CARD42") ret=010028ff 001e:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) 001e:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 001e:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) 001e:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 001e:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) 001e:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) retval=1 001e:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) 001e:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 001e:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) 001e:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 001e:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) 001e:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 001e:Starting thread proc 0x7e1c5570 (arg=(nil)) 001e:Call KERNEL32.SetEvent(00000070) ret=7e1c55aa 001e:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c55aa 001c:Ret KERNEL32.CreateThread() retval=000000d8 ret=7e1c73ef 001c:Call KERNEL32.SetThreadPriority(000000d8,0000000f) ret=7e1c7413 001c:Ret KERNEL32.SetThreadPriority() retval=00000001 ret=7e1c7413 001c:Call KERNEL32.WaitForSingleObject(00000070,ffffffff) ret=7e1c742f 001c:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1c742f 001c:Call KERNEL32.CloseHandle(00000070) ret=7e1c7443 001c:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1c7443 001c:Call ntdll.RtlFreeHeap(00110000,00000000,0014b1d0) ret=7e1c7479 001c:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e1c7479 001c:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bb,0014cb28,00000000,00000000) ret=7e1c4643 001c:Call KERNEL32.IsBadReadPtr(0014cb28,0000002c) ret=7e0bdbc9 001c:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 001c:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bb,008ceaa4,00000000,00000000) ret=7e0bdf33 001c:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 001c:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 001c:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 001c:Ret winmm.waveOutOpen() retval=00000000 ret=7e0c0313 001c:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 001c:Call ntdll.RtlAllocateHeap(00110000,00000000,000039ac) ret=7e73520d 001c:Ret ntdll.RtlAllocateHeap() retval=0014d3a0 ret=7e73520d 001c:Call msacm32.drv.wodMessage(0000ffff,00000007,0014cb28,0014d3a0,00000020) ret=7e728e1f 001c:Call winmm.waveOutPrepareHeader(00008001,0014d3a0,00000020) ret=7e0c09d8 001c:Call winealsa.drv.wodMessage(00000000,00000007,7e72ab2b,0014d3a0,00000020) ret=7e728e1f 001c:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 001c:Ret winmm.waveOutPrepareHeader() retval=00000000 ret=7e0c09d8 001c:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 001c:Call msacm32.drv.wodMessage(0000ffff,00000007,0014cb28,0014d3c0,00000020) ret=7e728e1f 001c:Call winmm.waveOutPrepareHeader(00008001,0014d3c0,00000020) ret=7e0c09d8 001c:Call winealsa.drv.wodMessage(00000000,00000007,7e72ab2b,0014d3c0,00000020) ret=7e728e1f 001c:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 001c:Ret winmm.waveOutPrepareHeader() retval=00000000 ret=7e0c09d8 001c:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 001c:Call KERNEL32.WaitForSingleObject(00000038,00000000) ret=7e735343 001c:Ret KERNEL32.WaitForSingleObject() retval=00000102 ret=7e735343 001c:Call msacm32.drv.wodMessage(0000ffff,00000009,0014cb28,0014d3a0,00000020) ret=7e728e1f 001c:Call winmm.waveOutWrite(00008001,0014d3a0,00000020) ret=7e0c09b5 001c:Call winealsa.drv.wodMessage(00000000,00000009,7e72ab2b,0014d3a0,00000020) ret=7e728e1f 001c:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 001c:Ret winmm.waveOutWrite() retval=00000000 ret=7e0c09b5 001c:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 001c:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 001c:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 001c:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 001c:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 001c:Call KERNEL32.WaitForSingleObject(00000068,ffffffff) ret=7e73429b 0009:Ret user32.LoadBitmapW() retval=000024a4 ret=010028ff 0009:Call gdi32.CreateCompatibleDC(00002474) ret=01002909 0009:Ret gdi32.CreateCompatibleDC() retval=000024b8 ret=01002909 0009:Call gdi32.SelectObject(000024b8,000024a4) ret=01002917 0009:Ret gdi32.SelectObject() retval=0000006c ret=01002917 0009:Call gdi32.BitBlt(00002474,00000000,00000000,00000047,00000060,000024b8,00000000,00000000,00cc0020) ret=01002938 0009:Ret gdi32.BitBlt() retval=00000001 ret=01002938 0009:Call gdi32.SelectObject(000024b8,0000006c) ret=0100293e 0009:Ret gdi32.SelectObject() retval=000024a4 ret=0100293e 0009:Call gdi32.DeleteObject(000024a4) ret=01002947 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01002947 0009:Call gdi32.DeleteDC(000024b8) ret=0100294e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100294e 0009:Call gdi32.SetPixel(00002474,00000000,00000000,00008000) ret=01002969 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002969 0009:Call gdi32.SetPixel(00002474,00000001,00000000,00008000) ret=01002976 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002976 0009:Call gdi32.SetPixel(00002474,00000000,00000001,00008000) ret=01002982 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002982 0009:Call gdi32.SetPixel(00002474,00000046,00000000,00008000) ret=0100298f 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100298f 0009:Call gdi32.SetPixel(00002474,00000045,00000000,00008000) ret=0100299c 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100299c 0009:Call gdi32.SetPixel(00002474,00000046,00000001,00008000) ret=010029ab 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ab 0009:Call gdi32.SetPixel(00002474,00000000,0000005f,00008000) ret=010029bf 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029bf 0009:Call gdi32.SetPixel(00002474,00000001,0000005f,00008000) ret=010029d0 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029d0 0009:Call gdi32.SetPixel(00002474,00000000,0000005e,00008000) ret=010029de 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029de 0009:Call gdi32.SetPixel(00002474,00000046,0000005f,00008000) ret=010029ef 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ef 0009:Call gdi32.SetPixel(00002474,00000045,0000005f,00008000) ret=01002a00 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a00 0009:Call gdi32.SetPixel(00002474,00000046,0000005e,00008000) ret=01002a11 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a11 0009:Call user32.LoadBitmapW(01000000,010012c8 L"CARDBACK") ret=010028ff 0009:Ret user32.LoadBitmapW() retval=000024d0 ret=010028ff 0009:Call gdi32.CreateCompatibleDC(00002468) ret=01002909 0009:Ret gdi32.CreateCompatibleDC() retval=000024e4 ret=01002909 0009:Call gdi32.SelectObject(000024e4,000024d0) ret=01002917 0009:Ret gdi32.SelectObject() retval=0000006c ret=01002917 0009:Call gdi32.BitBlt(00002468,00000000,00000000,00000047,00000060,000024e4,00000000,00000000,00cc0020) ret=01002938 0009:Ret gdi32.BitBlt() retval=00000001 ret=01002938 0009:Call gdi32.SelectObject(000024e4,0000006c) ret=0100293e 0009:Ret gdi32.SelectObject() retval=000024d0 ret=0100293e 0009:Call gdi32.DeleteObject(000024d0) ret=01002947 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01002947 0009:Call gdi32.DeleteDC(000024e4) ret=0100294e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100294e 0009:Call gdi32.SetPixel(00002468,00000000,00000000,00008000) ret=01002969 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002969 0009:Call gdi32.SetPixel(00002468,00000001,00000000,00008000) ret=01002976 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002976 0009:Call gdi32.SetPixel(00002468,00000000,00000001,00008000) ret=01002982 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002982 0009:Call gdi32.SetPixel(00002468,00000046,00000000,00008000) ret=0100298f 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100298f 0009:Call gdi32.SetPixel(00002468,00000045,00000000,00008000) ret=0100299c 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100299c 0009:Call gdi32.SetPixel(00002468,00000046,00000001,00008000) ret=010029ab 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ab 0009:Call gdi32.SetPixel(00002468,00000000,0000005f,00008000) ret=010029bf 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029bf 0009:Call gdi32.SetPixel(00002468,00000001,0000005f,00008000) ret=010029d0 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029d0 0009:Call gdi32.SetPixel(00002468,00000000,0000005e,00008000) ret=010029de 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029de 0009:Call gdi32.SetPixel(00002468,00000046,0000005f,00008000) ret=010029ef 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ef 0009:Call gdi32.SetPixel(00002468,00000045,0000005f,00008000) ret=01002a00 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a00 0009:Call gdi32.SetPixel(00002468,00000046,0000005e,00008000) ret=01002a11 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a11 0009:Call winmm.timeGetTime() ret=010047d1 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00003a20 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00003a20 ret=010047d1 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00003a21 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00003a21 ret=01004881 0009:Call gdi32.BitBlt(00002480,00000000,0000005b,00000047,00000005,00002468,00000000,0000005b,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00002480,00000042,00000000,00000005,0000005b,00002468,00000042,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00002468,00000005,00000005,00000043,0000005c,00002468,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00002468,00000000,00000000,00000047,00000005,00000314,00000454,00000253,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00002468,00000000,00000005,00000005,0000005b,00000314,00000454,00000258,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000454,00000253,00000047,00000060,00002474,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000459,000002b3,00000047,00000005,00002480,00000000,0000005b,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000049b,00000258,00000005,0000005b,00002480,00000042,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00003a27 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00003a27 ret=01004881 0009:Call gdi32.BitBlt(00002480,00000000,00000042,00000047,0000001e,00002468,00000000,00000042,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00002480,00000024,00000000,00000023,00000042,00002468,00000024,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00002468,00000023,0000001e,00000025,00000043,00002468,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00002468,00000000,00000000,00000047,0000001e,00000314,00000431,00000235,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00002468,00000000,0000001e,00000023,00000042,00000314,00000431,00000253,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000431,00000235,00000047,00000060,00002474,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000454,00000295,00000047,0000001e,00002480,00000000,00000042,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000478,00000253,00000023,00000042,00002480,00000024,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00003a2f ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00003a2f ret=01004881 0009:Call gdi32.BitBlt(00002480,00000000,00000038,00000047,00000028,00002468,00000000,00000038,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00002480,00000019,00000000,0000002e,00000038,00002468,00000019,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00002468,0000002e,00000028,0000001a,00000039,00002468,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00002468,00000000,00000000,00000047,00000028,00000314,00000403,0000020d,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00002468,00000000,00000028,0000002e,00000038,00000314,00000403,00000235,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000403,0000020d,00000047,00000060,00002474,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000431,0000026d,00000047,00000028,00002480,00000000,00000038,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000044a,00000235,0000002e,00000038,00002480,00000019,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00003a37 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00003a37 ret=01004881 0009:Call gdi32.BitBlt(00002480,00000000,00000037,00000047,00000029,00002468,00000000,00000037,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00002480,00000019,00000000,0000002e,00000037,00002468,00000019,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00002468,0000002e,00000029,0000001a,00000038,00002468,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00002468,00000000,00000000,00000047,00000029,00000314,000003d5,000001e4,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00002468,00000000,00000029,0000002e,00000037,00000314,000003d5,0000020d,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000003d5,000001e4,00000047,00000060,00002474,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000403,00000244,00000047,00000029,00002480,00000000,00000037,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000041c,0000020d,0000002e,00000037,00002480,00000019,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00003a3f ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00003a3f ret=01004881 0009:Call gdi32.BitBlt(00002480,00000000,00000038,00000047,00000028,00002468,00000000,00000038,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00002480,0000001a,00000000,0000002d,00000038,00002468,0000001a,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00002468,0000002d,00000028,0000001b,00000039,00002468,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00002468,00000000,00000000,00000047,00000028,00000314,000003a8,000001bc,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00002468,00000000,00000028,0000002d,00000038,00000314,000003a8,000001e4,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000003a8,000001bc,00000047,00000060,00002474,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000003d5,0000021c,00000047,00000028,00002480,00000000,00000038,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,000003ef,000001e4,0000002d,00000038,00002480,0000001a,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00003a47 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00003a47 ret=01004881 0009:Call gdi32.BitBlt(00002480,00000000,00000037,00000047,00000029,00002468,00000000,00000037,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00002480,00000019,00000000,0000002e,00000037,00002468,00000019,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00002468,0000002e,00000029,0000001a,00000038,00002468,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00002468,00000000,00000000,00000047,00000029,00000314,0000037a,00000193,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00002468,00000000,00000029,0000002e,00000037,00000314,0000037a,000001bc,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,0000037a,00000193,00000047,00000060,00002474,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000003a8,000001f3,00000047,00000029,00002480,00000000,00000037,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,000003c1,000001bc,0000002e,00000037,00002480,00000019,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00003a4f ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00003a4f ret=01004881 0009:Call gdi32.BitBlt(00002480,00000000,00000038,00000047,00000028,00002468,00000000,00000038,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00002480,00000019,00000000,0000002e,00000038,00002468,00000019,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00002468,0000002e,00000028,0000001a,00000039,00002468,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00002468,00000000,00000000,00000047,00000028,00000314,0000034c,0000016b,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00002468,00000000,00000028,0000002e,00000038,00000314,0000034c,00000193,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,0000034c,0000016b,00000047,00000060,00002474,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,0000037a,000001cb,00000047,00000028,00002480,00000000,00000038,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000393,00000193,0000002e,00000038,00002480,00000019,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00003a57 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00003a57 ret=01004881 0009:Call gdi32.BitBlt(00002480,00000000,00000037,00000047,00000029,00002468,00000000,00000037,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00002480,00000019,00000000,0000002e,00000037,00002468,00000019,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00002468,0000002e,00000029,0000001a,00000038,00002468,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00002468,00000000,00000000,00000047,00000029,00000314,0000031e,00000142,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00002468,00000000,00000029,0000002e,00000037,00000314,0000031e,0000016b,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,0000031e,00000142,00000047,00000060,00002474,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,0000034c,000001a2,00000047,00000029,00002480,00000000,00000037,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000365,0000016b,0000002e,00000037,00002480,00000019,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00003a5f ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00003a5f ret=01004881 0009:Call gdi32.BitBlt(00002480,00000000,00000038,00000047,00000028,00002468,00000000,00000038,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00002480,00000019,00000000,0000002e,00000038,00002468,00000019,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00002468,0000002e,00000028,0000001a,00000039,00002468,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00002468,00000000,00000000,00000047,00000028,00000314,000002f0,0000011a,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00002468,00000000,00000028,0000002e,00000038,00000314,000002f0,00000142,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000002f0,0000011a,00000047,00000060,00002474,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,0000031e,0000017a,00000047,00000028,00002480,00000000,00000038,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000337,00000142,0000002e,00000038,00002480,00000019,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00003a67 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00003a67 ret=01004881 0009:Call gdi32.BitBlt(00002480,00000000,00000037,00000047,00000029,00002468,00000000,00000037,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00002480,00000019,00000000,0000002e,00000037,00002468,00000019,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00002468,0000002e,00000029,0000001a,00000038,00002468,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00002468,00000000,00000000,00000047,00000029,00000314,000002c2,000000f1,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00002468,00000000,00000029,0000002e,00000037,00000314,000002c2,0000011a,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000002c2,000000f1,00000047,00000060,00002474,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000002f0,00000151,00000047,00000029,00002480,00000000,00000037,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000309,0000011a,0000002e,00000037,00002480,00000019,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00003a6f ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00003a6f ret=01004881 0009:Call gdi32.BitBlt(00002480,00000000,00000038,00000047,00000028,00002468,00000000,00000038,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00002480,00000019,00000000,0000002e,00000038,00002468,00000019,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00002468,0000002e,00000028,0000001a,00000039,00002468,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00002468,00000000,00000000,00000047,00000028,00000314,00000294,000000c9,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00002468,00000000,00000028,0000002e,00000038,00000314,00000294,000000f1,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000294,000000c9,00000047,00000060,00002474,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000002c2,00000129,00000047,00000028,00002480,00000000,00000038,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,000002db,000000f1,0000002e,00000038,00002480,00000019,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00003a77 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00003a77 ret=01004881 0009:Call gdi32.BitBlt(00002480,00000000,00000037,00000047,00000029,00002468,00000000,00000037,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00002480,00000019,00000000,0000002e,00000037,00002468,00000019,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00002468,0000002e,00000029,0000001a,00000038,00002468,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00002468,00000000,00000000,00000047,00000029,00000314,00000266,000000a0,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00002468,00000000,00000029,0000002e,00000037,00000314,00000266,000000c9,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000266,000000a0,00000047,00000060,00002474,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000294,00000100,00000047,00000029,00002480,00000000,00000037,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,000002ad,000000c9,0000002e,00000037,00002480,00000019,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00003a7f ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00003a7f ret=01004881 0009:Call gdi32.BitBlt(00002480,00000000,00000038,00000047,00000028,00002468,00000000,00000038,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00002480,00000019,00000000,0000002e,00000038,00002468,00000019,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00002468,0000002e,00000028,0000001a,00000039,00002468,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00002468,00000000,00000000,00000047,00000028,00000314,00000238,00000078,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00002468,00000000,00000028,0000002e,00000038,00000314,00000238,000000a0,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000238,00000078,00000047,00000060,00002474,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000266,000000d8,00000047,00000028,00002480,00000000,00000038,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000027f,000000a0,0000002e,00000038,00002480,00000019,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00003a87 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00003a87 ret=01004881 0009:Call gdi32.BitBlt(00002480,00000000,00000046,00000047,0000001a,00002468,00000000,00000046,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00002480,0000002a,00000000,0000001d,00000046,00002468,0000002a,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00002468,0000001d,0000001a,0000002b,00000047,00002468,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00002468,00000000,00000000,00000047,0000001a,00000314,0000021b,0000005e,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00002468,00000000,0000001a,0000001d,00000046,00000314,0000021b,00000078,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,0000021b,0000005e,00000047,00000060,00002474,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000238,000000be,00000047,0000001a,00002480,00000000,00000046,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000262,00000078,0000001d,00000046,00002480,0000002a,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call gdi32.SelectObject(00002468,0000006c) ret=01005316 0009:Ret gdi32.SelectObject() retval=0000248c ret=01005316 0009:Call gdi32.SelectObject(00002474,0000006c) ret=01005324 0009:Ret gdi32.SelectObject() retval=00002490 ret=01005324 0009:Call gdi32.SelectObject(00002480,0000006c) ret=01005332 0009:Ret gdi32.SelectObject() retval=00002494 ret=01005332 0009:Call gdi32.DeleteObject(0000248c) ret=01005340 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005340 0009:Call gdi32.DeleteObject(00002490) ret=01005348 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005348 0009:Call gdi32.DeleteObject(00002494) ret=01005350 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005350 0009:Call gdi32.DeleteDC(00002468) ret=0100535e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100535e 0009:Call gdi32.DeleteDC(00002474) ret=01005366 0009:Ret gdi32.DeleteDC() retval=00000001 ret=01005366 0009:Call gdi32.DeleteDC(00002480) ret=0100536e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100536e 0009:Call user32.ReleaseDC(00010030,00000314) ret=0100537c 0009:Ret user32.ReleaseDC() retval=00000001 ret=0100537c 0009:Call user32.InvalidateRect(00010030,0033f618,00000000) ret=0100538a 0009:Ret user32.InvalidateRect() retval=00000001 ret=0100538a 0009:Call KERNEL32.GetModuleHandleW(00000000) ret=01006a97 0009:Ret KERNEL32.GetModuleHandleW() retval=01000000 ret=01006a97 0009:Call winmm.PlaySoundW(0000007c,01000000,00040007) ret=01006aa0 0009:Call ntdll.RtlAllocateHeap(00110000,00000008,0000001c) ret=7e7356bc 0009:Ret ntdll.RtlAllocateHeap() retval=0014b268 ret=7e7356bc 0009:Call KERNEL32.ResetEvent(00000040) ret=7e735513 0009:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e735513 0009:Call KERNEL32.SetEvent(00000038) ret=7e735520 0009:Ret KERNEL32.SetEvent() retval=00000001 ret=7e735520 0009:Call msacm32.drv.wodMessage(0000ffff,0000000c,0014cb28,00000000,00000000) ret=7e728e1f 0009:Call winmm.waveOutReset(00008001) ret=7e0c0180 0009:Call winealsa.drv.wodMessage(00000000,0000000c,7e72ab2b,00000000,00000000) ret=7e728e1f 0009:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1b2580 0009:Ret KERNEL32.CreateEventW() retval=00000070 ret=7e1b2580 001e:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bd,0014cb28,0014d3a0,00000000) ret=7e1c4643 001e:Call KERNEL32.IsBadReadPtr(0014cb28,0000002c) ret=7e0bdbc9 001e:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 001e:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bd,008ceaa4,0014d3a0,00000000) ret=7e0bdf33 001e:Call KERNEL32.SetEvent(00000068) ret=7e7341f6 001e:Ret KERNEL32.SetEvent() retval=00000001 ret=7e7341f6 001e:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 001e:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 001e:Call KERNEL32.SetEvent(00000070) ret=7e1c4f3d 001e:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c4f3d 001c:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e73429b 001c:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 001c:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 001c:Call msacm32.drv.wodMessage(0000ffff,0000000c,0014cb28,00000000,00000000) ret=7e728e1f 001c:Call winmm.waveOutReset(00008001) ret=7e0c0180 001c:Call winealsa.drv.wodMessage(00000000,0000000c,7e72ab2b,00000000,00000000) ret=7e728e1f 001c:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1b2580 001c:Ret KERNEL32.CreateEventW() retval=000000dc ret=7e1b2580 001c:Call KERNEL32.WaitForSingleObject(000000dc,ffffffff) ret=7e1b2635 001e:Call KERNEL32.SetEvent(000000dc) ret=7e1c4f3d 001e:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c4f3d 001c:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1b2635 001c:Call KERNEL32.CloseHandle(000000dc) ret=7e1b2640 001c:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1b2640 001c:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 001c:Ret winmm.waveOutReset() retval=00000000 ret=7e0c0180 001c:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 001c:Call msacm32.drv.wodMessage(0000ffff,00000008,0014cb28,0014d3a0,00000020) ret=7e728e1f 001c:Call winmm.waveOutUnprepareHeader(00008001,0014d3a0,00000020) ret=7e0c00b6 001c:Call winealsa.drv.wodMessage(00000000,00000008,7e72ab2b,0014d3a0,00000020) ret=7e728e1f 001c:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 001c:Ret winmm.waveOutUnprepareHeader() retval=00000000 ret=7e0c00b6 001c:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 001c:Call msacm32.drv.wodMessage(0000ffff,00000008,0014cb28,0014d3c0,00000020) ret=7e728e1f 001c:Call winmm.waveOutUnprepareHeader(00008001,0014d3c0,00000020) ret=7e0c00b6 001c:Call winealsa.drv.wodMessage(00000000,00000008,7e72ab2b,0014d3c0,00000020) ret=7e728e1f 001c:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 001c:Ret winmm.waveOutUnprepareHeader() retval=00000000 ret=7e0c00b6 001c:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 001c:Call KERNEL32.CloseHandle(00000068) ret=7e7349fd 001c:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e7349fd 001c:Call ntdll.RtlFreeHeap(00110000,00000000,0014d3a0) ret=7e734a23 001c:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e734a23 001c:Call ntdll.RtlFreeHeap(00110000,00000000,00148cb8) ret=7e734a49 001c:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e734a49 001c:Call msacm32.drv.wodMessage(0000ffff,00000006,0014cb28,00000000,00000000) ret=7e728e1f 001c:Call winmm.waveOutClose(00008001) ret=7e0c01a5 001c:Call winealsa.drv.wodMessage(00000000,00000006,7e72ab2b,00000000,00000000) ret=7e728e1f 001c:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1b2580 001c:Ret KERNEL32.CreateEventW() retval=00000068 ret=7e1b2580 001c:Call KERNEL32.WaitForSingleObject(00000068,ffffffff) ret=7e1b2635 001e:Call KERNEL32.SetEvent(00000068) ret=7e1c4ea1 001e:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c4ea1 001e:Call KERNEL32.ExitThread(00000000) ret=7e1c4eb0 001e:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) 001e:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 001e:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) 001e:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) retval=1 001e:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) 001e:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 001e:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) 001e:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) retval=1 001e:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) 001e:Call KERNEL32.TlsGetValue(00000000) ret=7e3f4071 001e:Ret KERNEL32.TlsGetValue() retval=00000000 ret=7e3f4071 001e:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 001e:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) 001e:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 001c:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1b2635 001c:Call KERNEL32.CloseHandle(00000068) ret=7e1b2640 001c:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1b2640 001c:Call ntdll.RtlFreeHeap(00110000,00000000,0014c7d0) ret=7e1b24dc 001c:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e1b24dc 001c:Call ntdll.RtlDeleteCriticalSection(0013cefc) ret=7e1b24fb 001c:Ret ntdll.RtlDeleteCriticalSection() retval=00000000 ret=7e1b24fb 001c:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bc,0014cb28,00000000,00000000) ret=7e1c4643 001c:Call KERNEL32.IsBadReadPtr(0014cb28,0000002c) ret=7e0bdbc9 001c:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 001c:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bc,008ceaa4,00000000,00000000) ret=7e0bdf33 001c:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 001c:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 001c:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 001c:Call ntdll.RtlFreeHeap(00110000,00000000,0014cb60) ret=7e72ae0b 001c:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e72ae0b 001c:Ret winmm.waveOutClose() retval=00000000 ret=7e0c01a5 001c:Call ntdll.RtlFreeHeap(00110000,00000000,0014cb28) ret=7e0c01f7 001c:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e0c01f7 001c:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 001c:Call ntdll.RtlFreeHeap(00110000,00000000,0014cb00) ret=7e72ae0b 001c:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e72ae0b 0009:Call KERNEL32.WaitForSingleObject(00000070,ffffffff) ret=7e1b2635 0009:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1b2635 0009:Call KERNEL32.CloseHandle(00000070) ret=7e1b2640 0009:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1b2640 0009:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0009:Ret winmm.waveOutReset() retval=00000000 ret=7e0c0180 0009:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0009:Call KERNEL32.WaitForSingleObject(00000040,ffffffff) ret=7e73555a 001c:Call ntdll.RtlFreeHeap(00110000,00000000,00148c28) ret=7e731f79 001c:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e731f79 001c:Call KERNEL32.SetEvent(00000040) ret=7e7343a0 001c:Ret KERNEL32.SetEvent() retval=00000001 ret=7e7343a0 001c:Call KERNEL32.CloseHandle(00000064) ret=7e734340 001c:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e734340 001c:Call ntdll.RtlFreeHeap(00110000,00000000,0014cad8) ret=7e734360 001c:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e734360 001c:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) 001c:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 001c:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) 001c:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) retval=1 001c:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) 001c:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 001c:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) 001c:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) retval=1 001c:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) 001c:Call KERNEL32.TlsGetValue(00000000) ret=7e3f4071 001c:Ret KERNEL32.TlsGetValue() retval=00000000 ret=7e3f4071 001c:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 001c:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) 001c:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0009:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e73555a 0009:Call KERNEL32.ResetEvent(00000038) ret=7e735572 0009:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e735572 0009:Call KERNEL32.CreateThread(00000000,00000000,7e7348a0,0014b268,00000000,0033f598) ret=7e73560c 0020:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) 0020:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0020:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) 0020:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0020:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) 0020:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) retval=1 0020:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) 0020:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0020:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) 0020:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0020:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) 0020:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0020:Starting thread proc 0x7e7348a0 (arg=0x14b268) 0020:Call KERNEL32.FindResourceW(01000000,0000007c,7e741bde L"WAVE") ret=7e734ca3 0020:Ret KERNEL32.FindResourceW() retval=01014c40 ret=7e734ca3 0020:Call KERNEL32.LoadResource(01000000,01014c40) ret=7e734cb9 0020:Ret KERNEL32.LoadResource() retval=0104d668 ret=7e734cb9 0020:Call KERNEL32.LockResource(0104d668) ret=7e734cce 0020:Ret KERNEL32.LockResource() retval=0104d668 ret=7e734cce 0020:Call KERNEL32.FreeResource(0104d668) ret=7e734ce9 0020:Ret KERNEL32.FreeResource() retval=00000000 ret=7e734ce9 0020:Call ntdll.RtlAllocateHeap(00110000,00000008,0000005c) ret=7e733960 0020:Ret ntdll.RtlAllocateHeap() retval=00148c28 ret=7e733960 0020:Call KERNEL32.GetFileSize(ffffffff,00000000) ret=7e733ab9 0020:Ret KERNEL32.GetFileSize() retval=ffffffff ret=7e733ab9 0020:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7e733cf0 0020:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e733cf0 0020:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7e734e1c 0020:Ret ntdll.RtlAllocateHeap() retval=00148cb8 ret=7e734e1c 0020:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e734f1f 0020:Ret KERNEL32.CreateEventW() retval=00000068 ret=7e734f1f 0020:Call ntdll.RtlAllocateHeap(00110000,00000008,0000001c) ret=7e72abbe 0020:Ret ntdll.RtlAllocateHeap() retval=0014b290 ret=7e72abbe 0020:Call msacm32.drv.wodMessage(0000ffff,00000005,007ce918,007ce970,00030000) ret=7e728e1f 0020:Call ntdll.RtlAllocateHeap(00110000,00000000,0000002c) ret=7e0bfd8c 0020:Ret ntdll.RtlAllocateHeap() retval=0014b1d0 ret=7e0bfd8c 0020:Call winmm.waveOutGetNumDevs() ret=7e0bfdb5 0020:Ret winmm.waveOutGetNumDevs() retval=00000002 ret=7e0bfdb5 0020:Call winmm.waveOutOpen(0014b1d8,00000000,00148cb8,7e0bde60,0014b1d0,00030008) ret=7e0c0313 0020:Call ntdll.RtlAllocateHeap(00110000,00000008,0000001c) ret=7e72abbe 0020:Ret ntdll.RtlAllocateHeap() retval=0014b208 ret=7e72abbe 0020:Call winealsa.drv.wodMessage(00000000,00000005,007ce5b8,007ce610,00030008) ret=7e728e1f 0020:Call ntdll.RtlAllocateHeap(00110000,00000008,00000068) ret=7e1c6c82 0020:Ret ntdll.RtlAllocateHeap() retval=00148b18 ret=7e1c6c82 0020:Call ntdll.RtlAllocateHeap(00110000,00000008,00000300) ret=7e1b2459 0020:Ret ntdll.RtlAllocateHeap() retval=0014c7d0 ret=7e1b2459 0020:Call KERNEL32.InitializeCriticalSection(0013cefc) ret=7e1b2469 0020:Ret KERNEL32.InitializeCriticalSection() retval=00000001 ret=7e1b2469 0020:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1c73ab 0020:Ret KERNEL32.CreateEventW() retval=00000070 ret=7e1c73ab 0020:Call KERNEL32.CreateThread(00000000,00000000,7e1c5570,00000000,00000000,0013cedc) ret=7e1c73ef 0009:Ret KERNEL32.CreateThread() retval=00000064 ret=7e73560c 0009:Call KERNEL32.SetThreadPriority(00000064,0000000f) ret=7e73562d 0009:Ret KERNEL32.SetThreadPriority() retval=00000001 ret=7e73562d 0009:Ret winmm.PlaySoundW() retval=00000001 ret=01006aa0 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,0000000c) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c5928 ret=0100a7d2 0009:Call user32.GetClientRect(00010030,0033f608) ret=01005145 0009:Ret user32.GetClientRect() retval=00000001 ret=01005145 0009:Call user32.GetDC(00010030) ret=010051ad 0009:Ret user32.GetDC() retval=00000314 ret=010051ad 0009:Call gdi32.CreateCompatibleDC(00000314) ret=010051bc 0009:Ret gdi32.CreateCompatibleDC() retval=000024f4 ret=010051bc 0009:Call gdi32.CreateCompatibleDC(00000314) ret=010051ca 0009:Ret gdi32.CreateCompatibleDC() retval=00002500 ret=010051ca 0009:Call gdi32.CreateCompatibleDC(00000314) ret=010051d8 0009:Ret gdi32.CreateCompatibleDC() retval=0000250c ret=010051d8 0009:Call gdi32.CreateCompatibleBitmap(00000314,00000047,00000060) ret=010051f8 0009:Ret gdi32.CreateCompatibleBitmap() retval=00002518 ret=010051f8 0009:Call gdi32.CreateCompatibleBitmap(00000314,00000047,00000060) ret=01005212 0009:Ret gdi32.CreateCompatibleBitmap() retval=0000251c ret=01005212 0009:Call gdi32.CreateCompatibleBitmap(00000314,00000047,00000060) ret=0100522c 0009:Ret gdi32.CreateCompatibleBitmap() retval=00002520 ret=0100522c 0009:Call gdi32.SelectObject(000024f4,00002518) ret=01005246 0009:Ret gdi32.SelectObject() retval=0000006c ret=01005246 0009:Call gdi32.SelectObject(00002500,0000251c) ret=0100525a 0009:Ret gdi32.SelectObject() retval=0000006c ret=0100525a 0009:Call gdi32.SelectObject(0000250c,00002520) ret=0100526e 0009:Ret gdi32.SelectObject() retval=0000006c ret=0100526e 0009:Call user32.LoadBitmapW(01000000,0033f5a0 L"CARD42") ret=010028ff 0022:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) 0022:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0022:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) 0022:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0022:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) 0022:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) retval=1 0022:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) 0022:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0022:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) 0022:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0022:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) 0022:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0022:Starting thread proc 0x7e1c5570 (arg=(nil)) 0022:Call KERNEL32.SetEvent(00000070) ret=7e1c55aa 0022:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c55aa 0020:Ret KERNEL32.CreateThread() retval=000000dc ret=7e1c73ef 0020:Call KERNEL32.SetThreadPriority(000000dc,0000000f) ret=7e1c7413 0020:Ret KERNEL32.SetThreadPriority() retval=00000001 ret=7e1c7413 0020:Call KERNEL32.WaitForSingleObject(00000070,ffffffff) ret=7e1c742f 0020:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1c742f 0020:Call KERNEL32.CloseHandle(00000070) ret=7e1c7443 0020:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1c7443 0020:Call ntdll.RtlFreeHeap(00110000,00000000,00148b18) ret=7e1c7479 0020:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e1c7479 0020:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bb,0014b1d0,00000000,00000000) ret=7e1c4643 0020:Call KERNEL32.IsBadReadPtr(0014b1d0,0000002c) ret=7e0bdbc9 0020:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 0020:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bb,007ceaa4,00000000,00000000) ret=7e0bdf33 0020:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 0020:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 0020:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0020:Ret winmm.waveOutOpen() retval=00000000 ret=7e0c0313 0020:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0020:Call ntdll.RtlAllocateHeap(00110000,00000000,000039ac) ret=7e73520d 0020:Ret ntdll.RtlAllocateHeap() retval=0014d3a0 ret=7e73520d 0020:Call msacm32.drv.wodMessage(0000ffff,00000007,0014b1d0,0014d3a0,00000020) ret=7e728e1f 0020:Call winmm.waveOutPrepareHeader(00008001,0014d3a0,00000020) ret=7e0c09d8 0020:Call winealsa.drv.wodMessage(00000000,00000007,7e72ab2b,0014d3a0,00000020) ret=7e728e1f 0020:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 0020:Ret winmm.waveOutPrepareHeader() retval=00000000 ret=7e0c09d8 0020:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0020:Call msacm32.drv.wodMessage(0000ffff,00000007,0014b1d0,0014d3c0,00000020) ret=7e728e1f 0020:Call winmm.waveOutPrepareHeader(00008001,0014d3c0,00000020) ret=7e0c09d8 0020:Call winealsa.drv.wodMessage(00000000,00000007,7e72ab2b,0014d3c0,00000020) ret=7e728e1f 0020:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 0020:Ret winmm.waveOutPrepareHeader() retval=00000000 ret=7e0c09d8 0020:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0020:Call KERNEL32.WaitForSingleObject(00000038,00000000) ret=7e735343 0020:Ret KERNEL32.WaitForSingleObject() retval=00000102 ret=7e735343 0020:Call msacm32.drv.wodMessage(0000ffff,00000009,0014b1d0,0014d3a0,00000020) ret=7e728e1f 0020:Call winmm.waveOutWrite(00008001,0014d3a0,00000020) ret=7e0c09b5 0020:Call winealsa.drv.wodMessage(00000000,00000009,7e72ab2b,0014d3a0,00000020) ret=7e728e1f 0020:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0020:Ret winmm.waveOutWrite() retval=00000000 ret=7e0c09b5 0020:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0020:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 0020:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 0020:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 0020:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 0020:Call KERNEL32.WaitForSingleObject(00000068,ffffffff) ret=7e73429b 0009:Ret user32.LoadBitmapW() retval=00002530 ret=010028ff 0009:Call gdi32.CreateCompatibleDC(00002500) ret=01002909 0009:Ret gdi32.CreateCompatibleDC() retval=00002544 ret=01002909 0009:Call gdi32.SelectObject(00002544,00002530) ret=01002917 0009:Ret gdi32.SelectObject() retval=0000006c ret=01002917 0009:Call gdi32.BitBlt(00002500,00000000,00000000,00000047,00000060,00002544,00000000,00000000,00cc0020) ret=01002938 0009:Ret gdi32.BitBlt() retval=00000001 ret=01002938 0009:Call gdi32.SelectObject(00002544,0000006c) ret=0100293e 0009:Ret gdi32.SelectObject() retval=00002530 ret=0100293e 0009:Call gdi32.DeleteObject(00002530) ret=01002947 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01002947 0009:Call gdi32.DeleteDC(00002544) ret=0100294e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100294e 0009:Call gdi32.SetPixel(00002500,00000000,00000000,00008000) ret=01002969 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002969 0009:Call gdi32.SetPixel(00002500,00000001,00000000,00008000) ret=01002976 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002976 0009:Call gdi32.SetPixel(00002500,00000000,00000001,00008000) ret=01002982 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002982 0009:Call gdi32.SetPixel(00002500,00000046,00000000,00008000) ret=0100298f 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100298f 0009:Call gdi32.SetPixel(00002500,00000045,00000000,00008000) ret=0100299c 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100299c 0009:Call gdi32.SetPixel(00002500,00000046,00000001,00008000) ret=010029ab 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ab 0009:Call gdi32.SetPixel(00002500,00000000,0000005f,00008000) ret=010029bf 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029bf 0009:Call gdi32.SetPixel(00002500,00000001,0000005f,00008000) ret=010029d0 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029d0 0009:Call gdi32.SetPixel(00002500,00000000,0000005e,00008000) ret=010029de 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029de 0009:Call gdi32.SetPixel(00002500,00000046,0000005f,00008000) ret=010029ef 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ef 0009:Call gdi32.SetPixel(00002500,00000045,0000005f,00008000) ret=01002a00 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a00 0009:Call gdi32.SetPixel(00002500,00000046,0000005e,00008000) ret=01002a11 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a11 0009:Call user32.LoadBitmapW(01000000,010012c8 L"CARDBACK") ret=010028ff 0009:Ret user32.LoadBitmapW() retval=0000255c ret=010028ff 0009:Call gdi32.CreateCompatibleDC(000024f4) ret=01002909 0009:Ret gdi32.CreateCompatibleDC() retval=00002570 ret=01002909 0009:Call gdi32.SelectObject(00002570,0000255c) ret=01002917 0009:Ret gdi32.SelectObject() retval=0000006c ret=01002917 0009:Call gdi32.BitBlt(000024f4,00000000,00000000,00000047,00000060,00002570,00000000,00000000,00cc0020) ret=01002938 0009:Ret gdi32.BitBlt() retval=00000001 ret=01002938 0009:Call gdi32.SelectObject(00002570,0000006c) ret=0100293e 0009:Ret gdi32.SelectObject() retval=0000255c ret=0100293e 0009:Call gdi32.DeleteObject(0000255c) ret=01002947 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01002947 0009:Call gdi32.DeleteDC(00002570) ret=0100294e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100294e 0009:Call gdi32.SetPixel(000024f4,00000000,00000000,00008000) ret=01002969 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002969 0009:Call gdi32.SetPixel(000024f4,00000001,00000000,00008000) ret=01002976 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002976 0009:Call gdi32.SetPixel(000024f4,00000000,00000001,00008000) ret=01002982 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002982 0009:Call gdi32.SetPixel(000024f4,00000046,00000000,00008000) ret=0100298f 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100298f 0009:Call gdi32.SetPixel(000024f4,00000045,00000000,00008000) ret=0100299c 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100299c 0009:Call gdi32.SetPixel(000024f4,00000046,00000001,00008000) ret=010029ab 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ab 0009:Call gdi32.SetPixel(000024f4,00000000,0000005f,00008000) ret=010029bf 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029bf 0009:Call gdi32.SetPixel(000024f4,00000001,0000005f,00008000) ret=010029d0 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029d0 0009:Call gdi32.SetPixel(000024f4,00000000,0000005e,00008000) ret=010029de 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029de 0009:Call gdi32.SetPixel(000024f4,00000046,0000005f,00008000) ret=010029ef 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ef 0009:Call gdi32.SetPixel(000024f4,00000045,0000005f,00008000) ret=01002a00 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a00 0009:Call gdi32.SetPixel(000024f4,00000046,0000005e,00008000) ret=01002a11 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a11 0009:Call winmm.timeGetTime() ret=010047d1 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00003ab7 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00003ab7 ret=010047d1 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00003ab7 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00003ab7 ret=01004881 0009:Call gdi32.BitBlt(000024f4,00000000,00000000,00000048,00000061,000024f4,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00000314,00000459,00000258,00000047,00000060,00002500,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00003abf ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00003abf ret=01004881 0009:Call gdi32.BitBlt(0000250c,00000000,00000038,00000047,00000028,000024f4,00000000,00000038,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(0000250c,00000023,00000000,00000024,00000038,000024f4,00000023,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000024f4,00000024,00000028,00000024,00000039,000024f4,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(000024f4,00000000,00000000,00000047,00000028,00000314,00000435,00000230,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000024f4,00000000,00000028,00000024,00000038,00000314,00000435,00000258,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000435,00000230,00000047,00000060,00002500,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000459,00000290,00000047,00000028,0000250c,00000000,00000038,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000047c,00000258,00000024,00000038,0000250c,00000023,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00003ac7 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00003ac7 ret=01004881 0009:Call gdi32.BitBlt(0000250c,00000000,00000038,00000047,00000028,000024f4,00000000,00000038,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(0000250c,00000023,00000000,00000024,00000038,000024f4,00000023,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000024f4,00000024,00000028,00000024,00000039,000024f4,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(000024f4,00000000,00000000,00000047,00000028,00000314,00000411,00000208,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000024f4,00000000,00000028,00000024,00000038,00000314,00000411,00000230,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000411,00000208,00000047,00000060,00002500,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000435,00000268,00000047,00000028,0000250c,00000000,00000038,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000458,00000230,00000024,00000038,0000250c,00000023,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00003acf ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00003acf ret=01004881 0009:Call gdi32.BitBlt(0000250c,00000000,00000037,00000047,00000029,000024f4,00000000,00000037,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(0000250c,00000023,00000000,00000024,00000037,000024f4,00000023,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000024f4,00000024,00000029,00000024,00000038,000024f4,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(000024f4,00000000,00000000,00000047,00000029,00000314,000003ed,000001df,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000024f4,00000000,00000029,00000024,00000037,00000314,000003ed,00000208,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000003ed,000001df,00000047,00000060,00002500,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000411,0000023f,00000047,00000029,0000250c,00000000,00000037,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000434,00000208,00000024,00000037,0000250c,00000023,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00003ad7 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00003ad7 ret=01004881 0009:Call gdi32.BitBlt(0000250c,00000000,00000038,00000047,00000028,000024f4,00000000,00000038,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(0000250c,00000023,00000000,00000024,00000038,000024f4,00000023,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000024f4,00000024,00000028,00000024,00000039,000024f4,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(000024f4,00000000,00000000,00000047,00000028,00000314,000003c9,000001b7,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000024f4,00000000,00000028,00000024,00000038,00000314,000003c9,000001df,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000003c9,000001b7,00000047,00000060,00002500,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000003ed,00000217,00000047,00000028,0000250c,00000000,00000038,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000410,000001df,00000024,00000038,0000250c,00000023,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00003adf ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00003adf ret=01004881 0009:Call gdi32.BitBlt(0000250c,00000000,00000037,00000047,00000029,000024f4,00000000,00000037,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(0000250c,00000023,00000000,00000024,00000037,000024f4,00000023,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000024f4,00000024,00000029,00000024,00000038,000024f4,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(000024f4,00000000,00000000,00000047,00000029,00000314,000003a5,0000018e,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000024f4,00000000,00000029,00000024,00000037,00000314,000003a5,000001b7,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000003a5,0000018e,00000047,00000060,00002500,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000003c9,000001ee,00000047,00000029,0000250c,00000000,00000037,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,000003ec,000001b7,00000024,00000037,0000250c,00000023,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00003ae7 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00003ae7 ret=01004881 0009:Call gdi32.BitBlt(0000250c,00000000,00000038,00000047,00000028,000024f4,00000000,00000038,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(0000250c,00000023,00000000,00000024,00000038,000024f4,00000023,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000024f4,00000024,00000028,00000024,00000039,000024f4,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(000024f4,00000000,00000000,00000047,00000028,00000314,00000381,00000166,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000024f4,00000000,00000028,00000024,00000038,00000314,00000381,0000018e,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000381,00000166,00000047,00000060,00002500,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000003a5,000001c6,00000047,00000028,0000250c,00000000,00000038,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,000003c8,0000018e,00000024,00000038,0000250c,00000023,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00003aef ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00003aef ret=01004881 0009:Call gdi32.BitBlt(0000250c,00000000,00000037,00000047,00000029,000024f4,00000000,00000037,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(0000250c,00000022,00000000,00000025,00000037,000024f4,00000022,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000024f4,00000025,00000029,00000023,00000038,000024f4,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(000024f4,00000000,00000000,00000047,00000029,00000314,0000035c,0000013d,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000024f4,00000000,00000029,00000025,00000037,00000314,0000035c,00000166,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,0000035c,0000013d,00000047,00000060,00002500,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000381,0000019d,00000047,00000029,0000250c,00000000,00000037,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,000003a3,00000166,00000025,00000037,0000250c,00000022,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00003af7 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00003af7 ret=01004881 0009:Call gdi32.BitBlt(0000250c,00000000,00000038,00000047,00000028,000024f4,00000000,00000038,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(0000250c,00000023,00000000,00000024,00000038,000024f4,00000023,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000024f4,00000024,00000028,00000024,00000039,000024f4,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(000024f4,00000000,00000000,00000047,00000028,00000314,00000338,00000115,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000024f4,00000000,00000028,00000024,00000038,00000314,00000338,0000013d,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000338,00000115,00000047,00000060,00002500,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,0000035c,00000175,00000047,00000028,0000250c,00000000,00000038,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000037f,0000013d,00000024,00000038,0000250c,00000023,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00003aff ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00003aff ret=01004881 0009:Call gdi32.BitBlt(0000250c,00000000,00000037,00000047,00000029,000024f4,00000000,00000037,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(0000250c,00000023,00000000,00000024,00000037,000024f4,00000023,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000024f4,00000024,00000029,00000024,00000038,000024f4,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(000024f4,00000000,00000000,00000047,00000029,00000314,00000314,000000ec,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000024f4,00000000,00000029,00000024,00000037,00000314,00000314,00000115,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000314,000000ec,00000047,00000060,00002500,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000338,0000014c,00000047,00000029,0000250c,00000000,00000037,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000035b,00000115,00000024,00000037,0000250c,00000023,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00003b07 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00003b07 ret=01004881 0009:Call gdi32.BitBlt(0000250c,00000000,00000038,00000047,00000028,000024f4,00000000,00000038,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(0000250c,00000023,00000000,00000024,00000038,000024f4,00000023,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000024f4,00000024,00000028,00000024,00000039,000024f4,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(000024f4,00000000,00000000,00000047,00000028,00000314,000002f0,000000c4,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000024f4,00000000,00000028,00000024,00000038,00000314,000002f0,000000ec,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000002f0,000000c4,00000047,00000060,00002500,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000314,00000124,00000047,00000028,0000250c,00000000,00000038,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000337,000000ec,00000024,00000038,0000250c,00000023,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00003b0f ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00003b0f ret=01004881 0009:Call gdi32.BitBlt(0000250c,00000000,00000037,00000047,00000029,000024f4,00000000,00000037,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(0000250c,00000023,00000000,00000024,00000037,000024f4,00000023,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000024f4,00000024,00000029,00000024,00000038,000024f4,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(000024f4,00000000,00000000,00000047,00000029,00000314,000002cc,0000009b,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000024f4,00000000,00000029,00000024,00000037,00000314,000002cc,000000c4,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000002cc,0000009b,00000047,00000060,00002500,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000002f0,000000fb,00000047,00000029,0000250c,00000000,00000037,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000313,000000c4,00000024,00000037,0000250c,00000023,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00003b17 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00003b17 ret=01004881 0009:Call gdi32.BitBlt(0000250c,00000000,00000038,00000047,00000028,000024f4,00000000,00000038,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(0000250c,00000023,00000000,00000024,00000038,000024f4,00000023,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000024f4,00000024,00000028,00000024,00000039,000024f4,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(000024f4,00000000,00000000,00000047,00000028,00000314,000002a8,00000073,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000024f4,00000000,00000028,00000024,00000038,00000314,000002a8,0000009b,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000002a8,00000073,00000047,00000060,00002500,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000002cc,000000d3,00000047,00000028,0000250c,00000000,00000038,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,000002ef,0000009b,00000024,00000038,0000250c,00000023,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00003b1f ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00003b1f ret=01004881 0009:Call gdi32.BitBlt(0000250c,00000000,0000004b,00000047,00000015,000024f4,00000000,0000004b,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(0000250c,00000034,00000000,00000013,0000004b,000024f4,00000034,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(000024f4,00000013,00000015,00000035,0000004c,000024f4,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(000024f4,00000000,00000000,00000047,00000015,00000314,00000295,0000005e,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(000024f4,00000000,00000015,00000013,0000004b,00000314,00000295,00000073,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000295,0000005e,00000047,00000060,00002500,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000002a8,000000be,00000047,00000015,0000250c,00000000,0000004b,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,000002dc,00000073,00000013,0000004b,0000250c,00000034,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call gdi32.SelectObject(000024f4,0000006c) ret=01005316 0009:Ret gdi32.SelectObject() retval=00002518 ret=01005316 0009:Call gdi32.SelectObject(00002500,0000006c) ret=01005324 0009:Ret gdi32.SelectObject() retval=0000251c ret=01005324 0009:Call gdi32.SelectObject(0000250c,0000006c) ret=01005332 0009:Ret gdi32.SelectObject() retval=00002520 ret=01005332 0009:Call gdi32.DeleteObject(00002518) ret=01005340 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005340 0009:Call gdi32.DeleteObject(0000251c) ret=01005348 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005348 0009:Call gdi32.DeleteObject(00002520) ret=01005350 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005350 0009:Call gdi32.DeleteDC(000024f4) ret=0100535e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100535e 0009:Call gdi32.DeleteDC(00002500) ret=01005366 0009:Ret gdi32.DeleteDC() retval=00000001 ret=01005366 0009:Call gdi32.DeleteDC(0000250c) ret=0100536e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100536e 0009:Call user32.ReleaseDC(00010030,00000314) ret=0100537c 0009:Ret user32.ReleaseDC() retval=00000001 ret=0100537c 0009:Call user32.InvalidateRect(00010030,0033f618,00000000) ret=0100538a 0009:Ret user32.InvalidateRect() retval=00000001 ret=0100538a 0009:Call KERNEL32.GetModuleHandleW(00000000) ret=01006a97 0009:Ret KERNEL32.GetModuleHandleW() retval=01000000 ret=01006a97 0009:Call winmm.PlaySoundW(0000007c,01000000,00040007) ret=01006aa0 0009:Call ntdll.RtlAllocateHeap(00110000,00000008,0000001c) ret=7e7356bc 0009:Ret ntdll.RtlAllocateHeap() retval=0014bef8 ret=7e7356bc 0009:Call KERNEL32.ResetEvent(00000040) ret=7e735513 0009:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e735513 0009:Call KERNEL32.SetEvent(00000038) ret=7e735520 0009:Ret KERNEL32.SetEvent() retval=00000001 ret=7e735520 0009:Call msacm32.drv.wodMessage(0000ffff,0000000c,0014b1d0,00000000,00000000) ret=7e728e1f 0009:Call winmm.waveOutReset(00008001) ret=7e0c0180 0009:Call winealsa.drv.wodMessage(00000000,0000000c,7e72ab2b,00000000,00000000) ret=7e728e1f 0009:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1b2580 0009:Ret KERNEL32.CreateEventW() retval=00000070 ret=7e1b2580 0022:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bd,0014b1d0,0014d3a0,00000000) ret=7e1c4643 0022:Call KERNEL32.IsBadReadPtr(0014b1d0,0000002c) ret=7e0bdbc9 0022:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 0022:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bd,007ceaa4,0014d3a0,00000000) ret=7e0bdf33 0022:Call KERNEL32.SetEvent(00000068) ret=7e7341f6 0022:Ret KERNEL32.SetEvent() retval=00000001 ret=7e7341f6 0022:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 0022:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 0022:Call KERNEL32.SetEvent(00000070) ret=7e1c4f3d 0022:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c4f3d 0020:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e73429b 0020:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 0020:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 0020:Call msacm32.drv.wodMessage(0000ffff,0000000c,0014b1d0,00000000,00000000) ret=7e728e1f 0020:Call winmm.waveOutReset(00008001) ret=7e0c0180 0020:Call winealsa.drv.wodMessage(00000000,0000000c,7e72ab2b,00000000,00000000) ret=7e728e1f 0020:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1b2580 0020:Ret KERNEL32.CreateEventW() retval=000000e0 ret=7e1b2580 0020:Call KERNEL32.WaitForSingleObject(000000e0,ffffffff) ret=7e1b2635 0022:Call KERNEL32.SetEvent(000000e0) ret=7e1c4f3d 0022:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c4f3d 0020:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1b2635 0020:Call KERNEL32.CloseHandle(000000e0) ret=7e1b2640 0020:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1b2640 0020:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0020:Ret winmm.waveOutReset() retval=00000000 ret=7e0c0180 0020:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0020:Call msacm32.drv.wodMessage(0000ffff,00000008,0014b1d0,0014d3a0,00000020) ret=7e728e1f 0020:Call winmm.waveOutUnprepareHeader(00008001,0014d3a0,00000020) ret=7e0c00b6 0020:Call winealsa.drv.wodMessage(00000000,00000008,7e72ab2b,0014d3a0,00000020) ret=7e728e1f 0020:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 0020:Ret winmm.waveOutUnprepareHeader() retval=00000000 ret=7e0c00b6 0020:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0020:Call msacm32.drv.wodMessage(0000ffff,00000008,0014b1d0,0014d3c0,00000020) ret=7e728e1f 0020:Call winmm.waveOutUnprepareHeader(00008001,0014d3c0,00000020) ret=7e0c00b6 0020:Call winealsa.drv.wodMessage(00000000,00000008,7e72ab2b,0014d3c0,00000020) ret=7e728e1f 0020:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 0020:Ret winmm.waveOutUnprepareHeader() retval=00000000 ret=7e0c00b6 0020:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0020:Call KERNEL32.CloseHandle(00000068) ret=7e7349fd 0020:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e7349fd 0020:Call ntdll.RtlFreeHeap(00110000,00000000,0014d3a0) ret=7e734a23 0020:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e734a23 0020:Call ntdll.RtlFreeHeap(00110000,00000000,00148cb8) ret=7e734a49 0020:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e734a49 0020:Call msacm32.drv.wodMessage(0000ffff,00000006,0014b1d0,00000000,00000000) ret=7e728e1f 0020:Call winmm.waveOutClose(00008001) ret=7e0c01a5 0020:Call winealsa.drv.wodMessage(00000000,00000006,7e72ab2b,00000000,00000000) ret=7e728e1f 0020:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1b2580 0020:Ret KERNEL32.CreateEventW() retval=00000068 ret=7e1b2580 0020:Call KERNEL32.WaitForSingleObject(00000068,ffffffff) ret=7e1b2635 0022:Call KERNEL32.SetEvent(00000068) ret=7e1c4ea1 0022:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c4ea1 0022:Call KERNEL32.ExitThread(00000000) ret=7e1c4eb0 0022:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) 0022:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0022:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) 0022:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0022:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) 0022:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0022:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) 0022:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) retval=1 0022:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) 0022:Call KERNEL32.TlsGetValue(00000000) ret=7e3f4071 0022:Ret KERNEL32.TlsGetValue() retval=00000000 ret=7e3f4071 0022:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0022:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) 0022:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0020:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1b2635 0020:Call KERNEL32.CloseHandle(00000068) ret=7e1b2640 0020:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1b2640 0020:Call ntdll.RtlFreeHeap(00110000,00000000,0014c7d0) ret=7e1b24dc 0020:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e1b24dc 0020:Call ntdll.RtlDeleteCriticalSection(0013cefc) ret=7e1b24fb 0020:Ret ntdll.RtlDeleteCriticalSection() retval=00000000 ret=7e1b24fb 0020:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bc,0014b1d0,00000000,00000000) ret=7e1c4643 0020:Call KERNEL32.IsBadReadPtr(0014b1d0,0000002c) ret=7e0bdbc9 0020:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 0020:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bc,007ceaa4,00000000,00000000) ret=7e0bdf33 0020:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 0020:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 0020:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0020:Call ntdll.RtlFreeHeap(00110000,00000000,0014b208) ret=7e72ae0b 0020:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e72ae0b 0020:Ret winmm.waveOutClose() retval=00000000 ret=7e0c01a5 0020:Call ntdll.RtlFreeHeap(00110000,00000000,0014b1d0) ret=7e0c01f7 0020:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e0c01f7 0020:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0020:Call ntdll.RtlFreeHeap(00110000,00000000,0014b290) ret=7e72ae0b 0020:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e72ae0b 0009:Call KERNEL32.WaitForSingleObject(00000070,ffffffff) ret=7e1b2635 0009:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1b2635 0009:Call KERNEL32.CloseHandle(00000070) ret=7e1b2640 0009:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1b2640 0009:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0009:Ret winmm.waveOutReset() retval=00000000 ret=7e0c0180 0009:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0009:Call KERNEL32.WaitForSingleObject(00000040,ffffffff) ret=7e73555a 0020:Call ntdll.RtlFreeHeap(00110000,00000000,00148c28) ret=7e731f79 0020:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e731f79 0020:Call KERNEL32.SetEvent(00000040) ret=7e7343a0 0020:Ret KERNEL32.SetEvent() retval=00000001 ret=7e7343a0 0020:Call KERNEL32.CloseHandle(00000064) ret=7e734340 0020:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e734340 0020:Call ntdll.RtlFreeHeap(00110000,00000000,0014b268) ret=7e734360 0020:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e734360 0020:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) 0020:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0020:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) 0020:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0020:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) 0020:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0020:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) 0020:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) retval=1 0020:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) 0020:Call KERNEL32.TlsGetValue(00000000) ret=7e3f4071 0020:Ret KERNEL32.TlsGetValue() retval=00000000 ret=7e3f4071 0020:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0020:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) 0020:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0009:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e73555a 0009:Call KERNEL32.ResetEvent(00000038) ret=7e735572 0009:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e735572 0009:Call KERNEL32.CreateThread(00000000,00000000,7e7348a0,0014bef8,00000000,0033f598) ret=7e73560c 0024:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) 0024:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0024:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) 0024:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0024:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) 0024:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) retval=1 0024:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) 0024:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0024:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) 0024:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0024:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) 0024:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0024:Starting thread proc 0x7e7348a0 (arg=0x14bef8) 0024:Call KERNEL32.FindResourceW(01000000,0000007c,7e741bde L"WAVE") ret=7e734ca3 0024:Ret KERNEL32.FindResourceW() retval=01014c40 ret=7e734ca3 0024:Call KERNEL32.LoadResource(01000000,01014c40) ret=7e734cb9 0024:Ret KERNEL32.LoadResource() retval=0104d668 ret=7e734cb9 0024:Call KERNEL32.LockResource(0104d668) ret=7e734cce 0024:Ret KERNEL32.LockResource() retval=0104d668 ret=7e734cce 0024:Call KERNEL32.FreeResource(0104d668) ret=7e734ce9 0024:Ret KERNEL32.FreeResource() retval=00000000 ret=7e734ce9 0024:Call ntdll.RtlAllocateHeap(00110000,00000008,0000005c) ret=7e733960 0024:Ret ntdll.RtlAllocateHeap() retval=00148c28 ret=7e733960 0024:Call KERNEL32.GetFileSize(ffffffff,00000000) ret=7e733ab9 0024:Ret KERNEL32.GetFileSize() retval=ffffffff ret=7e733ab9 0024:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7e733cf0 0024:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e733cf0 0024:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7e734e1c 0024:Ret ntdll.RtlAllocateHeap() retval=00148cb8 ret=7e734e1c 0024:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e734f1f 0024:Ret KERNEL32.CreateEventW() retval=00000068 ret=7e734f1f 0024:Call ntdll.RtlAllocateHeap(00110000,00000008,0000001c) ret=7e72abbe 0024:Ret ntdll.RtlAllocateHeap() retval=0014b1d0 ret=7e72abbe 0024:Call msacm32.drv.wodMessage(0000ffff,00000005,008ce918,008ce970,00030000) ret=7e728e1f 0024:Call ntdll.RtlAllocateHeap(00110000,00000000,0000002c) ret=7e0bfd8c 0024:Ret ntdll.RtlAllocateHeap() retval=0014b1f8 ret=7e0bfd8c 0024:Call winmm.waveOutGetNumDevs() ret=7e0bfdb5 0024:Ret winmm.waveOutGetNumDevs() retval=00000002 ret=7e0bfdb5 0024:Call winmm.waveOutOpen(0014b200,00000000,00148cb8,7e0bde60,0014b1f8,00030008) ret=7e0c0313 0024:Call ntdll.RtlAllocateHeap(00110000,00000008,0000001c) ret=7e72abbe 0024:Ret ntdll.RtlAllocateHeap() retval=0014b230 ret=7e72abbe 0024:Call winealsa.drv.wodMessage(00000000,00000005,008ce5b8,008ce610,00030008) ret=7e728e1f 0024:Call ntdll.RtlAllocateHeap(00110000,00000008,00000068) ret=7e1c6c82 0024:Ret ntdll.RtlAllocateHeap() retval=0014b258 ret=7e1c6c82 0024:Call ntdll.RtlAllocateHeap(00110000,00000008,00000300) ret=7e1b2459 0024:Ret ntdll.RtlAllocateHeap() retval=0014c7d0 ret=7e1b2459 0024:Call KERNEL32.InitializeCriticalSection(0013cefc) ret=7e1b2469 0024:Ret KERNEL32.InitializeCriticalSection() retval=00000001 ret=7e1b2469 0024:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1c73ab 0024:Ret KERNEL32.CreateEventW() retval=00000070 ret=7e1c73ab 0024:Call KERNEL32.CreateThread(00000000,00000000,7e1c5570,00000000,00000000,0013cedc) ret=7e1c73ef 0009:Ret KERNEL32.CreateThread() retval=00000064 ret=7e73560c 0009:Call KERNEL32.SetThreadPriority(00000064,0000000f) ret=7e73562d 0009:Ret KERNEL32.SetThreadPriority() retval=00000001 ret=7e73562d 0009:Ret winmm.PlaySoundW() retval=00000001 ret=01006aa0 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,0000000c) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c5940 ret=0100a7d2 0009:Call user32.GetClientRect(00010030,0033f608) ret=01005145 0009:Ret user32.GetClientRect() retval=00000001 ret=01005145 0009:Call user32.GetDC(00010030) ret=010051ad 0009:Ret user32.GetDC() retval=00000314 ret=010051ad 0009:Call gdi32.CreateCompatibleDC(00000314) ret=010051bc 0009:Ret gdi32.CreateCompatibleDC() retval=00002580 ret=010051bc 0009:Call gdi32.CreateCompatibleDC(00000314) ret=010051ca 0009:Ret gdi32.CreateCompatibleDC() retval=0000258c ret=010051ca 0009:Call gdi32.CreateCompatibleDC(00000314) ret=010051d8 0009:Ret gdi32.CreateCompatibleDC() retval=00002598 ret=010051d8 0009:Call gdi32.CreateCompatibleBitmap(00000314,00000047,00000060) ret=010051f8 0009:Ret gdi32.CreateCompatibleBitmap() retval=000025a4 ret=010051f8 0009:Call gdi32.CreateCompatibleBitmap(00000314,00000047,00000060) ret=01005212 0009:Ret gdi32.CreateCompatibleBitmap() retval=000025a8 ret=01005212 0009:Call gdi32.CreateCompatibleBitmap(00000314,00000047,00000060) ret=0100522c 0009:Ret gdi32.CreateCompatibleBitmap() retval=000025ac ret=0100522c 0009:Call gdi32.SelectObject(00002580,000025a4) ret=01005246 0009:Ret gdi32.SelectObject() retval=0000006c ret=01005246 0009:Call gdi32.SelectObject(0000258c,000025a8) ret=0100525a 0009:Ret gdi32.SelectObject() retval=0000006c ret=0100525a 0009:Call gdi32.SelectObject(00002598,000025ac) ret=0100526e 0009:Ret gdi32.SelectObject() retval=0000006c ret=0100526e 0009:Call user32.LoadBitmapW(01000000,0033f5a0 L"CARD47") ret=010028ff 0026:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) 0026:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0026:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) 0026:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0026:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) 0026:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) retval=1 0026:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) 0026:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0026:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) 0026:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0026:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) 0026:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0026:Starting thread proc 0x7e1c5570 (arg=(nil)) 0026:Call KERNEL32.SetEvent(00000070) ret=7e1c55aa 0026:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c55aa 0024:Ret KERNEL32.CreateThread() retval=000000e0 ret=7e1c73ef 0024:Call KERNEL32.SetThreadPriority(000000e0,0000000f) ret=7e1c7413 0024:Ret KERNEL32.SetThreadPriority() retval=00000001 ret=7e1c7413 0024:Call KERNEL32.WaitForSingleObject(00000070,ffffffff) ret=7e1c742f 0024:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1c742f 0024:Call KERNEL32.CloseHandle(00000070) ret=7e1c7443 0024:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1c7443 0024:Call ntdll.RtlFreeHeap(00110000,00000000,0014b258) ret=7e1c7479 0024:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e1c7479 0024:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bb,0014b1f8,00000000,00000000) ret=7e1c4643 0024:Call KERNEL32.IsBadReadPtr(0014b1f8,0000002c) ret=7e0bdbc9 0024:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 0024:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bb,008ceaa4,00000000,00000000) ret=7e0bdf33 0024:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 0024:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 0024:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0024:Ret winmm.waveOutOpen() retval=00000000 ret=7e0c0313 0024:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0024:Call ntdll.RtlAllocateHeap(00110000,00000000,000039ac) ret=7e73520d 0024:Ret ntdll.RtlAllocateHeap() retval=0014d3a0 ret=7e73520d 0024:Call msacm32.drv.wodMessage(0000ffff,00000007,0014b1f8,0014d3a0,00000020) ret=7e728e1f 0024:Call winmm.waveOutPrepareHeader(00008001,0014d3a0,00000020) ret=7e0c09d8 0024:Call winealsa.drv.wodMessage(00000000,00000007,7e72ab2b,0014d3a0,00000020) ret=7e728e1f 0024:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 0024:Ret winmm.waveOutPrepareHeader() retval=00000000 ret=7e0c09d8 0024:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0024:Call msacm32.drv.wodMessage(0000ffff,00000007,0014b1f8,0014d3c0,00000020) ret=7e728e1f 0024:Call winmm.waveOutPrepareHeader(00008001,0014d3c0,00000020) ret=7e0c09d8 0024:Call winealsa.drv.wodMessage(00000000,00000007,7e72ab2b,0014d3c0,00000020) ret=7e728e1f 0024:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 0024:Ret winmm.waveOutPrepareHeader() retval=00000000 ret=7e0c09d8 0024:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0024:Call KERNEL32.WaitForSingleObject(00000038,00000000) ret=7e735343 0024:Ret KERNEL32.WaitForSingleObject() retval=00000102 ret=7e735343 0024:Call msacm32.drv.wodMessage(0000ffff,00000009,0014b1f8,0014d3a0,00000020) ret=7e728e1f 0024:Call winmm.waveOutWrite(00008001,0014d3a0,00000020) ret=7e0c09b5 0024:Call winealsa.drv.wodMessage(00000000,00000009,7e72ab2b,0014d3a0,00000020) ret=7e728e1f 0024:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0024:Ret winmm.waveOutWrite() retval=00000000 ret=7e0c09b5 0024:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0024:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 0024:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 0024:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 0024:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 0024:Call KERNEL32.WaitForSingleObject(00000068,ffffffff) ret=7e73429b 0009:Ret user32.LoadBitmapW() retval=000025bc ret=010028ff 0009:Call gdi32.CreateCompatibleDC(0000258c) ret=01002909 0009:Ret gdi32.CreateCompatibleDC() retval=000025d0 ret=01002909 0009:Call gdi32.SelectObject(000025d0,000025bc) ret=01002917 0009:Ret gdi32.SelectObject() retval=0000006c ret=01002917 0009:Call gdi32.BitBlt(0000258c,00000000,00000000,00000047,00000060,000025d0,00000000,00000000,00cc0020) ret=01002938 0009:Ret gdi32.BitBlt() retval=00000001 ret=01002938 0009:Call gdi32.SelectObject(000025d0,0000006c) ret=0100293e 0009:Ret gdi32.SelectObject() retval=000025bc ret=0100293e 0009:Call gdi32.DeleteObject(000025bc) ret=01002947 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01002947 0009:Call gdi32.DeleteDC(000025d0) ret=0100294e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100294e 0009:Call gdi32.SetPixel(0000258c,00000000,00000000,00008000) ret=01002969 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002969 0009:Call gdi32.SetPixel(0000258c,00000001,00000000,00008000) ret=01002976 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002976 0009:Call gdi32.SetPixel(0000258c,00000000,00000001,00008000) ret=01002982 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002982 0009:Call gdi32.SetPixel(0000258c,00000046,00000000,00008000) ret=0100298f 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100298f 0009:Call gdi32.SetPixel(0000258c,00000045,00000000,00008000) ret=0100299c 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100299c 0009:Call gdi32.SetPixel(0000258c,00000046,00000001,00008000) ret=010029ab 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ab 0009:Call gdi32.SetPixel(0000258c,00000000,0000005f,00008000) ret=010029bf 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029bf 0009:Call gdi32.SetPixel(0000258c,00000001,0000005f,00008000) ret=010029d0 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029d0 0009:Call gdi32.SetPixel(0000258c,00000000,0000005e,00008000) ret=010029de 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029de 0009:Call gdi32.SetPixel(0000258c,00000046,0000005f,00008000) ret=010029ef 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ef 0009:Call gdi32.SetPixel(0000258c,00000045,0000005f,00008000) ret=01002a00 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a00 0009:Call gdi32.SetPixel(0000258c,00000046,0000005e,00008000) ret=01002a11 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a11 0009:Call user32.LoadBitmapW(01000000,010012c8 L"CARDBACK") ret=010028ff 0009:Ret user32.LoadBitmapW() retval=000025e8 ret=010028ff 0009:Call gdi32.CreateCompatibleDC(00002580) ret=01002909 0009:Ret gdi32.CreateCompatibleDC() retval=000025fc ret=01002909 0009:Call gdi32.SelectObject(000025fc,000025e8) ret=01002917 0009:Ret gdi32.SelectObject() retval=0000006c ret=01002917 0009:Call gdi32.BitBlt(00002580,00000000,00000000,00000047,00000060,000025fc,00000000,00000000,00cc0020) ret=01002938 0009:Ret gdi32.BitBlt() retval=00000001 ret=01002938 0009:Call gdi32.SelectObject(000025fc,0000006c) ret=0100293e 0009:Ret gdi32.SelectObject() retval=000025e8 ret=0100293e 0009:Call gdi32.DeleteObject(000025e8) ret=01002947 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01002947 0009:Call gdi32.DeleteDC(000025fc) ret=0100294e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100294e 0009:Call gdi32.SetPixel(00002580,00000000,00000000,00008000) ret=01002969 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002969 0009:Call gdi32.SetPixel(00002580,00000001,00000000,00008000) ret=01002976 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002976 0009:Call gdi32.SetPixel(00002580,00000000,00000001,00008000) ret=01002982 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002982 0009:Call gdi32.SetPixel(00002580,00000046,00000000,00008000) ret=0100298f 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100298f 0009:Call gdi32.SetPixel(00002580,00000045,00000000,00008000) ret=0100299c 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100299c 0009:Call gdi32.SetPixel(00002580,00000046,00000001,00008000) ret=010029ab 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ab 0009:Call gdi32.SetPixel(00002580,00000000,0000005f,00008000) ret=010029bf 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029bf 0009:Call gdi32.SetPixel(00002580,00000001,0000005f,00008000) ret=010029d0 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029d0 0009:Call gdi32.SetPixel(00002580,00000000,0000005e,00008000) ret=010029de 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029de 0009:Call gdi32.SetPixel(00002580,00000046,0000005f,00008000) ret=010029ef 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ef 0009:Call gdi32.SetPixel(00002580,00000045,0000005f,00008000) ret=01002a00 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a00 0009:Call gdi32.SetPixel(00002580,00000046,0000005e,00008000) ret=01002a11 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a11 0009:Call winmm.timeGetTime() ret=010047d1 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00003b59 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00003b59 ret=010047d1 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00003b59 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00003b59 ret=01004881 0009:Call gdi32.BitBlt(00002580,00000000,00000000,00000048,00000061,00002580,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00000314,00000459,00000258,00000047,00000060,0000258c,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00003b5f ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00003b5f ret=01004881 0009:Call gdi32.BitBlt(00002598,00000000,00000042,00000047,0000001e,00002580,00000000,00000042,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00002598,00000034,00000000,00000013,00000042,00002580,00000034,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00002580,00000013,0000001e,00000035,00000043,00002580,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00002580,00000000,00000000,00000047,0000001e,00000314,00000446,0000023a,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00002580,00000000,0000001e,00000013,00000042,00000314,00000446,00000258,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000446,0000023a,00000047,00000060,0000258c,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000459,0000029a,00000047,0000001e,00002598,00000000,00000042,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000048d,00000258,00000013,00000042,00002598,00000034,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00003b67 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00003b67 ret=01004881 0009:Call gdi32.BitBlt(00002598,00000000,00000038,00000047,00000028,00002580,00000000,00000038,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00002598,0000002c,00000000,0000001b,00000038,00002580,0000002c,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00002580,0000001b,00000028,0000002d,00000039,00002580,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00002580,00000000,00000000,00000047,00000028,00000314,0000042b,00000212,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00002580,00000000,00000028,0000001b,00000038,00000314,0000042b,0000023a,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,0000042b,00000212,00000047,00000060,0000258c,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000446,00000272,00000047,00000028,00002598,00000000,00000038,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000472,0000023a,0000001b,00000038,00002598,0000002c,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00003b6f ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00003b6f ret=01004881 0009:Call gdi32.BitBlt(00002598,00000000,00000037,00000047,00000029,00002580,00000000,00000037,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00002598,0000002d,00000000,0000001a,00000037,00002580,0000002d,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00002580,0000001a,00000029,0000002e,00000038,00002580,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00002580,00000000,00000000,00000047,00000029,00000314,00000411,000001e9,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00002580,00000000,00000029,0000001a,00000037,00000314,00000411,00000212,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000411,000001e9,00000047,00000060,0000258c,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,0000042b,00000249,00000047,00000029,00002598,00000000,00000037,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000458,00000212,0000001a,00000037,00002598,0000002d,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00003b77 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00003b77 ret=01004881 0009:Call gdi32.BitBlt(00002598,00000000,00000038,00000047,00000028,00002580,00000000,00000038,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00002598,0000002d,00000000,0000001a,00000038,00002580,0000002d,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00002580,0000001a,00000028,0000002e,00000039,00002580,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00002580,00000000,00000000,00000047,00000028,00000314,000003f7,000001c1,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00002580,00000000,00000028,0000001a,00000038,00000314,000003f7,000001e9,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000003f7,000001c1,00000047,00000060,0000258c,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000411,00000221,00000047,00000028,00002598,00000000,00000038,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000043e,000001e9,0000001a,00000038,00002598,0000002d,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00003b7f ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00003b7f ret=01004881 0009:Call gdi32.BitBlt(00002598,00000000,00000037,00000047,00000029,00002580,00000000,00000037,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00002598,0000002c,00000000,0000001b,00000037,00002580,0000002c,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00002580,0000001b,00000029,0000002d,00000038,00002580,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00002580,00000000,00000000,00000047,00000029,00000314,000003dc,00000198,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00002580,00000000,00000029,0000001b,00000037,00000314,000003dc,000001c1,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000003dc,00000198,00000047,00000060,0000258c,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000003f7,000001f8,00000047,00000029,00002598,00000000,00000037,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000423,000001c1,0000001b,00000037,00002598,0000002c,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00003b87 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00003b87 ret=01004881 0009:Call gdi32.BitBlt(00002598,00000000,00000038,00000047,00000028,00002580,00000000,00000038,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00002598,0000002d,00000000,0000001a,00000038,00002580,0000002d,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00002580,0000001a,00000028,0000002e,00000039,00002580,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00002580,00000000,00000000,00000047,00000028,00000314,000003c2,00000170,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00002580,00000000,00000028,0000001a,00000038,00000314,000003c2,00000198,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000003c2,00000170,00000047,00000060,0000258c,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000003dc,000001d0,00000047,00000028,00002598,00000000,00000038,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000409,00000198,0000001a,00000038,00002598,0000002d,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00003b8f ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00003b8f ret=01004881 0009:Call gdi32.BitBlt(00002598,00000000,00000037,00000047,00000029,00002580,00000000,00000037,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00002598,0000002c,00000000,0000001b,00000037,00002580,0000002c,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00002580,0000001b,00000029,0000002d,00000038,00002580,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00002580,00000000,00000000,00000047,00000029,00000314,000003a7,00000147,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00002580,00000000,00000029,0000001b,00000037,00000314,000003a7,00000170,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000003a7,00000147,00000047,00000060,0000258c,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000003c2,000001a7,00000047,00000029,00002598,00000000,00000037,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,000003ee,00000170,0000001b,00000037,00002598,0000002c,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00003b97 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00003b97 ret=01004881 0009:Call gdi32.BitBlt(00002598,00000000,00000038,00000047,00000028,00002580,00000000,00000038,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00002598,0000002d,00000000,0000001a,00000038,00002580,0000002d,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00002580,0000001a,00000028,0000002e,00000039,00002580,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00002580,00000000,00000000,00000047,00000028,00000314,0000038d,0000011f,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00002580,00000000,00000028,0000001a,00000038,00000314,0000038d,00000147,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,0000038d,0000011f,00000047,00000060,0000258c,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000003a7,0000017f,00000047,00000028,00002598,00000000,00000038,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,000003d4,00000147,0000001a,00000038,00002598,0000002d,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00003b9f ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00003b9f ret=01004881 0009:Call gdi32.BitBlt(00002598,00000000,00000037,00000047,00000029,00002580,00000000,00000037,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00002598,0000002d,00000000,0000001a,00000037,00002580,0000002d,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00002580,0000001a,00000029,0000002e,00000038,00002580,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00002580,00000000,00000000,00000047,00000029,00000314,00000373,000000f6,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00002580,00000000,00000029,0000001a,00000037,00000314,00000373,0000011f,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000373,000000f6,00000047,00000060,0000258c,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,0000038d,00000156,00000047,00000029,00002598,00000000,00000037,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,000003ba,0000011f,0000001a,00000037,00002598,0000002d,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00003ba7 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00003ba7 ret=01004881 0009:Call gdi32.BitBlt(00002598,00000000,00000038,00000047,00000028,00002580,00000000,00000038,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00002598,0000002c,00000000,0000001b,00000038,00002580,0000002c,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00002580,0000001b,00000028,0000002d,00000039,00002580,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00002580,00000000,00000000,00000047,00000028,00000314,00000358,000000ce,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00002580,00000000,00000028,0000001b,00000038,00000314,00000358,000000f6,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000358,000000ce,00000047,00000060,0000258c,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000373,0000012e,00000047,00000028,00002598,00000000,00000038,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000039f,000000f6,0000001b,00000038,00002598,0000002c,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00003baf ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00003baf ret=01004881 0009:Call gdi32.BitBlt(00002598,00000000,00000037,00000047,00000029,00002580,00000000,00000037,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00002598,0000002d,00000000,0000001a,00000037,00002580,0000002d,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00002580,0000001a,00000029,0000002e,00000038,00002580,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00002580,00000000,00000000,00000047,00000029,00000314,0000033e,000000a5,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00002580,00000000,00000029,0000001a,00000037,00000314,0000033e,000000ce,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,0000033e,000000a5,00000047,00000060,0000258c,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000358,00000105,00000047,00000029,00002598,00000000,00000037,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000385,000000ce,0000001a,00000037,00002598,0000002d,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00003bb7 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00003bb7 ret=01004881 0009:Call gdi32.BitBlt(00002598,00000000,00000038,00000047,00000028,00002580,00000000,00000038,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00002598,0000002c,00000000,0000001b,00000038,00002580,0000002c,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00002580,0000001b,00000028,0000002d,00000039,00002580,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00002580,00000000,00000000,00000047,00000028,00000314,00000323,0000007d,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00002580,00000000,00000028,0000001b,00000038,00000314,00000323,000000a5,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000323,0000007d,00000047,00000060,0000258c,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,0000033e,000000dd,00000047,00000028,00002598,00000000,00000038,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000036a,000000a5,0000001b,00000038,00002598,0000002c,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00003bbf ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00003bbf ret=01004881 0009:Call gdi32.BitBlt(00002598,00000000,00000041,00000047,0000001f,00002580,00000000,00000041,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00002598,00000033,00000000,00000014,00000041,00002580,00000033,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00002580,00000014,0000001f,00000034,00000042,00002580,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00002580,00000000,00000000,00000047,0000001f,00000314,0000030f,0000005e,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00002580,00000000,0000001f,00000014,00000041,00000314,0000030f,0000007d,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,0000030f,0000005e,00000047,00000060,0000258c,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000323,000000be,00000047,0000001f,00002598,00000000,00000041,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000356,0000007d,00000014,00000041,00002598,00000033,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call gdi32.SelectObject(00002580,0000006c) ret=01005316 0009:Ret gdi32.SelectObject() retval=000025a4 ret=01005316 0009:Call gdi32.SelectObject(0000258c,0000006c) ret=01005324 0009:Ret gdi32.SelectObject() retval=000025a8 ret=01005324 0009:Call gdi32.SelectObject(00002598,0000006c) ret=01005332 0009:Ret gdi32.SelectObject() retval=000025ac ret=01005332 0009:Call gdi32.DeleteObject(000025a4) ret=01005340 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005340 0009:Call gdi32.DeleteObject(000025a8) ret=01005348 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005348 0009:Call gdi32.DeleteObject(000025ac) ret=01005350 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005350 0009:Call gdi32.DeleteDC(00002580) ret=0100535e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100535e 0009:Call gdi32.DeleteDC(0000258c) ret=01005366 0009:Ret gdi32.DeleteDC() retval=00000001 ret=01005366 0009:Call gdi32.DeleteDC(00002598) ret=0100536e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100536e 0009:Call user32.ReleaseDC(00010030,00000314) ret=0100537c 0009:Ret user32.ReleaseDC() retval=00000001 ret=0100537c 0009:Call user32.InvalidateRect(00010030,0033f618,00000000) ret=0100538a 0009:Ret user32.InvalidateRect() retval=00000001 ret=0100538a 0009:Call KERNEL32.GetModuleHandleW(00000000) ret=01006a97 0009:Ret KERNEL32.GetModuleHandleW() retval=01000000 ret=01006a97 0009:Call winmm.PlaySoundW(0000007c,01000000,00040007) ret=01006aa0 0009:Call ntdll.RtlAllocateHeap(00110000,00000008,0000001c) ret=7e7356bc 0009:Ret ntdll.RtlAllocateHeap() retval=0014b258 ret=7e7356bc 0009:Call KERNEL32.ResetEvent(00000040) ret=7e735513 0009:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e735513 0009:Call KERNEL32.SetEvent(00000038) ret=7e735520 0009:Ret KERNEL32.SetEvent() retval=00000001 ret=7e735520 0009:Call msacm32.drv.wodMessage(0000ffff,0000000c,0014b1f8,00000000,00000000) ret=7e728e1f 0009:Call winmm.waveOutReset(00008001) ret=7e0c0180 0009:Call winealsa.drv.wodMessage(00000000,0000000c,7e72ab2b,00000000,00000000) ret=7e728e1f 0009:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1b2580 0009:Ret KERNEL32.CreateEventW() retval=00000070 ret=7e1b2580 0026:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bd,0014b1f8,0014d3a0,00000000) ret=7e1c4643 0026:Call KERNEL32.IsBadReadPtr(0014b1f8,0000002c) ret=7e0bdbc9 0026:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 0026:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bd,008ceaa4,0014d3a0,00000000) ret=7e0bdf33 0026:Call KERNEL32.SetEvent(00000068) ret=7e7341f6 0026:Ret KERNEL32.SetEvent() retval=00000001 ret=7e7341f6 0026:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 0026:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 0026:Call KERNEL32.SetEvent(00000070) ret=7e1c4f3d 0026:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c4f3d 0024:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e73429b 0024:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 0024:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 0024:Call msacm32.drv.wodMessage(0000ffff,0000000c,0014b1f8,00000000,00000000) ret=7e728e1f 0024:Call winmm.waveOutReset(00008001) ret=7e0c0180 0024:Call winealsa.drv.wodMessage(00000000,0000000c,7e72ab2b,00000000,00000000) ret=7e728e1f 0024:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1b2580 0024:Ret KERNEL32.CreateEventW() retval=000000e4 ret=7e1b2580 0024:Call KERNEL32.WaitForSingleObject(000000e4,ffffffff) ret=7e1b2635 0026:Call KERNEL32.SetEvent(000000e4) ret=7e1c4f3d 0026:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c4f3d 0024:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1b2635 0024:Call KERNEL32.CloseHandle(000000e4) ret=7e1b2640 0024:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1b2640 0024:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0024:Ret winmm.waveOutReset() retval=00000000 ret=7e0c0180 0024:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0024:Call msacm32.drv.wodMessage(0000ffff,00000008,0014b1f8,0014d3a0,00000020) ret=7e728e1f 0024:Call winmm.waveOutUnprepareHeader(00008001,0014d3a0,00000020) ret=7e0c00b6 0024:Call winealsa.drv.wodMessage(00000000,00000008,7e72ab2b,0014d3a0,00000020) ret=7e728e1f 0024:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 0024:Ret winmm.waveOutUnprepareHeader() retval=00000000 ret=7e0c00b6 0024:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0024:Call msacm32.drv.wodMessage(0000ffff,00000008,0014b1f8,0014d3c0,00000020) ret=7e728e1f 0024:Call winmm.waveOutUnprepareHeader(00008001,0014d3c0,00000020) ret=7e0c00b6 0024:Call winealsa.drv.wodMessage(00000000,00000008,7e72ab2b,0014d3c0,00000020) ret=7e728e1f 0024:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 0024:Ret winmm.waveOutUnprepareHeader() retval=00000000 ret=7e0c00b6 0024:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0024:Call KERNEL32.CloseHandle(00000068) ret=7e7349fd 0024:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e7349fd 0024:Call ntdll.RtlFreeHeap(00110000,00000000,0014d3a0) ret=7e734a23 0024:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e734a23 0024:Call ntdll.RtlFreeHeap(00110000,00000000,00148cb8) ret=7e734a49 0024:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e734a49 0024:Call msacm32.drv.wodMessage(0000ffff,00000006,0014b1f8,00000000,00000000) ret=7e728e1f 0024:Call winmm.waveOutClose(00008001) ret=7e0c01a5 0024:Call winealsa.drv.wodMessage(00000000,00000006,7e72ab2b,00000000,00000000) ret=7e728e1f 0024:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1b2580 0024:Ret KERNEL32.CreateEventW() retval=00000068 ret=7e1b2580 0024:Call KERNEL32.WaitForSingleObject(00000068,ffffffff) ret=7e1b2635 0026:Call KERNEL32.SetEvent(00000068) ret=7e1c4ea1 0026:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c4ea1 0026:Call KERNEL32.ExitThread(00000000) ret=7e1c4eb0 0026:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) 0026:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0026:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) 0026:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0026:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) 0026:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0026:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) 0026:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) retval=1 0026:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) 0026:Call KERNEL32.TlsGetValue(00000000) ret=7e3f4071 0026:Ret KERNEL32.TlsGetValue() retval=00000000 ret=7e3f4071 0026:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0026:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) 0026:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0024:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1b2635 0024:Call KERNEL32.CloseHandle(00000068) ret=7e1b2640 0024:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1b2640 0024:Call ntdll.RtlFreeHeap(00110000,00000000,0014c7d0) ret=7e1b24dc 0024:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e1b24dc 0024:Call ntdll.RtlDeleteCriticalSection(0013cefc) ret=7e1b24fb 0024:Ret ntdll.RtlDeleteCriticalSection() retval=00000000 ret=7e1b24fb 0024:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bc,0014b1f8,00000000,00000000) ret=7e1c4643 0024:Call KERNEL32.IsBadReadPtr(0014b1f8,0000002c) ret=7e0bdbc9 0024:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 0024:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bc,008ceaa4,00000000,00000000) ret=7e0bdf33 0024:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 0024:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 0024:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0024:Call ntdll.RtlFreeHeap(00110000,00000000,0014b230) ret=7e72ae0b 0024:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e72ae0b 0024:Ret winmm.waveOutClose() retval=00000000 ret=7e0c01a5 0024:Call ntdll.RtlFreeHeap(00110000,00000000,0014b1f8) ret=7e0c01f7 0024:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e0c01f7 0024:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0024:Call ntdll.RtlFreeHeap(00110000,00000000,0014b1d0) ret=7e72ae0b 0024:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e72ae0b 0009:Call KERNEL32.WaitForSingleObject(00000070,ffffffff) ret=7e1b2635 0009:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1b2635 0009:Call KERNEL32.CloseHandle(00000070) ret=7e1b2640 0009:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1b2640 0009:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0009:Ret winmm.waveOutReset() retval=00000000 ret=7e0c0180 0009:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0009:Call KERNEL32.WaitForSingleObject(00000040,ffffffff) ret=7e73555a 0024:Call ntdll.RtlFreeHeap(00110000,00000000,00148c28) ret=7e731f79 0024:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e731f79 0024:Call KERNEL32.SetEvent(00000040) ret=7e7343a0 0024:Ret KERNEL32.SetEvent() retval=00000001 ret=7e7343a0 0024:Call KERNEL32.CloseHandle(00000064) ret=7e734340 0024:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e734340 0024:Call ntdll.RtlFreeHeap(00110000,00000000,0014bef8) ret=7e734360 0024:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e734360 0024:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) 0024:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0024:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) 0024:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0024:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) 0024:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0024:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) 0024:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) retval=1 0024:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) 0024:Call KERNEL32.TlsGetValue(00000000) ret=7e3f4071 0024:Ret KERNEL32.TlsGetValue() retval=00000000 ret=7e3f4071 0024:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0024:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) 0024:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0009:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e73555a 0009:Call KERNEL32.ResetEvent(00000038) ret=7e735572 0009:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e735572 0009:Call KERNEL32.CreateThread(00000000,00000000,7e7348a0,0014b258,00000000,0033f598) ret=7e73560c 0028:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) 0028:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0028:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) 0028:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0028:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) 0028:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) retval=1 0028:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) 0028:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0028:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) 0028:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0028:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) 0028:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0028:Starting thread proc 0x7e7348a0 (arg=0x14b258) 0028:Call KERNEL32.FindResourceW(01000000,0000007c,7e741bde L"WAVE") ret=7e734ca3 0028:Ret KERNEL32.FindResourceW() retval=01014c40 ret=7e734ca3 0028:Call KERNEL32.LoadResource(01000000,01014c40) ret=7e734cb9 0028:Ret KERNEL32.LoadResource() retval=0104d668 ret=7e734cb9 0028:Call KERNEL32.LockResource(0104d668) ret=7e734cce 0028:Ret KERNEL32.LockResource() retval=0104d668 ret=7e734cce 0028:Call KERNEL32.FreeResource(0104d668) ret=7e734ce9 0028:Ret KERNEL32.FreeResource() retval=00000000 ret=7e734ce9 0028:Call ntdll.RtlAllocateHeap(00110000,00000008,0000005c) ret=7e733960 0028:Ret ntdll.RtlAllocateHeap() retval=00148c28 ret=7e733960 0028:Call KERNEL32.GetFileSize(ffffffff,00000000) ret=7e733ab9 0028:Ret KERNEL32.GetFileSize() retval=ffffffff ret=7e733ab9 0028:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7e733cf0 0028:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e733cf0 0028:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7e734e1c 0028:Ret ntdll.RtlAllocateHeap() retval=00148cb8 ret=7e734e1c 0028:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e734f1f 0028:Ret KERNEL32.CreateEventW() retval=00000068 ret=7e734f1f 0028:Call ntdll.RtlAllocateHeap(00110000,00000008,0000001c) ret=7e72abbe 0028:Ret ntdll.RtlAllocateHeap() retval=0014b280 ret=7e72abbe 0028:Call msacm32.drv.wodMessage(0000ffff,00000005,007ce918,007ce970,00030000) ret=7e728e1f 0028:Call ntdll.RtlAllocateHeap(00110000,00000000,0000002c) ret=7e0bfd8c 0028:Ret ntdll.RtlAllocateHeap() retval=0014b1d0 ret=7e0bfd8c 0028:Call winmm.waveOutGetNumDevs() ret=7e0bfdb5 0028:Ret winmm.waveOutGetNumDevs() retval=00000002 ret=7e0bfdb5 0028:Call winmm.waveOutOpen(0014b1d8,00000000,00148cb8,7e0bde60,0014b1d0,00030008) ret=7e0c0313 0028:Call ntdll.RtlAllocateHeap(00110000,00000008,0000001c) ret=7e72abbe 0028:Ret ntdll.RtlAllocateHeap() retval=0014b208 ret=7e72abbe 0028:Call winealsa.drv.wodMessage(00000000,00000005,007ce5b8,007ce610,00030008) ret=7e728e1f 0028:Call ntdll.RtlAllocateHeap(00110000,00000008,00000068) ret=7e1c6c82 0028:Ret ntdll.RtlAllocateHeap() retval=0014bef8 ret=7e1c6c82 0028:Call ntdll.RtlAllocateHeap(00110000,00000008,00000300) ret=7e1b2459 0028:Ret ntdll.RtlAllocateHeap() retval=0014c7d0 ret=7e1b2459 0028:Call KERNEL32.InitializeCriticalSection(0013cefc) ret=7e1b2469 0028:Ret KERNEL32.InitializeCriticalSection() retval=00000001 ret=7e1b2469 0028:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1c73ab 0028:Ret KERNEL32.CreateEventW() retval=00000070 ret=7e1c73ab 0028:Call KERNEL32.CreateThread(00000000,00000000,7e1c5570,00000000,00000000,0013cedc) ret=7e1c73ef 0009:Ret KERNEL32.CreateThread() retval=00000064 ret=7e73560c 0009:Call KERNEL32.SetThreadPriority(00000064,0000000f) ret=7e73562d 0009:Ret KERNEL32.SetThreadPriority() retval=00000001 ret=7e73562d 0009:Ret winmm.PlaySoundW() retval=00000001 ret=01006aa0 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,0000000c) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c5958 ret=0100a7d2 0009:Call user32.GetClientRect(00010030,0033f608) ret=01005145 0009:Ret user32.GetClientRect() retval=00000001 ret=01005145 0009:Call user32.GetDC(00010030) ret=010051ad 0009:Ret user32.GetDC() retval=00000314 ret=010051ad 0009:Call gdi32.CreateCompatibleDC(00000314) ret=010051bc 0009:Ret gdi32.CreateCompatibleDC() retval=0000260c ret=010051bc 0009:Call gdi32.CreateCompatibleDC(00000314) ret=010051ca 0009:Ret gdi32.CreateCompatibleDC() retval=00002618 ret=010051ca 0009:Call gdi32.CreateCompatibleDC(00000314) ret=010051d8 0009:Ret gdi32.CreateCompatibleDC() retval=00002624 ret=010051d8 0009:Call gdi32.CreateCompatibleBitmap(00000314,00000047,00000060) ret=010051f8 0009:Ret gdi32.CreateCompatibleBitmap() retval=00002630 ret=010051f8 0009:Call gdi32.CreateCompatibleBitmap(00000314,00000047,00000060) ret=01005212 0009:Ret gdi32.CreateCompatibleBitmap() retval=00002634 ret=01005212 0009:Call gdi32.CreateCompatibleBitmap(00000314,00000047,00000060) ret=0100522c 0009:Ret gdi32.CreateCompatibleBitmap() retval=00002638 ret=0100522c 0009:Call gdi32.SelectObject(0000260c,00002630) ret=01005246 0009:Ret gdi32.SelectObject() retval=0000006c ret=01005246 0009:Call gdi32.SelectObject(00002618,00002634) ret=0100525a 0009:Ret gdi32.SelectObject() retval=0000006c ret=0100525a 0009:Call gdi32.SelectObject(00002624,00002638) ret=0100526e 0009:Ret gdi32.SelectObject() retval=0000006c ret=0100526e 0009:Call user32.LoadBitmapW(01000000,0033f5a0 L"CARD49") ret=010028ff 002a:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) 002a:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 002a:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) 002a:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 002a:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) 002a:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) retval=1 002a:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) 002a:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 002a:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) 002a:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 002a:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) 002a:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 002a:Starting thread proc 0x7e1c5570 (arg=(nil)) 002a:Call KERNEL32.SetEvent(00000070) ret=7e1c55aa 002a:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c55aa 0028:Ret KERNEL32.CreateThread() retval=000000e4 ret=7e1c73ef 0028:Call KERNEL32.SetThreadPriority(000000e4,0000000f) ret=7e1c7413 0028:Ret KERNEL32.SetThreadPriority() retval=00000001 ret=7e1c7413 0028:Call KERNEL32.WaitForSingleObject(00000070,ffffffff) ret=7e1c742f 0028:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1c742f 0028:Call KERNEL32.CloseHandle(00000070) ret=7e1c7443 0028:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1c7443 0028:Call ntdll.RtlFreeHeap(00110000,00000000,0014bef8) ret=7e1c7479 0028:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e1c7479 0028:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bb,0014b1d0,00000000,00000000) ret=7e1c4643 0028:Call KERNEL32.IsBadReadPtr(0014b1d0,0000002c) ret=7e0bdbc9 0028:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 0028:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bb,007ceaa4,00000000,00000000) ret=7e0bdf33 0028:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 0028:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 0028:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0028:Ret winmm.waveOutOpen() retval=00000000 ret=7e0c0313 0028:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0028:Call ntdll.RtlAllocateHeap(00110000,00000000,000039ac) ret=7e73520d 0028:Ret ntdll.RtlAllocateHeap() retval=0014d3a0 ret=7e73520d 0028:Call msacm32.drv.wodMessage(0000ffff,00000007,0014b1d0,0014d3a0,00000020) ret=7e728e1f 0028:Call winmm.waveOutPrepareHeader(00008001,0014d3a0,00000020) ret=7e0c09d8 0028:Call winealsa.drv.wodMessage(00000000,00000007,7e72ab2b,0014d3a0,00000020) ret=7e728e1f 0028:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 0028:Ret winmm.waveOutPrepareHeader() retval=00000000 ret=7e0c09d8 0028:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0028:Call msacm32.drv.wodMessage(0000ffff,00000007,0014b1d0,0014d3c0,00000020) ret=7e728e1f 0028:Call winmm.waveOutPrepareHeader(00008001,0014d3c0,00000020) ret=7e0c09d8 0028:Call winealsa.drv.wodMessage(00000000,00000007,7e72ab2b,0014d3c0,00000020) ret=7e728e1f 0028:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 0028:Ret winmm.waveOutPrepareHeader() retval=00000000 ret=7e0c09d8 0028:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0028:Call KERNEL32.WaitForSingleObject(00000038,00000000) ret=7e735343 0028:Ret KERNEL32.WaitForSingleObject() retval=00000102 ret=7e735343 0028:Call msacm32.drv.wodMessage(0000ffff,00000009,0014b1d0,0014d3a0,00000020) ret=7e728e1f 0028:Call winmm.waveOutWrite(00008001,0014d3a0,00000020) ret=7e0c09b5 0028:Call winealsa.drv.wodMessage(00000000,00000009,7e72ab2b,0014d3a0,00000020) ret=7e728e1f 0028:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0028:Ret winmm.waveOutWrite() retval=00000000 ret=7e0c09b5 0028:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0028:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 0028:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 0028:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 0028:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 0028:Call KERNEL32.WaitForSingleObject(00000068,ffffffff) ret=7e73429b 0009:Ret user32.LoadBitmapW() retval=00002648 ret=010028ff 0009:Call gdi32.CreateCompatibleDC(00002618) ret=01002909 0009:Ret gdi32.CreateCompatibleDC() retval=0000265c ret=01002909 0009:Call gdi32.SelectObject(0000265c,00002648) ret=01002917 0009:Ret gdi32.SelectObject() retval=0000006c ret=01002917 0009:Call gdi32.BitBlt(00002618,00000000,00000000,00000047,00000060,0000265c,00000000,00000000,00cc0020) ret=01002938 0009:Ret gdi32.BitBlt() retval=00000001 ret=01002938 0009:Call gdi32.SelectObject(0000265c,0000006c) ret=0100293e 0009:Ret gdi32.SelectObject() retval=00002648 ret=0100293e 0009:Call gdi32.DeleteObject(00002648) ret=01002947 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01002947 0009:Call gdi32.DeleteDC(0000265c) ret=0100294e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100294e 0009:Call gdi32.SetPixel(00002618,00000000,00000000,00008000) ret=01002969 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002969 0009:Call gdi32.SetPixel(00002618,00000001,00000000,00008000) ret=01002976 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002976 0009:Call gdi32.SetPixel(00002618,00000000,00000001,00008000) ret=01002982 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002982 0009:Call gdi32.SetPixel(00002618,00000046,00000000,00008000) ret=0100298f 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100298f 0009:Call gdi32.SetPixel(00002618,00000045,00000000,00008000) ret=0100299c 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100299c 0009:Call gdi32.SetPixel(00002618,00000046,00000001,00008000) ret=010029ab 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ab 0009:Call gdi32.SetPixel(00002618,00000000,0000005f,00008000) ret=010029bf 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029bf 0009:Call gdi32.SetPixel(00002618,00000001,0000005f,00008000) ret=010029d0 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029d0 0009:Call gdi32.SetPixel(00002618,00000000,0000005e,00008000) ret=010029de 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029de 0009:Call gdi32.SetPixel(00002618,00000046,0000005f,00008000) ret=010029ef 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ef 0009:Call gdi32.SetPixel(00002618,00000045,0000005f,00008000) ret=01002a00 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a00 0009:Call gdi32.SetPixel(00002618,00000046,0000005e,00008000) ret=01002a11 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a11 0009:Call user32.LoadBitmapW(01000000,010012c8 L"CARDBACK") ret=010028ff 0009:Ret user32.LoadBitmapW() retval=00002674 ret=010028ff 0009:Call gdi32.CreateCompatibleDC(0000260c) ret=01002909 0009:Ret gdi32.CreateCompatibleDC() retval=00002688 ret=01002909 0009:Call gdi32.SelectObject(00002688,00002674) ret=01002917 0009:Ret gdi32.SelectObject() retval=0000006c ret=01002917 0009:Call gdi32.BitBlt(0000260c,00000000,00000000,00000047,00000060,00002688,00000000,00000000,00cc0020) ret=01002938 0009:Ret gdi32.BitBlt() retval=00000001 ret=01002938 0009:Call gdi32.SelectObject(00002688,0000006c) ret=0100293e 0009:Ret gdi32.SelectObject() retval=00002674 ret=0100293e 0009:Call gdi32.DeleteObject(00002674) ret=01002947 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01002947 0009:Call gdi32.DeleteDC(00002688) ret=0100294e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100294e 0009:Call gdi32.SetPixel(0000260c,00000000,00000000,00008000) ret=01002969 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002969 0009:Call gdi32.SetPixel(0000260c,00000001,00000000,00008000) ret=01002976 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002976 0009:Call gdi32.SetPixel(0000260c,00000000,00000001,00008000) ret=01002982 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002982 0009:Call gdi32.SetPixel(0000260c,00000046,00000000,00008000) ret=0100298f 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100298f 0009:Call gdi32.SetPixel(0000260c,00000045,00000000,00008000) ret=0100299c 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100299c 0009:Call gdi32.SetPixel(0000260c,00000046,00000001,00008000) ret=010029ab 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ab 0009:Call gdi32.SetPixel(0000260c,00000000,0000005f,00008000) ret=010029bf 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029bf 0009:Call gdi32.SetPixel(0000260c,00000001,0000005f,00008000) ret=010029d0 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029d0 0009:Call gdi32.SetPixel(0000260c,00000000,0000005e,00008000) ret=010029de 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029de 0009:Call gdi32.SetPixel(0000260c,00000046,0000005f,00008000) ret=010029ef 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ef 0009:Call gdi32.SetPixel(0000260c,00000045,0000005f,00008000) ret=01002a00 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a00 0009:Call gdi32.SetPixel(0000260c,00000046,0000005e,00008000) ret=01002a11 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a11 0009:Call winmm.timeGetTime() ret=010047d1 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00003beb ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00003beb ret=010047d1 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00003beb ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00003beb ret=01004881 0009:Call gdi32.BitBlt(0000260c,00000000,00000000,00000048,00000061,0000260c,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00000314,00000459,00000258,00000047,00000060,00002618,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00003bf3 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00003bf3 ret=01004881 0009:Call gdi32.BitBlt(00002624,00000000,00000038,00000047,00000028,0000260c,00000000,00000038,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00002624,00000037,00000000,00000010,00000038,0000260c,00000037,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(0000260c,00000010,00000028,00000038,00000039,0000260c,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(0000260c,00000000,00000000,00000047,00000028,00000314,00000449,00000230,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(0000260c,00000000,00000028,00000010,00000038,00000314,00000449,00000258,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000449,00000230,00000047,00000060,00002618,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000459,00000290,00000047,00000028,00002624,00000000,00000038,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000490,00000258,00000010,00000038,00002624,00000037,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00003bfb ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00003bfb ret=01004881 0009:Call gdi32.BitBlt(00002624,00000000,00000038,00000047,00000028,0000260c,00000000,00000038,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00002624,00000036,00000000,00000011,00000038,0000260c,00000036,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(0000260c,00000011,00000028,00000037,00000039,0000260c,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(0000260c,00000000,00000000,00000047,00000028,00000314,00000438,00000208,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(0000260c,00000000,00000028,00000011,00000038,00000314,00000438,00000230,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000438,00000208,00000047,00000060,00002618,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000449,00000268,00000047,00000028,00002624,00000000,00000038,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000047f,00000230,00000011,00000038,00002624,00000036,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00003c03 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00003c03 ret=01004881 0009:Call gdi32.BitBlt(00002624,00000000,00000037,00000047,00000029,0000260c,00000000,00000037,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00002624,00000037,00000000,00000010,00000037,0000260c,00000037,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(0000260c,00000010,00000029,00000038,00000038,0000260c,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(0000260c,00000000,00000000,00000047,00000029,00000314,00000428,000001df,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(0000260c,00000000,00000029,00000010,00000037,00000314,00000428,00000208,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000428,000001df,00000047,00000060,00002618,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000438,0000023f,00000047,00000029,00002624,00000000,00000037,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000046f,00000208,00000010,00000037,00002624,00000037,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00003c0b ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00003c0b ret=01004881 0009:Call gdi32.BitBlt(00002624,00000000,00000038,00000047,00000028,0000260c,00000000,00000038,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00002624,00000036,00000000,00000011,00000038,0000260c,00000036,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(0000260c,00000011,00000028,00000037,00000039,0000260c,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(0000260c,00000000,00000000,00000047,00000028,00000314,00000417,000001b7,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(0000260c,00000000,00000028,00000011,00000038,00000314,00000417,000001df,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000417,000001b7,00000047,00000060,00002618,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000428,00000217,00000047,00000028,00002624,00000000,00000038,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000045e,000001df,00000011,00000038,00002624,00000036,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00003c13 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00003c13 ret=01004881 0009:Call gdi32.BitBlt(00002624,00000000,00000037,00000047,00000029,0000260c,00000000,00000037,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00002624,00000036,00000000,00000011,00000037,0000260c,00000036,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(0000260c,00000011,00000029,00000037,00000038,0000260c,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(0000260c,00000000,00000000,00000047,00000029,00000314,00000406,0000018e,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(0000260c,00000000,00000029,00000011,00000037,00000314,00000406,000001b7,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000406,0000018e,00000047,00000060,00002618,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000417,000001ee,00000047,00000029,00002624,00000000,00000037,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000044d,000001b7,00000011,00000037,00002624,00000036,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00003c1b ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00003c1b ret=01004881 0009:Call gdi32.BitBlt(00002624,00000000,00000038,00000047,00000028,0000260c,00000000,00000038,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00002624,00000037,00000000,00000010,00000038,0000260c,00000037,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(0000260c,00000010,00000028,00000038,00000039,0000260c,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(0000260c,00000000,00000000,00000047,00000028,00000314,000003f6,00000166,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(0000260c,00000000,00000028,00000010,00000038,00000314,000003f6,0000018e,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000003f6,00000166,00000047,00000060,00002618,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000406,000001c6,00000047,00000028,00002624,00000000,00000038,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000043d,0000018e,00000010,00000038,00002624,00000037,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00003c23 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00003c23 ret=01004881 0009:Call gdi32.BitBlt(00002624,00000000,00000037,00000047,00000029,0000260c,00000000,00000037,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00002624,00000036,00000000,00000011,00000037,0000260c,00000036,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(0000260c,00000011,00000029,00000037,00000038,0000260c,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(0000260c,00000000,00000000,00000047,00000029,00000314,000003e5,0000013d,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(0000260c,00000000,00000029,00000011,00000037,00000314,000003e5,00000166,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000003e5,0000013d,00000047,00000060,00002618,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000003f6,0000019d,00000047,00000029,00002624,00000000,00000037,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000042c,00000166,00000011,00000037,00002624,00000036,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00003c2b ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00003c2b ret=01004881 0009:Call gdi32.BitBlt(00002624,00000000,00000038,00000047,00000028,0000260c,00000000,00000038,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00002624,00000036,00000000,00000011,00000038,0000260c,00000036,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(0000260c,00000011,00000028,00000037,00000039,0000260c,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(0000260c,00000000,00000000,00000047,00000028,00000314,000003d4,00000115,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(0000260c,00000000,00000028,00000011,00000038,00000314,000003d4,0000013d,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000003d4,00000115,00000047,00000060,00002618,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000003e5,00000175,00000047,00000028,00002624,00000000,00000038,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000041b,0000013d,00000011,00000038,00002624,00000036,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00003c33 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00003c33 ret=01004881 0009:Call gdi32.BitBlt(00002624,00000000,00000037,00000047,00000029,0000260c,00000000,00000037,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00002624,00000037,00000000,00000010,00000037,0000260c,00000037,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(0000260c,00000010,00000029,00000038,00000038,0000260c,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(0000260c,00000000,00000000,00000047,00000029,00000314,000003c4,000000ec,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(0000260c,00000000,00000029,00000010,00000037,00000314,000003c4,00000115,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000003c4,000000ec,00000047,00000060,00002618,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000003d4,0000014c,00000047,00000029,00002624,00000000,00000037,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000040b,00000115,00000010,00000037,00002624,00000037,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00003c3b ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00003c3b ret=01004881 0009:Call gdi32.BitBlt(00002624,00000000,00000038,00000047,00000028,0000260c,00000000,00000038,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00002624,00000036,00000000,00000011,00000038,0000260c,00000036,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(0000260c,00000011,00000028,00000037,00000039,0000260c,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(0000260c,00000000,00000000,00000047,00000028,00000314,000003b3,000000c4,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(0000260c,00000000,00000028,00000011,00000038,00000314,000003b3,000000ec,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000003b3,000000c4,00000047,00000060,00002618,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000003c4,00000124,00000047,00000028,00002624,00000000,00000038,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,000003fa,000000ec,00000011,00000038,00002624,00000036,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00003c43 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00003c43 ret=01004881 0009:Call gdi32.BitBlt(00002624,00000000,00000037,00000047,00000029,0000260c,00000000,00000037,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00002624,00000036,00000000,00000011,00000037,0000260c,00000036,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(0000260c,00000011,00000029,00000037,00000038,0000260c,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(0000260c,00000000,00000000,00000047,00000029,00000314,000003a2,0000009b,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(0000260c,00000000,00000029,00000011,00000037,00000314,000003a2,000000c4,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,000003a2,0000009b,00000047,00000060,00002618,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000003b3,000000fb,00000047,00000029,00002624,00000000,00000037,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,000003e9,000000c4,00000011,00000037,00002624,00000036,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00003c4b ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00003c4b ret=01004881 0009:Call gdi32.BitBlt(00002624,00000000,00000038,00000047,00000028,0000260c,00000000,00000038,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00002624,00000037,00000000,00000010,00000038,0000260c,00000037,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(0000260c,00000010,00000028,00000038,00000039,0000260c,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(0000260c,00000000,00000000,00000047,00000028,00000314,00000392,00000073,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(0000260c,00000000,00000028,00000010,00000038,00000314,00000392,0000009b,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000392,00000073,00000047,00000060,00002618,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,000003a2,000000d3,00000047,00000028,00002624,00000000,00000038,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,000003d9,0000009b,00000010,00000038,00002624,00000037,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00003c53 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00003c53 ret=01004881 0009:Call gdi32.BitBlt(00002624,00000000,0000004b,00000047,00000015,0000260c,00000000,0000004b,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(00002624,0000003e,00000000,00000009,0000004b,0000260c,0000003e,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(0000260c,00000009,00000015,0000003f,0000004c,0000260c,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(0000260c,00000000,00000000,00000047,00000015,00000314,00000389,0000005e,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(0000260c,00000000,00000015,00000009,0000004b,00000314,00000389,00000073,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000389,0000005e,00000047,00000060,00002618,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000392,000000be,00000047,00000015,00002624,00000000,0000004b,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,000003d0,00000073,00000009,0000004b,00002624,0000003e,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call gdi32.SelectObject(0000260c,0000006c) ret=01005316 0009:Ret gdi32.SelectObject() retval=00002630 ret=01005316 0009:Call gdi32.SelectObject(00002618,0000006c) ret=01005324 0009:Ret gdi32.SelectObject() retval=00002634 ret=01005324 0009:Call gdi32.SelectObject(00002624,0000006c) ret=01005332 0009:Ret gdi32.SelectObject() retval=00002638 ret=01005332 0009:Call gdi32.DeleteObject(00002630) ret=01005340 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005340 0009:Call gdi32.DeleteObject(00002634) ret=01005348 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005348 0009:Call gdi32.DeleteObject(00002638) ret=01005350 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005350 0009:Call gdi32.DeleteDC(0000260c) ret=0100535e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100535e 0009:Call gdi32.DeleteDC(00002618) ret=01005366 0009:Ret gdi32.DeleteDC() retval=00000001 ret=01005366 0009:Call gdi32.DeleteDC(00002624) ret=0100536e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100536e 0009:Call user32.ReleaseDC(00010030,00000314) ret=0100537c 0009:Ret user32.ReleaseDC() retval=00000001 ret=0100537c 0009:Call user32.InvalidateRect(00010030,0033f618,00000000) ret=0100538a 0009:Ret user32.InvalidateRect() retval=00000001 ret=0100538a 0009:Call KERNEL32.GetModuleHandleW(00000000) ret=01006a97 0009:Ret KERNEL32.GetModuleHandleW() retval=01000000 ret=01006a97 0009:Call winmm.PlaySoundW(0000007c,01000000,00040007) ret=01006aa0 0009:Call ntdll.RtlAllocateHeap(00110000,00000008,0000001c) ret=7e7356bc 0009:Ret ntdll.RtlAllocateHeap() retval=0014cad8 ret=7e7356bc 0009:Call KERNEL32.ResetEvent(00000040) ret=7e735513 0009:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e735513 0009:Call KERNEL32.SetEvent(00000038) ret=7e735520 0009:Ret KERNEL32.SetEvent() retval=00000001 ret=7e735520 0009:Call msacm32.drv.wodMessage(0000ffff,0000000c,0014b1d0,00000000,00000000) ret=7e728e1f 0009:Call winmm.waveOutReset(00008001) ret=7e0c0180 0009:Call winealsa.drv.wodMessage(00000000,0000000c,7e72ab2b,00000000,00000000) ret=7e728e1f 0009:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1b2580 0009:Ret KERNEL32.CreateEventW() retval=00000070 ret=7e1b2580 002a:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bd,0014b1d0,0014d3a0,00000000) ret=7e1c4643 002a:Call KERNEL32.IsBadReadPtr(0014b1d0,0000002c) ret=7e0bdbc9 002a:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 002a:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bd,007ceaa4,0014d3a0,00000000) ret=7e0bdf33 002a:Call KERNEL32.SetEvent(00000068) ret=7e7341f6 002a:Ret KERNEL32.SetEvent() retval=00000001 ret=7e7341f6 002a:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 002a:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 002a:Call KERNEL32.SetEvent(00000070) ret=7e1c4f3d 002a:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c4f3d 0028:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e73429b 0028:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 0028:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 0028:Call msacm32.drv.wodMessage(0000ffff,0000000c,0014b1d0,00000000,00000000) ret=7e728e1f 0028:Call winmm.waveOutReset(00008001) ret=7e0c0180 0028:Call winealsa.drv.wodMessage(00000000,0000000c,7e72ab2b,00000000,00000000) ret=7e728e1f 0028:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1b2580 0028:Ret KERNEL32.CreateEventW() retval=000000e8 ret=7e1b2580 002a:Call KERNEL32.SetEvent(000000e8) ret=7e1c4f3d 002a:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c4f3d 0028:Call KERNEL32.WaitForSingleObject(000000e8,ffffffff) ret=7e1b2635 0028:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1b2635 0028:Call KERNEL32.CloseHandle(000000e8) ret=7e1b2640 0028:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1b2640 0028:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0028:Ret winmm.waveOutReset() retval=00000000 ret=7e0c0180 0028:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0028:Call msacm32.drv.wodMessage(0000ffff,00000008,0014b1d0,0014d3a0,00000020) ret=7e728e1f 0028:Call winmm.waveOutUnprepareHeader(00008001,0014d3a0,00000020) ret=7e0c00b6 0028:Call winealsa.drv.wodMessage(00000000,00000008,7e72ab2b,0014d3a0,00000020) ret=7e728e1f 0028:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 0028:Ret winmm.waveOutUnprepareHeader() retval=00000000 ret=7e0c00b6 0028:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0028:Call msacm32.drv.wodMessage(0000ffff,00000008,0014b1d0,0014d3c0,00000020) ret=7e728e1f 0028:Call winmm.waveOutUnprepareHeader(00008001,0014d3c0,00000020) ret=7e0c00b6 0028:Call winealsa.drv.wodMessage(00000000,00000008,7e72ab2b,0014d3c0,00000020) ret=7e728e1f 0028:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 0028:Ret winmm.waveOutUnprepareHeader() retval=00000000 ret=7e0c00b6 0028:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0028:Call KERNEL32.CloseHandle(00000068) ret=7e7349fd 0028:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e7349fd 0028:Call ntdll.RtlFreeHeap(00110000,00000000,0014d3a0) ret=7e734a23 0028:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e734a23 0028:Call ntdll.RtlFreeHeap(00110000,00000000,00148cb8) ret=7e734a49 0028:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e734a49 0028:Call msacm32.drv.wodMessage(0000ffff,00000006,0014b1d0,00000000,00000000) ret=7e728e1f 0028:Call winmm.waveOutClose(00008001) ret=7e0c01a5 0028:Call winealsa.drv.wodMessage(00000000,00000006,7e72ab2b,00000000,00000000) ret=7e728e1f 0028:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1b2580 0028:Ret KERNEL32.CreateEventW() retval=00000068 ret=7e1b2580 002a:Call KERNEL32.SetEvent(00000068) ret=7e1c4ea1 002a:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c4ea1 002a:Call KERNEL32.ExitThread(00000000) ret=7e1c4eb0 002a:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) 002a:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 002a:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) 002a:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) retval=1 002a:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) 002a:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 002a:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) 002a:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) retval=1 002a:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) 002a:Call KERNEL32.TlsGetValue(00000000) ret=7e3f4071 002a:Ret KERNEL32.TlsGetValue() retval=00000000 ret=7e3f4071 002a:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 002a:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) 002a:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0028:Call KERNEL32.WaitForSingleObject(00000068,ffffffff) ret=7e1b2635 0028:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1b2635 0028:Call KERNEL32.CloseHandle(00000068) ret=7e1b2640 0028:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1b2640 0028:Call ntdll.RtlFreeHeap(00110000,00000000,0014c7d0) ret=7e1b24dc 0028:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e1b24dc 0028:Call ntdll.RtlDeleteCriticalSection(0013cefc) ret=7e1b24fb 0028:Ret ntdll.RtlDeleteCriticalSection() retval=00000000 ret=7e1b24fb 0028:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bc,0014b1d0,00000000,00000000) ret=7e1c4643 0028:Call KERNEL32.IsBadReadPtr(0014b1d0,0000002c) ret=7e0bdbc9 0028:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 0028:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bc,007ceaa4,00000000,00000000) ret=7e0bdf33 0028:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 0028:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 0028:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0028:Call ntdll.RtlFreeHeap(00110000,00000000,0014b208) ret=7e72ae0b 0028:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e72ae0b 0028:Ret winmm.waveOutClose() retval=00000000 ret=7e0c01a5 0028:Call ntdll.RtlFreeHeap(00110000,00000000,0014b1d0) ret=7e0c01f7 0028:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e0c01f7 0028:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0028:Call ntdll.RtlFreeHeap(00110000,00000000,0014b280) ret=7e72ae0b 0028:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e72ae0b 0009:Call KERNEL32.WaitForSingleObject(00000070,ffffffff) ret=7e1b2635 0009:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1b2635 0009:Call KERNEL32.CloseHandle(00000070) ret=7e1b2640 0009:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1b2640 0009:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0009:Ret winmm.waveOutReset() retval=00000000 ret=7e0c0180 0009:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0009:Call KERNEL32.WaitForSingleObject(00000040,ffffffff) ret=7e73555a 0028:Call ntdll.RtlFreeHeap(00110000,00000000,00148c28) ret=7e731f79 0028:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e731f79 0028:Call KERNEL32.SetEvent(00000040) ret=7e7343a0 0028:Ret KERNEL32.SetEvent() retval=00000001 ret=7e7343a0 0028:Call KERNEL32.CloseHandle(00000064) ret=7e734340 0028:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e734340 0028:Call ntdll.RtlFreeHeap(00110000,00000000,0014b258) ret=7e734360 0028:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e734360 0028:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) 0028:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0028:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) 0028:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0028:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) 0028:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0028:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) 0028:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) retval=1 0028:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) 0028:Call KERNEL32.TlsGetValue(00000000) ret=7e3f4071 0028:Ret KERNEL32.TlsGetValue() retval=00000000 ret=7e3f4071 0028:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0028:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) 0028:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0009:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e73555a 0009:Call KERNEL32.ResetEvent(00000038) ret=7e735572 0009:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e735572 0009:Call KERNEL32.CreateThread(00000000,00000000,7e7348a0,0014cad8,00000000,0033f598) ret=7e73560c 002c:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) 002c:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 002c:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) 002c:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 002c:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) 002c:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) retval=1 002c:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) 002c:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 002c:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) 002c:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 002c:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) 002c:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 002c:Starting thread proc 0x7e7348a0 (arg=0x14cad8) 002c:Call KERNEL32.FindResourceW(01000000,0000007c,7e741bde L"WAVE") ret=7e734ca3 002c:Ret KERNEL32.FindResourceW() retval=01014c40 ret=7e734ca3 002c:Call KERNEL32.LoadResource(01000000,01014c40) ret=7e734cb9 002c:Ret KERNEL32.LoadResource() retval=0104d668 ret=7e734cb9 002c:Call KERNEL32.LockResource(0104d668) ret=7e734cce 002c:Ret KERNEL32.LockResource() retval=0104d668 ret=7e734cce 002c:Call KERNEL32.FreeResource(0104d668) ret=7e734ce9 002c:Ret KERNEL32.FreeResource() retval=00000000 ret=7e734ce9 002c:Call ntdll.RtlAllocateHeap(00110000,00000008,0000005c) ret=7e733960 002c:Ret ntdll.RtlAllocateHeap() retval=00148c28 ret=7e733960 002c:Call KERNEL32.GetFileSize(ffffffff,00000000) ret=7e733ab9 002c:Ret KERNEL32.GetFileSize() retval=ffffffff ret=7e733ab9 002c:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7e733cf0 002c:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e733cf0 002c:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7e734e1c 002c:Ret ntdll.RtlAllocateHeap() retval=00148cb8 ret=7e734e1c 002c:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e734f1f 002c:Ret KERNEL32.CreateEventW() retval=00000068 ret=7e734f1f 002c:Call ntdll.RtlAllocateHeap(00110000,00000008,0000001c) ret=7e72abbe 002c:Ret ntdll.RtlAllocateHeap() retval=0014cb00 ret=7e72abbe 002c:Call msacm32.drv.wodMessage(0000ffff,00000005,008ce918,008ce970,00030000) ret=7e728e1f 002c:Call ntdll.RtlAllocateHeap(00110000,00000000,0000002c) ret=7e0bfd8c 002c:Ret ntdll.RtlAllocateHeap() retval=0014cb28 ret=7e0bfd8c 002c:Call winmm.waveOutGetNumDevs() ret=7e0bfdb5 002c:Ret winmm.waveOutGetNumDevs() retval=00000002 ret=7e0bfdb5 002c:Call winmm.waveOutOpen(0014cb30,00000000,00148cb8,7e0bde60,0014cb28,00030008) ret=7e0c0313 002c:Call ntdll.RtlAllocateHeap(00110000,00000008,0000001c) ret=7e72abbe 002c:Ret ntdll.RtlAllocateHeap() retval=0014cb60 ret=7e72abbe 002c:Call winealsa.drv.wodMessage(00000000,00000005,008ce5b8,008ce610,00030008) ret=7e728e1f 002c:Call ntdll.RtlAllocateHeap(00110000,00000008,00000068) ret=7e1c6c82 002c:Ret ntdll.RtlAllocateHeap() retval=0014b1d0 ret=7e1c6c82 002c:Call ntdll.RtlAllocateHeap(00110000,00000008,00000300) ret=7e1b2459 002c:Ret ntdll.RtlAllocateHeap() retval=0014c7d0 ret=7e1b2459 002c:Call KERNEL32.InitializeCriticalSection(0013cefc) ret=7e1b2469 002c:Ret KERNEL32.InitializeCriticalSection() retval=00000001 ret=7e1b2469 002c:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1c73ab 002c:Ret KERNEL32.CreateEventW() retval=00000070 ret=7e1c73ab 002c:Call KERNEL32.CreateThread(00000000,00000000,7e1c5570,00000000,00000000,0013cedc) ret=7e1c73ef 0009:Ret KERNEL32.CreateThread() retval=00000064 ret=7e73560c 0009:Call KERNEL32.SetThreadPriority(00000064,0000000f) ret=7e73562d 0009:Ret KERNEL32.SetThreadPriority() retval=00000001 ret=7e73562d 0009:Ret winmm.PlaySoundW() retval=00000001 ret=01006aa0 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,0000000c) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c5970 ret=0100a7d2 0009:Call user32.GetClientRect(00010030,0033f608) ret=01005145 0009:Ret user32.GetClientRect() retval=00000001 ret=01005145 0009:Call user32.GetDC(00010030) ret=010051ad 0009:Ret user32.GetDC() retval=00000314 ret=010051ad 0009:Call gdi32.CreateCompatibleDC(00000314) ret=010051bc 0009:Ret gdi32.CreateCompatibleDC() retval=00002698 ret=010051bc 0009:Call gdi32.CreateCompatibleDC(00000314) ret=010051ca 0009:Ret gdi32.CreateCompatibleDC() retval=000026a4 ret=010051ca 0009:Call gdi32.CreateCompatibleDC(00000314) ret=010051d8 0009:Ret gdi32.CreateCompatibleDC() retval=000026b0 ret=010051d8 0009:Call gdi32.CreateCompatibleBitmap(00000314,00000047,00000060) ret=010051f8 0009:Ret gdi32.CreateCompatibleBitmap() retval=000026bc ret=010051f8 0009:Call gdi32.CreateCompatibleBitmap(00000314,00000047,00000060) ret=01005212 0009:Ret gdi32.CreateCompatibleBitmap() retval=000026c0 ret=01005212 0009:Call gdi32.CreateCompatibleBitmap(00000314,00000047,00000060) ret=0100522c 0009:Ret gdi32.CreateCompatibleBitmap() retval=000026c4 ret=0100522c 0009:Call gdi32.SelectObject(00002698,000026bc) ret=01005246 0009:Ret gdi32.SelectObject() retval=0000006c ret=01005246 0009:Call gdi32.SelectObject(000026a4,000026c0) ret=0100525a 0009:Ret gdi32.SelectObject() retval=0000006c ret=0100525a 0009:Call gdi32.SelectObject(000026b0,000026c4) ret=0100526e 0009:Ret gdi32.SelectObject() retval=0000006c ret=0100526e 0009:Call user32.LoadBitmapW(01000000,0033f5a0 L"CARD40") ret=010028ff 0009:Ret user32.LoadBitmapW() retval=000026d4 ret=010028ff 0009:Call gdi32.CreateCompatibleDC(000026a4) ret=01002909 0009:Ret gdi32.CreateCompatibleDC() retval=000026e8 ret=01002909 0009:Call gdi32.SelectObject(000026e8,000026d4) ret=01002917 0009:Ret gdi32.SelectObject() retval=0000006c ret=01002917 0009:Call gdi32.BitBlt(000026a4,00000000,00000000,00000047,00000060,000026e8,00000000,00000000,00cc0020) ret=01002938 0009:Ret gdi32.BitBlt() retval=00000001 ret=01002938 0009:Call gdi32.SelectObject(000026e8,0000006c) ret=0100293e 0009:Ret gdi32.SelectObject() retval=000026d4 ret=0100293e 0009:Call gdi32.DeleteObject(000026d4) ret=01002947 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01002947 0009:Call gdi32.DeleteDC(000026e8) ret=0100294e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100294e 0009:Call gdi32.SetPixel(000026a4,00000000,00000000,00008000) ret=01002969 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002969 0009:Call gdi32.SetPixel(000026a4,00000001,00000000,00008000) ret=01002976 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002976 0009:Call gdi32.SetPixel(000026a4,00000000,00000001,00008000) ret=01002982 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002982 0009:Call gdi32.SetPixel(000026a4,00000046,00000000,00008000) ret=0100298f 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100298f 0009:Call gdi32.SetPixel(000026a4,00000045,00000000,00008000) ret=0100299c 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100299c 0009:Call gdi32.SetPixel(000026a4,00000046,00000001,00008000) ret=010029ab 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ab 0009:Call gdi32.SetPixel(000026a4,00000000,0000005f,00008000) ret=010029bf 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029bf 0009:Call gdi32.SetPixel(000026a4,00000001,0000005f,00008000) ret=010029d0 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029d0 0009:Call gdi32.SetPixel(000026a4,00000000,0000005e,00008000) ret=010029de 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029de 0009:Call gdi32.SetPixel(000026a4,00000046,0000005f,00008000) ret=010029ef 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ef 0009:Call gdi32.SetPixel(000026a4,00000045,0000005f,00008000) ret=01002a00 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a00 0009:Call gdi32.SetPixel(000026a4,00000046,0000005e,00008000) ret=01002a11 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a11 0009:Call user32.LoadBitmapW(01000000,010012c8 L"CARDBACK") ret=010028ff 002e:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) 002e:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 002e:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) 002e:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 002e:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) 002e:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) retval=1 002e:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) 002e:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 002e:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) 002e:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 002e:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) 002e:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 002e:Starting thread proc 0x7e1c5570 (arg=(nil)) 002e:Call KERNEL32.SetEvent(00000070) ret=7e1c55aa 002e:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c55aa 002c:Ret KERNEL32.CreateThread() retval=000000e8 ret=7e1c73ef 002c:Call KERNEL32.SetThreadPriority(000000e8,0000000f) ret=7e1c7413 002c:Ret KERNEL32.SetThreadPriority() retval=00000001 ret=7e1c7413 002c:Call KERNEL32.WaitForSingleObject(00000070,ffffffff) ret=7e1c742f 002c:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1c742f 002c:Call KERNEL32.CloseHandle(00000070) ret=7e1c7443 002c:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1c7443 002c:Call ntdll.RtlFreeHeap(00110000,00000000,0014b1d0) ret=7e1c7479 002c:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e1c7479 002c:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bb,0014cb28,00000000,00000000) ret=7e1c4643 002c:Call KERNEL32.IsBadReadPtr(0014cb28,0000002c) ret=7e0bdbc9 002c:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 002c:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bb,008ceaa4,00000000,00000000) ret=7e0bdf33 002c:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 002c:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 002c:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 002c:Ret winmm.waveOutOpen() retval=00000000 ret=7e0c0313 002c:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 002c:Call ntdll.RtlAllocateHeap(00110000,00000000,000039ac) ret=7e73520d 002c:Ret ntdll.RtlAllocateHeap() retval=0014d948 ret=7e73520d 002c:Call msacm32.drv.wodMessage(0000ffff,00000007,0014cb28,0014d948,00000020) ret=7e728e1f 002c:Call winmm.waveOutPrepareHeader(00008001,0014d948,00000020) ret=7e0c09d8 002c:Call winealsa.drv.wodMessage(00000000,00000007,7e72ab2b,0014d948,00000020) ret=7e728e1f 002c:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 002c:Ret winmm.waveOutPrepareHeader() retval=00000000 ret=7e0c09d8 002c:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 002c:Call msacm32.drv.wodMessage(0000ffff,00000007,0014cb28,0014d968,00000020) ret=7e728e1f 002c:Call winmm.waveOutPrepareHeader(00008001,0014d968,00000020) ret=7e0c09d8 002c:Call winealsa.drv.wodMessage(00000000,00000007,7e72ab2b,0014d968,00000020) ret=7e728e1f 002c:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 002c:Ret winmm.waveOutPrepareHeader() retval=00000000 ret=7e0c09d8 002c:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 002c:Call KERNEL32.WaitForSingleObject(00000038,00000000) ret=7e735343 002c:Ret KERNEL32.WaitForSingleObject() retval=00000102 ret=7e735343 002c:Call msacm32.drv.wodMessage(0000ffff,00000009,0014cb28,0014d948,00000020) ret=7e728e1f 002c:Call winmm.waveOutWrite(00008001,0014d948,00000020) ret=7e0c09b5 002c:Call winealsa.drv.wodMessage(00000000,00000009,7e72ab2b,0014d948,00000020) ret=7e728e1f 002c:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 002c:Ret winmm.waveOutWrite() retval=00000000 ret=7e0c09b5 002c:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 002c:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 002c:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 002c:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 002c:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 002c:Call KERNEL32.WaitForSingleObject(00000068,ffffffff) ret=7e73429b 0009:Ret user32.LoadBitmapW() retval=00002700 ret=010028ff 0009:Call gdi32.CreateCompatibleDC(00002698) ret=01002909 0009:Ret gdi32.CreateCompatibleDC() retval=00002714 ret=01002909 0009:Call gdi32.SelectObject(00002714,00002700) ret=01002917 0009:Ret gdi32.SelectObject() retval=0000006c ret=01002917 0009:Call gdi32.BitBlt(00002698,00000000,00000000,00000047,00000060,00002714,00000000,00000000,00cc0020) ret=01002938 0009:Ret gdi32.BitBlt() retval=00000001 ret=01002938 0009:Call gdi32.SelectObject(00002714,0000006c) ret=0100293e 0009:Ret gdi32.SelectObject() retval=00002700 ret=0100293e 0009:Call gdi32.DeleteObject(00002700) ret=01002947 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01002947 0009:Call gdi32.DeleteDC(00002714) ret=0100294e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100294e 0009:Call gdi32.SetPixel(00002698,00000000,00000000,00008000) ret=01002969 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002969 0009:Call gdi32.SetPixel(00002698,00000001,00000000,00008000) ret=01002976 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002976 0009:Call gdi32.SetPixel(00002698,00000000,00000001,00008000) ret=01002982 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002982 0009:Call gdi32.SetPixel(00002698,00000046,00000000,00008000) ret=0100298f 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100298f 0009:Call gdi32.SetPixel(00002698,00000045,00000000,00008000) ret=0100299c 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100299c 0009:Call gdi32.SetPixel(00002698,00000046,00000001,00008000) ret=010029ab 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ab 0009:Call gdi32.SetPixel(00002698,00000000,0000005f,00008000) ret=010029bf 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029bf 0009:Call gdi32.SetPixel(00002698,00000001,0000005f,00008000) ret=010029d0 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029d0 0009:Call gdi32.SetPixel(00002698,00000000,0000005e,00008000) ret=010029de 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029de 0009:Call gdi32.SetPixel(00002698,00000046,0000005f,00008000) ret=010029ef 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ef 0009:Call gdi32.SetPixel(00002698,00000045,0000005f,00008000) ret=01002a00 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a00 0009:Call gdi32.SetPixel(00002698,00000046,0000005e,00008000) ret=01002a11 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a11 0009:Call winmm.timeGetTime() ret=010047d1 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00003c7d ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00003c7d ret=010047d1 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00003c7d ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00003c7d ret=01004881 0009:Call gdi32.BitBlt(00002698,00000000,00000000,00000048,00000061,00002698,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00000314,00000459,00000258,00000047,00000060,000026a4,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00003c83 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00003c83 ret=01004881 0009:Call gdi32.BitBlt(000026b0,00000000,00000042,00000047,0000001e,00002698,00000000,00000042,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000026b0,00000042,00000000,00000005,00000042,00002698,00000042,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00002698,00000005,0000001e,00000043,00000043,00002698,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00002698,00000000,00000000,00000047,0000001e,00000314,00000454,0000023a,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00002698,00000000,0000001e,00000005,00000042,00000314,00000454,00000258,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000454,0000023a,00000047,00000060,000026a4,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000459,0000029a,00000047,0000001e,000026b0,00000000,00000042,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000049b,00000258,00000005,00000042,000026b0,00000042,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00003c8b ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00003c8b ret=01004881 0009:Call gdi32.BitBlt(000026b0,00000000,00000038,00000047,00000028,00002698,00000000,00000038,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000026b0,00000040,00000000,00000007,00000038,00002698,00000040,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00002698,00000007,00000028,00000041,00000039,00002698,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00002698,00000000,00000000,00000047,00000028,00000314,0000044d,00000212,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00002698,00000000,00000028,00000007,00000038,00000314,0000044d,0000023a,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,0000044d,00000212,00000047,00000060,000026a4,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000454,00000272,00000047,00000028,000026b0,00000000,00000038,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000494,0000023a,00000007,00000038,000026b0,00000040,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00003c93 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00003c93 ret=01004881 0009:Call gdi32.BitBlt(000026b0,00000000,00000037,00000047,00000029,00002698,00000000,00000037,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000026b0,00000041,00000000,00000006,00000037,00002698,00000041,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00002698,00000006,00000029,00000042,00000038,00002698,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00002698,00000000,00000000,00000047,00000029,00000314,00000447,000001e9,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00002698,00000000,00000029,00000006,00000037,00000314,00000447,00000212,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000447,000001e9,00000047,00000060,000026a4,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,0000044d,00000249,00000047,00000029,000026b0,00000000,00000037,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000048e,00000212,00000006,00000037,000026b0,00000041,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00003c9b ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00003c9b ret=01004881 0009:Call gdi32.BitBlt(000026b0,00000000,00000038,00000047,00000028,00002698,00000000,00000038,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000026b0,00000040,00000000,00000007,00000038,00002698,00000040,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00002698,00000007,00000028,00000041,00000039,00002698,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00002698,00000000,00000000,00000047,00000028,00000314,00000440,000001c1,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00002698,00000000,00000028,00000007,00000038,00000314,00000440,000001e9,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000440,000001c1,00000047,00000060,000026a4,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000447,00000221,00000047,00000028,000026b0,00000000,00000038,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000487,000001e9,00000007,00000038,000026b0,00000040,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00003ca3 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00003ca3 ret=01004881 0009:Call gdi32.BitBlt(000026b0,00000000,00000037,00000047,00000029,00002698,00000000,00000037,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000026b0,00000040,00000000,00000007,00000037,00002698,00000040,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00002698,00000007,00000029,00000041,00000038,00002698,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00002698,00000000,00000000,00000047,00000029,00000314,00000439,00000198,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00002698,00000000,00000029,00000007,00000037,00000314,00000439,000001c1,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000439,00000198,00000047,00000060,000026a4,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000440,000001f8,00000047,00000029,000026b0,00000000,00000037,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000480,000001c1,00000007,00000037,000026b0,00000040,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00003cab ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00003cab ret=01004881 0009:Call gdi32.BitBlt(000026b0,00000000,00000038,00000047,00000028,00002698,00000000,00000038,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000026b0,00000040,00000000,00000007,00000038,00002698,00000040,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00002698,00000007,00000028,00000041,00000039,00002698,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00002698,00000000,00000000,00000047,00000028,00000314,00000432,00000170,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00002698,00000000,00000028,00000007,00000038,00000314,00000432,00000198,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000432,00000170,00000047,00000060,000026a4,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000439,000001d0,00000047,00000028,000026b0,00000000,00000038,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000479,00000198,00000007,00000038,000026b0,00000040,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00003cb3 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00003cb3 ret=01004881 0009:Call gdi32.BitBlt(000026b0,00000000,00000037,00000047,00000029,00002698,00000000,00000037,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000026b0,00000040,00000000,00000007,00000037,00002698,00000040,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00002698,00000007,00000029,00000041,00000038,00002698,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00002698,00000000,00000000,00000047,00000029,00000314,0000042b,00000147,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00002698,00000000,00000029,00000007,00000037,00000314,0000042b,00000170,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,0000042b,00000147,00000047,00000060,000026a4,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000432,000001a7,00000047,00000029,000026b0,00000000,00000037,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000472,00000170,00000007,00000037,000026b0,00000040,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00003cbb ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00003cbb ret=01004881 0009:Call gdi32.BitBlt(000026b0,00000000,00000038,00000047,00000028,00002698,00000000,00000038,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000026b0,00000040,00000000,00000007,00000038,00002698,00000040,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00002698,00000007,00000028,00000041,00000039,00002698,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00002698,00000000,00000000,00000047,00000028,00000314,00000424,0000011f,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00002698,00000000,00000028,00000007,00000038,00000314,00000424,00000147,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000424,0000011f,00000047,00000060,000026a4,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,0000042b,0000017f,00000047,00000028,000026b0,00000000,00000038,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000046b,00000147,00000007,00000038,000026b0,00000040,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00003cc3 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00003cc3 ret=01004881 0009:Call gdi32.BitBlt(000026b0,00000000,00000037,00000047,00000029,00002698,00000000,00000037,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000026b0,00000040,00000000,00000007,00000037,00002698,00000040,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00002698,00000007,00000029,00000041,00000038,00002698,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00002698,00000000,00000000,00000047,00000029,00000314,0000041d,000000f6,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00002698,00000000,00000029,00000007,00000037,00000314,0000041d,0000011f,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,0000041d,000000f6,00000047,00000060,000026a4,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000424,00000156,00000047,00000029,000026b0,00000000,00000037,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000464,0000011f,00000007,00000037,000026b0,00000040,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00003ccb ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00003ccb ret=01004881 0009:Call gdi32.BitBlt(000026b0,00000000,00000038,00000047,00000028,00002698,00000000,00000038,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000026b0,00000040,00000000,00000007,00000038,00002698,00000040,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00002698,00000007,00000028,00000041,00000039,00002698,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00002698,00000000,00000000,00000047,00000028,00000314,00000416,000000ce,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00002698,00000000,00000028,00000007,00000038,00000314,00000416,000000f6,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000416,000000ce,00000047,00000060,000026a4,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,0000041d,0000012e,00000047,00000028,000026b0,00000000,00000038,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000045d,000000f6,00000007,00000038,000026b0,00000040,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00003cd3 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00003cd3 ret=01004881 0009:Call gdi32.BitBlt(000026b0,00000000,00000037,00000047,00000029,00002698,00000000,00000037,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000026b0,00000041,00000000,00000006,00000037,00002698,00000041,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00002698,00000006,00000029,00000042,00000038,00002698,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00002698,00000000,00000000,00000047,00000029,00000314,00000410,000000a5,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00002698,00000000,00000029,00000006,00000037,00000314,00000410,000000ce,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000410,000000a5,00000047,00000060,000026a4,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000416,00000105,00000047,00000029,000026b0,00000000,00000037,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000457,000000ce,00000006,00000037,000026b0,00000041,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00003cdb ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00003cdb ret=01004881 0009:Call gdi32.BitBlt(000026b0,00000000,00000038,00000047,00000028,00002698,00000000,00000038,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000026b0,00000040,00000000,00000007,00000038,00002698,00000040,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00002698,00000007,00000028,00000041,00000039,00002698,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00002698,00000000,00000000,00000047,00000028,00000314,00000409,0000007d,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00002698,00000000,00000028,00000007,00000038,00000314,00000409,000000a5,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000409,0000007d,00000047,00000060,000026a4,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000410,000000dd,00000047,00000028,000026b0,00000000,00000038,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000450,000000a5,00000007,00000038,000026b0,00000040,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00003ce3 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00003ce3 ret=01004881 0009:Call gdi32.BitBlt(000026b0,00000000,00000041,00000047,0000001f,00002698,00000000,00000041,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(000026b0,00000041,00000000,00000006,00000041,00002698,00000041,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00002698,00000006,0000001f,00000042,00000042,00002698,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00002698,00000000,00000000,00000047,0000001f,00000314,00000403,0000005e,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00002698,00000000,0000001f,00000006,00000041,00000314,00000403,0000007d,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000403,0000005e,00000047,00000060,000026a4,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000409,000000be,00000047,0000001f,000026b0,00000000,00000041,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000044a,0000007d,00000006,00000041,000026b0,00000041,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call gdi32.SelectObject(00002698,0000006c) ret=01005316 0009:Ret gdi32.SelectObject() retval=000026bc ret=01005316 0009:Call gdi32.SelectObject(000026a4,0000006c) ret=01005324 0009:Ret gdi32.SelectObject() retval=000026c0 ret=01005324 0009:Call gdi32.SelectObject(000026b0,0000006c) ret=01005332 0009:Ret gdi32.SelectObject() retval=000026c4 ret=01005332 0009:Call gdi32.DeleteObject(000026bc) ret=01005340 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005340 0009:Call gdi32.DeleteObject(000026c0) ret=01005348 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005348 0009:Call gdi32.DeleteObject(000026c4) ret=01005350 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005350 0009:Call gdi32.DeleteDC(00002698) ret=0100535e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100535e 0009:Call gdi32.DeleteDC(000026a4) ret=01005366 0009:Ret gdi32.DeleteDC() retval=00000001 ret=01005366 0009:Call gdi32.DeleteDC(000026b0) ret=0100536e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100536e 0009:Call user32.ReleaseDC(00010030,00000314) ret=0100537c 0009:Ret user32.ReleaseDC() retval=00000001 ret=0100537c 0009:Call user32.InvalidateRect(00010030,0033f618,00000000) ret=0100538a 0009:Ret user32.InvalidateRect() retval=00000001 ret=0100538a 0009:Call KERNEL32.GetModuleHandleW(00000000) ret=01006a97 0009:Ret KERNEL32.GetModuleHandleW() retval=01000000 ret=01006a97 0009:Call winmm.PlaySoundW(0000007c,01000000,00040007) ret=01006aa0 0009:Call ntdll.RtlAllocateHeap(00110000,00000008,0000001c) ret=7e7356bc 0009:Ret ntdll.RtlAllocateHeap() retval=0014b268 ret=7e7356bc 0009:Call KERNEL32.ResetEvent(00000040) ret=7e735513 0009:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e735513 0009:Call KERNEL32.SetEvent(00000038) ret=7e735520 0009:Ret KERNEL32.SetEvent() retval=00000001 ret=7e735520 0009:Call msacm32.drv.wodMessage(0000ffff,0000000c,0014cb28,00000000,00000000) ret=7e728e1f 0009:Call winmm.waveOutReset(00008001) ret=7e0c0180 0009:Call winealsa.drv.wodMessage(00000000,0000000c,7e72ab2b,00000000,00000000) ret=7e728e1f 0009:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1b2580 0009:Ret KERNEL32.CreateEventW() retval=00000070 ret=7e1b2580 002e:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bd,0014cb28,0014d948,00000000) ret=7e1c4643 002e:Call KERNEL32.IsBadReadPtr(0014cb28,0000002c) ret=7e0bdbc9 002e:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 002e:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bd,008ceaa4,0014d948,00000000) ret=7e0bdf33 002e:Call KERNEL32.SetEvent(00000068) ret=7e7341f6 002e:Ret KERNEL32.SetEvent() retval=00000001 ret=7e7341f6 002e:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 002e:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 002e:Call KERNEL32.SetEvent(00000070) ret=7e1c4f3d 002e:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c4f3d 002c:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e73429b 002c:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 002c:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 002c:Call msacm32.drv.wodMessage(0000ffff,0000000c,0014cb28,00000000,00000000) ret=7e728e1f 002c:Call winmm.waveOutReset(00008001) ret=7e0c0180 002c:Call winealsa.drv.wodMessage(00000000,0000000c,7e72ab2b,00000000,00000000) ret=7e728e1f 002c:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1b2580 002c:Ret KERNEL32.CreateEventW() retval=000000ec ret=7e1b2580 002c:Call KERNEL32.WaitForSingleObject(000000ec,ffffffff) ret=7e1b2635 002e:Call KERNEL32.SetEvent(000000ec) ret=7e1c4f3d 002e:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c4f3d 002c:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1b2635 002c:Call KERNEL32.CloseHandle(000000ec) ret=7e1b2640 002c:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1b2640 002c:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 002c:Ret winmm.waveOutReset() retval=00000000 ret=7e0c0180 002c:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 002c:Call msacm32.drv.wodMessage(0000ffff,00000008,0014cb28,0014d948,00000020) ret=7e728e1f 002c:Call winmm.waveOutUnprepareHeader(00008001,0014d948,00000020) ret=7e0c00b6 002c:Call winealsa.drv.wodMessage(00000000,00000008,7e72ab2b,0014d948,00000020) ret=7e728e1f 002c:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 002c:Ret winmm.waveOutUnprepareHeader() retval=00000000 ret=7e0c00b6 002c:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 002c:Call msacm32.drv.wodMessage(0000ffff,00000008,0014cb28,0014d968,00000020) ret=7e728e1f 002c:Call winmm.waveOutUnprepareHeader(00008001,0014d968,00000020) ret=7e0c00b6 002c:Call winealsa.drv.wodMessage(00000000,00000008,7e72ab2b,0014d968,00000020) ret=7e728e1f 002c:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 002c:Ret winmm.waveOutUnprepareHeader() retval=00000000 ret=7e0c00b6 002c:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 002c:Call KERNEL32.CloseHandle(00000068) ret=7e7349fd 002c:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e7349fd 002c:Call ntdll.RtlFreeHeap(00110000,00000000,0014d948) ret=7e734a23 002c:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e734a23 002c:Call ntdll.RtlFreeHeap(00110000,00000000,00148cb8) ret=7e734a49 002c:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e734a49 002c:Call msacm32.drv.wodMessage(0000ffff,00000006,0014cb28,00000000,00000000) ret=7e728e1f 002c:Call winmm.waveOutClose(00008001) ret=7e0c01a5 002c:Call winealsa.drv.wodMessage(00000000,00000006,7e72ab2b,00000000,00000000) ret=7e728e1f 002c:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1b2580 002c:Ret KERNEL32.CreateEventW() retval=00000068 ret=7e1b2580 002c:Call KERNEL32.WaitForSingleObject(00000068,ffffffff) ret=7e1b2635 002e:Call KERNEL32.SetEvent(00000068) ret=7e1c4ea1 002e:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c4ea1 002e:Call KERNEL32.ExitThread(00000000) ret=7e1c4eb0 002e:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) 002e:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 002e:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) 002e:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) retval=1 002e:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) 002e:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 002e:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) 002e:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) retval=1 002e:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) 002e:Call KERNEL32.TlsGetValue(00000000) ret=7e3f4071 002e:Ret KERNEL32.TlsGetValue() retval=00000000 ret=7e3f4071 002e:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 002e:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) 002e:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 002c:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1b2635 002c:Call KERNEL32.CloseHandle(00000068) ret=7e1b2640 002c:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1b2640 002c:Call ntdll.RtlFreeHeap(00110000,00000000,0014c7d0) ret=7e1b24dc 002c:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e1b24dc 002c:Call ntdll.RtlDeleteCriticalSection(0013cefc) ret=7e1b24fb 002c:Ret ntdll.RtlDeleteCriticalSection() retval=00000000 ret=7e1b24fb 002c:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bc,0014cb28,00000000,00000000) ret=7e1c4643 002c:Call KERNEL32.IsBadReadPtr(0014cb28,0000002c) ret=7e0bdbc9 002c:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 002c:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bc,008ceaa4,00000000,00000000) ret=7e0bdf33 002c:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 002c:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 002c:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 002c:Call ntdll.RtlFreeHeap(00110000,00000000,0014cb60) ret=7e72ae0b 002c:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e72ae0b 002c:Ret winmm.waveOutClose() retval=00000000 ret=7e0c01a5 002c:Call ntdll.RtlFreeHeap(00110000,00000000,0014cb28) ret=7e0c01f7 002c:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e0c01f7 002c:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 002c:Call ntdll.RtlFreeHeap(00110000,00000000,0014cb00) ret=7e72ae0b 002c:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e72ae0b 0009:Call KERNEL32.WaitForSingleObject(00000070,ffffffff) ret=7e1b2635 0009:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1b2635 0009:Call KERNEL32.CloseHandle(00000070) ret=7e1b2640 0009:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1b2640 0009:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0009:Ret winmm.waveOutReset() retval=00000000 ret=7e0c0180 0009:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0009:Call KERNEL32.WaitForSingleObject(00000040,ffffffff) ret=7e73555a 002c:Call ntdll.RtlFreeHeap(00110000,00000000,00148c28) ret=7e731f79 002c:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e731f79 002c:Call KERNEL32.SetEvent(00000040) ret=7e7343a0 002c:Ret KERNEL32.SetEvent() retval=00000001 ret=7e7343a0 002c:Call KERNEL32.CloseHandle(00000064) ret=7e734340 002c:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e734340 002c:Call ntdll.RtlFreeHeap(00110000,00000000,0014cad8) ret=7e734360 002c:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e734360 002c:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) 002c:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 002c:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) 002c:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) retval=1 002c:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) 002c:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 002c:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) 002c:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) retval=1 002c:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) 002c:Call KERNEL32.TlsGetValue(00000000) ret=7e3f4071 002c:Ret KERNEL32.TlsGetValue() retval=00000000 ret=7e3f4071 002c:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 002c:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) 002c:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0009:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e73555a 0009:Call KERNEL32.ResetEvent(00000038) ret=7e735572 0009:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e735572 0009:Call KERNEL32.CreateThread(00000000,00000000,7e7348a0,0014b268,00000000,0033f598) ret=7e73560c 0030:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) 0030:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0030:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) 0030:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0030:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) 0030:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) retval=1 0030:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) 0030:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0030:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) 0030:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0030:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) 0030:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0030:Starting thread proc 0x7e7348a0 (arg=0x14b268) 0030:Call KERNEL32.FindResourceW(01000000,0000007c,7e741bde L"WAVE") ret=7e734ca3 0030:Ret KERNEL32.FindResourceW() retval=01014c40 ret=7e734ca3 0030:Call KERNEL32.LoadResource(01000000,01014c40) ret=7e734cb9 0030:Ret KERNEL32.LoadResource() retval=0104d668 ret=7e734cb9 0030:Call KERNEL32.LockResource(0104d668) ret=7e734cce 0030:Ret KERNEL32.LockResource() retval=0104d668 ret=7e734cce 0030:Call KERNEL32.FreeResource(0104d668) ret=7e734ce9 0030:Ret KERNEL32.FreeResource() retval=00000000 ret=7e734ce9 0030:Call ntdll.RtlAllocateHeap(00110000,00000008,0000005c) ret=7e733960 0030:Ret ntdll.RtlAllocateHeap() retval=00148c28 ret=7e733960 0030:Call KERNEL32.GetFileSize(ffffffff,00000000) ret=7e733ab9 0030:Ret KERNEL32.GetFileSize() retval=ffffffff ret=7e733ab9 0030:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7e733cf0 0030:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e733cf0 0030:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7e734e1c 0030:Ret ntdll.RtlAllocateHeap() retval=00148cb8 ret=7e734e1c 0030:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e734f1f 0030:Ret KERNEL32.CreateEventW() retval=00000068 ret=7e734f1f 0030:Call ntdll.RtlAllocateHeap(00110000,00000008,0000001c) ret=7e72abbe 0030:Ret ntdll.RtlAllocateHeap() retval=0014b290 ret=7e72abbe 0030:Call msacm32.drv.wodMessage(0000ffff,00000005,007ce918,007ce970,00030000) ret=7e728e1f 0030:Call ntdll.RtlAllocateHeap(00110000,00000000,0000002c) ret=7e0bfd8c 0030:Ret ntdll.RtlAllocateHeap() retval=0014b1d0 ret=7e0bfd8c 0030:Call winmm.waveOutGetNumDevs() ret=7e0bfdb5 0030:Ret winmm.waveOutGetNumDevs() retval=00000002 ret=7e0bfdb5 0030:Call winmm.waveOutOpen(0014b1d8,00000000,00148cb8,7e0bde60,0014b1d0,00030008) ret=7e0c0313 0030:Call ntdll.RtlAllocateHeap(00110000,00000008,0000001c) ret=7e72abbe 0030:Ret ntdll.RtlAllocateHeap() retval=0014b208 ret=7e72abbe 0030:Call winealsa.drv.wodMessage(00000000,00000005,007ce5b8,007ce610,00030008) ret=7e728e1f 0030:Call ntdll.RtlAllocateHeap(00110000,00000008,00000068) ret=7e1c6c82 0030:Ret ntdll.RtlAllocateHeap() retval=00148b18 ret=7e1c6c82 0030:Call ntdll.RtlAllocateHeap(00110000,00000008,00000300) ret=7e1b2459 0030:Ret ntdll.RtlAllocateHeap() retval=0014c7d0 ret=7e1b2459 0030:Call KERNEL32.InitializeCriticalSection(0013cefc) ret=7e1b2469 0030:Ret KERNEL32.InitializeCriticalSection() retval=00000001 ret=7e1b2469 0030:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1c73ab 0030:Ret KERNEL32.CreateEventW() retval=00000070 ret=7e1c73ab 0030:Call KERNEL32.CreateThread(00000000,00000000,7e1c5570,00000000,00000000,0013cedc) ret=7e1c73ef 0009:Ret KERNEL32.CreateThread() retval=00000064 ret=7e73560c 0009:Call KERNEL32.SetThreadPriority(00000064,0000000f) ret=7e73562d 0009:Ret KERNEL32.SetThreadPriority() retval=00000001 ret=7e73562d 0009:Ret winmm.PlaySoundW() retval=00000001 ret=01006aa0 0009:Call ntdll.RtlAllocateHeap(005c0000,00000000,0000000c) ret=0100a7d2 0009:Ret ntdll.RtlAllocateHeap() retval=005c5988 ret=0100a7d2 0009:Call user32.GetClientRect(00010030,0033f608) ret=01005145 0009:Ret user32.GetClientRect() retval=00000001 ret=01005145 0009:Call user32.GetDC(00010030) ret=010051ad 0009:Ret user32.GetDC() retval=00000314 ret=010051ad 0009:Call gdi32.CreateCompatibleDC(00000314) ret=010051bc 0009:Ret gdi32.CreateCompatibleDC() retval=00002724 ret=010051bc 0009:Call gdi32.CreateCompatibleDC(00000314) ret=010051ca 0009:Ret gdi32.CreateCompatibleDC() retval=00002730 ret=010051ca 0009:Call gdi32.CreateCompatibleDC(00000314) ret=010051d8 0009:Ret gdi32.CreateCompatibleDC() retval=0000273c ret=010051d8 0009:Call gdi32.CreateCompatibleBitmap(00000314,00000047,00000060) ret=010051f8 0009:Ret gdi32.CreateCompatibleBitmap() retval=00002748 ret=010051f8 0009:Call gdi32.CreateCompatibleBitmap(00000314,00000047,00000060) ret=01005212 0009:Ret gdi32.CreateCompatibleBitmap() retval=0000274c ret=01005212 0009:Call gdi32.CreateCompatibleBitmap(00000314,00000047,00000060) ret=0100522c 0009:Ret gdi32.CreateCompatibleBitmap() retval=00002750 ret=0100522c 0009:Call gdi32.SelectObject(00002724,00002748) ret=01005246 0009:Ret gdi32.SelectObject() retval=0000006c ret=01005246 0009:Call gdi32.SelectObject(00002730,0000274c) ret=0100525a 0009:Ret gdi32.SelectObject() retval=0000006c ret=0100525a 0009:Call gdi32.SelectObject(0000273c,00002750) ret=0100526e 0009:Ret gdi32.SelectObject() retval=0000006c ret=0100526e 0009:Call user32.LoadBitmapW(01000000,0033f5a0 L"CARD46") ret=010028ff 0032:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) 0032:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0032:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) 0032:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0032:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) 0032:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) retval=1 0032:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) 0032:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0032:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) 0032:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0032:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) 0032:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0032:Starting thread proc 0x7e1c5570 (arg=(nil)) 0032:Call KERNEL32.SetEvent(00000070) ret=7e1c55aa 0032:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c55aa 0030:Ret KERNEL32.CreateThread() retval=000000ec ret=7e1c73ef 0030:Call KERNEL32.SetThreadPriority(000000ec,0000000f) ret=7e1c7413 0030:Ret KERNEL32.SetThreadPriority() retval=00000001 ret=7e1c7413 0030:Call KERNEL32.WaitForSingleObject(00000070,ffffffff) ret=7e1c742f 0030:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1c742f 0030:Call KERNEL32.CloseHandle(00000070) ret=7e1c7443 0030:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1c7443 0030:Call ntdll.RtlFreeHeap(00110000,00000000,00148b18) ret=7e1c7479 0030:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e1c7479 0030:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bb,0014b1d0,00000000,00000000) ret=7e1c4643 0030:Call KERNEL32.IsBadReadPtr(0014b1d0,0000002c) ret=7e0bdbc9 0030:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 0030:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bb,007ceaa4,00000000,00000000) ret=7e0bdf33 0030:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 0030:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 0030:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0030:Ret winmm.waveOutOpen() retval=00000000 ret=7e0c0313 0030:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0030:Call ntdll.RtlAllocateHeap(00110000,00000000,000039ac) ret=7e73520d 0030:Ret ntdll.RtlAllocateHeap() retval=0014d3a0 ret=7e73520d 0030:Call msacm32.drv.wodMessage(0000ffff,00000007,0014b1d0,0014d3a0,00000020) ret=7e728e1f 0030:Call winmm.waveOutPrepareHeader(00008001,0014d3a0,00000020) ret=7e0c09d8 0030:Call winealsa.drv.wodMessage(00000000,00000007,7e72ab2b,0014d3a0,00000020) ret=7e728e1f 0030:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 0030:Ret winmm.waveOutPrepareHeader() retval=00000000 ret=7e0c09d8 0030:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0030:Call msacm32.drv.wodMessage(0000ffff,00000007,0014b1d0,0014d3c0,00000020) ret=7e728e1f 0030:Call winmm.waveOutPrepareHeader(00008001,0014d3c0,00000020) ret=7e0c09d8 0030:Call winealsa.drv.wodMessage(00000000,00000007,7e72ab2b,0014d3c0,00000020) ret=7e728e1f 0030:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 0030:Ret winmm.waveOutPrepareHeader() retval=00000000 ret=7e0c09d8 0030:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0030:Call KERNEL32.WaitForSingleObject(00000038,00000000) ret=7e735343 0030:Ret KERNEL32.WaitForSingleObject() retval=00000102 ret=7e735343 0030:Call msacm32.drv.wodMessage(0000ffff,00000009,0014b1d0,0014d3a0,00000020) ret=7e728e1f 0030:Call winmm.waveOutWrite(00008001,0014d3a0,00000020) ret=7e0c09b5 0030:Call winealsa.drv.wodMessage(00000000,00000009,7e72ab2b,0014d3a0,00000020) ret=7e728e1f 0030:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0030:Ret winmm.waveOutWrite() retval=00000000 ret=7e0c09b5 0030:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0030:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 0030:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 0030:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 0030:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 0030:Call KERNEL32.WaitForSingleObject(00000068,ffffffff) ret=7e73429b 0009:Ret user32.LoadBitmapW() retval=00002760 ret=010028ff 0009:Call gdi32.CreateCompatibleDC(00002730) ret=01002909 0009:Ret gdi32.CreateCompatibleDC() retval=00002774 ret=01002909 0009:Call gdi32.SelectObject(00002774,00002760) ret=01002917 0009:Ret gdi32.SelectObject() retval=0000006c ret=01002917 0009:Call gdi32.BitBlt(00002730,00000000,00000000,00000047,00000060,00002774,00000000,00000000,00cc0020) ret=01002938 0009:Ret gdi32.BitBlt() retval=00000001 ret=01002938 0009:Call gdi32.SelectObject(00002774,0000006c) ret=0100293e 0009:Ret gdi32.SelectObject() retval=00002760 ret=0100293e 0009:Call gdi32.DeleteObject(00002760) ret=01002947 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01002947 0009:Call gdi32.DeleteDC(00002774) ret=0100294e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100294e 0009:Call gdi32.SetPixel(00002730,00000000,00000000,00008000) ret=01002969 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002969 0009:Call gdi32.SetPixel(00002730,00000001,00000000,00008000) ret=01002976 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002976 0009:Call gdi32.SetPixel(00002730,00000000,00000001,00008000) ret=01002982 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002982 0009:Call gdi32.SetPixel(00002730,00000046,00000000,00008000) ret=0100298f 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100298f 0009:Call gdi32.SetPixel(00002730,00000045,00000000,00008000) ret=0100299c 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100299c 0009:Call gdi32.SetPixel(00002730,00000046,00000001,00008000) ret=010029ab 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ab 0009:Call gdi32.SetPixel(00002730,00000000,0000005f,00008000) ret=010029bf 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029bf 0009:Call gdi32.SetPixel(00002730,00000001,0000005f,00008000) ret=010029d0 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029d0 0009:Call gdi32.SetPixel(00002730,00000000,0000005e,00008000) ret=010029de 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029de 0009:Call gdi32.SetPixel(00002730,00000046,0000005f,00008000) ret=010029ef 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ef 0009:Call gdi32.SetPixel(00002730,00000045,0000005f,00008000) ret=01002a00 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a00 0009:Call gdi32.SetPixel(00002730,00000046,0000005e,00008000) ret=01002a11 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a11 0009:Call gdi32.CreateCompatibleDC(00002724) ret=0100272b 0009:Ret gdi32.CreateCompatibleDC() retval=00002780 ret=0100272b 0009:Call user32.LoadBitmapW(01000000,010012bc L"FELT") ret=0100273f 0009:Ret user32.LoadBitmapW() retval=00002798 ret=0100273f 0009:Call gdi32.SelectObject(00002780,00002798) ret=0100274c 0009:Ret gdi32.SelectObject() retval=0000006c ret=0100274c 0009:Call gdi32.BitBlt(00002724,00000000,00000000,0000003f,00000040,00002780,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00002724,0000003f,00000000,00000008,00000040,00002780,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00002724,00000000,00000040,0000003f,00000020,00002780,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00002724,0000003f,00000040,00000008,00000020,00002780,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.SelectObject(00002780,0000006c) ret=0100287b 0009:Ret gdi32.SelectObject() retval=00002798 ret=0100287b 0009:Call gdi32.DeleteObject(00002798) ret=01002884 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01002884 0009:Call gdi32.DeleteDC(00002780) ret=0100288d 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100288d 0009:Call user32.LoadBitmapW(01000000,010012c8 L"CARDBACK") ret=010028ff 0009:Ret user32.LoadBitmapW() retval=000027b8 ret=010028ff 0009:Call gdi32.CreateCompatibleDC(00002724) ret=01002909 0009:Ret gdi32.CreateCompatibleDC() retval=000027cc ret=01002909 0009:Call gdi32.SelectObject(000027cc,000027b8) ret=01002917 0009:Ret gdi32.SelectObject() retval=0000006c ret=01002917 0009:Call gdi32.BitBlt(00002724,0000000c,00000000,00000047,00000060,000027cc,00000000,00000000,00cc0020) ret=01002938 0009:Ret gdi32.BitBlt() retval=00000001 ret=01002938 0009:Call gdi32.SelectObject(000027cc,0000006c) ret=0100293e 0009:Ret gdi32.SelectObject() retval=000027b8 ret=0100293e 0009:Call gdi32.DeleteObject(000027b8) ret=01002947 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01002947 0009:Call gdi32.DeleteDC(000027cc) ret=0100294e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100294e 0009:Call gdi32.SetPixel(00002724,0000000c,00000000,00008000) ret=01002969 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002969 0009:Call gdi32.SetPixel(00002724,0000000d,00000000,00008000) ret=01002976 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002976 0009:Call gdi32.SetPixel(00002724,0000000c,00000001,00008000) ret=01002982 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002982 0009:Call gdi32.SetPixel(00002724,00000052,00000000,00008000) ret=0100298f 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100298f 0009:Call gdi32.SetPixel(00002724,00000051,00000000,00008000) ret=0100299c 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100299c 0009:Call gdi32.SetPixel(00002724,00000052,00000001,00008000) ret=010029ab 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ab 0009:Call gdi32.SetPixel(00002724,0000000c,0000005f,00008000) ret=010029bf 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029bf 0009:Call gdi32.SetPixel(00002724,0000000d,0000005f,00008000) ret=010029d0 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029d0 0009:Call gdi32.SetPixel(00002724,0000000c,0000005e,00008000) ret=010029de 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029de 0009:Call gdi32.SetPixel(00002724,00000052,0000005f,00008000) ret=010029ef 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ef 0009:Call gdi32.SetPixel(00002724,00000051,0000005f,00008000) ret=01002a00 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a00 0009:Call gdi32.SetPixel(00002724,00000052,0000005e,00008000) ret=01002a11 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a11 0009:Call winmm.timeGetTime() ret=010047d1 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00003d0e ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00003d0e ret=010047d1 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00003d0e ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00003d0e ret=01004881 0009:Call gdi32.BitBlt(00002724,00000000,00000000,00000048,00000061,00002724,00000000,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00000314,00000459,00000258,00000047,00000060,00002730,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00003d13 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00003d13 ret=01004881 0009:Call gdi32.BitBlt(0000273c,00000000,00000047,00000047,00000019,00002724,00000000,00000047,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(0000273c,00000000,00000000,00000001,00000047,00002724,00000000,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00002724,00000000,00000019,00000047,00000048,00002724,00000001,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00002724,00000000,00000000,00000047,00000019,00000314,0000045a,0000023f,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00002724,00000046,00000019,00000001,00000047,00000314,000004a0,00000258,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,0000045a,0000023f,00000047,00000060,00002730,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000459,0000029f,00000047,00000019,0000273c,00000000,00000047,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000459,00000258,00000001,00000047,0000273c,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00003d1b ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00003d1b ret=01004881 0009:Call gdi32.BitBlt(0000273c,00000000,00000038,00000047,00000028,00002724,00000000,00000038,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(0000273c,00000000,00000000,00000003,00000038,00002724,00000000,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00002724,00000000,00000028,00000045,00000039,00002724,00000003,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00002724,00000000,00000000,00000047,00000028,00000314,0000045d,00000217,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00002724,00000044,00000028,00000003,00000038,00000314,000004a1,0000023f,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,0000045d,00000217,00000047,00000060,00002730,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,0000045a,00000277,00000047,00000028,0000273c,00000000,00000038,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000045a,0000023f,00000003,00000038,0000273c,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00003d23 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00003d23 ret=01004881 0009:Call gdi32.BitBlt(0000273c,00000000,00000037,00000047,00000029,00002724,00000000,00000037,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(0000273c,00000000,00000000,00000003,00000037,00002724,00000000,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00002724,00000000,00000029,00000045,00000038,00002724,00000003,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00002724,00000000,00000000,00000047,00000029,00000314,00000460,000001ee,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00002724,00000044,00000029,00000003,00000037,00000314,000004a4,00000217,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000460,000001ee,00000047,00000060,00002730,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,0000045d,0000024e,00000047,00000029,0000273c,00000000,00000037,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000045d,00000217,00000003,00000037,0000273c,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00003d2b ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00003d2b ret=01004881 0009:Call gdi32.BitBlt(0000273c,00000000,00000038,00000047,00000028,00002724,00000000,00000038,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(0000273c,00000000,00000000,00000003,00000038,00002724,00000000,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00002724,00000000,00000028,00000045,00000039,00002724,00000003,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00002724,00000000,00000000,00000047,00000028,00000314,00000463,000001c6,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00002724,00000044,00000028,00000003,00000038,00000314,000004a7,000001ee,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000463,000001c6,00000047,00000060,00002730,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000460,00000226,00000047,00000028,0000273c,00000000,00000038,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000460,000001ee,00000003,00000038,0000273c,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00003d33 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00003d33 ret=01004881 0009:Call gdi32.BitBlt(0000273c,00000000,00000037,00000047,00000029,00002724,00000000,00000037,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(0000273c,00000000,00000000,00000003,00000037,00002724,00000000,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00002724,00000000,00000029,00000045,00000038,00002724,00000003,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00002724,00000000,00000000,00000047,00000029,00000314,00000466,0000019d,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00002724,00000044,00000029,00000003,00000037,00000314,000004aa,000001c6,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000466,0000019d,00000047,00000060,00002730,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000463,000001fd,00000047,00000029,0000273c,00000000,00000037,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000463,000001c6,00000003,00000037,0000273c,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00003d3b ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00003d3b ret=01004881 0009:Call gdi32.BitBlt(0000273c,00000000,00000038,00000047,00000028,00002724,00000000,00000038,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(0000273c,00000000,00000000,00000003,00000038,00002724,00000000,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00002724,00000000,00000028,00000045,00000039,00002724,00000003,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00002724,00000000,00000000,00000047,00000028,00000314,00000469,00000175,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00002724,00000044,00000028,00000003,00000038,00000314,000004ad,0000019d,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000469,00000175,00000047,00000060,00002730,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000466,000001d5,00000047,00000028,0000273c,00000000,00000038,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000466,0000019d,00000003,00000038,0000273c,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00003d43 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00003d43 ret=01004881 0009:Call gdi32.BitBlt(0000273c,00000000,00000037,00000047,00000029,00002724,00000000,00000037,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(0000273c,00000000,00000000,00000003,00000037,00002724,00000000,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00002724,00000000,00000029,00000045,00000038,00002724,00000003,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00002724,00000000,00000000,00000047,00000029,00000314,0000046c,0000014c,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00002724,00000044,00000029,00000003,00000037,00000314,000004b0,00000175,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,0000046c,0000014c,00000047,00000060,00002730,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000469,000001ac,00000047,00000029,0000273c,00000000,00000037,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000469,00000175,00000003,00000037,0000273c,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00003d4b ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00003d4b ret=01004881 0009:Call gdi32.BitBlt(0000273c,00000000,00000038,00000047,00000028,00002724,00000000,00000038,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(0000273c,00000000,00000000,00000002,00000038,00002724,00000000,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00002724,00000000,00000028,00000046,00000039,00002724,00000002,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00002724,00000000,00000000,00000047,00000028,00000314,0000046e,00000124,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00002724,00000045,00000028,00000002,00000038,00000314,000004b3,0000014c,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,0000046e,00000124,00000047,00000060,00002730,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,0000046c,00000184,00000047,00000028,0000273c,00000000,00000038,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000046c,0000014c,00000002,00000038,0000273c,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00003d53 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00003d53 ret=01004881 0009:Call gdi32.BitBlt(0000273c,00000000,00000037,00000047,00000029,00002724,00000000,00000037,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(0000273c,00000000,00000000,00000003,00000037,00002724,00000000,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00002724,00000000,00000029,00000045,00000038,00002724,00000003,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00002724,00000000,00000000,00000047,00000029,00000314,00000471,000000fb,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00002724,00000044,00000029,00000003,00000037,00000314,000004b5,00000124,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000471,000000fb,00000047,00000060,00002730,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,0000046e,0000015b,00000047,00000029,0000273c,00000000,00000037,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000046e,00000124,00000003,00000037,0000273c,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00003d5b ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00003d5b ret=01004881 0009:Call gdi32.BitBlt(0000273c,00000000,00000038,00000047,00000028,00002724,00000000,00000038,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(0000273c,00000000,00000000,00000003,00000038,00002724,00000000,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00002724,00000000,00000028,00000045,00000039,00002724,00000003,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00002724,00000000,00000000,00000047,00000028,00000314,00000474,000000d3,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00002724,00000044,00000028,00000003,00000038,00000314,000004b8,000000fb,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000474,000000d3,00000047,00000060,00002730,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000471,00000133,00000047,00000028,0000273c,00000000,00000038,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000471,000000fb,00000003,00000038,0000273c,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00003d63 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00003d63 ret=01004881 0009:Call gdi32.BitBlt(0000273c,00000000,00000037,00000047,00000029,00002724,00000000,00000037,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(0000273c,00000000,00000000,00000003,00000037,00002724,00000000,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00002724,00000000,00000029,00000045,00000038,00002724,00000003,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00002724,00000000,00000000,00000047,00000029,00000314,00000477,000000aa,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00002724,00000044,00000029,00000003,00000037,00000314,000004bb,000000d3,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,00000477,000000aa,00000047,00000060,00002730,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000474,0000010a,00000047,00000029,0000273c,00000000,00000037,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000474,000000d3,00000003,00000037,0000273c,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00003d6b ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00003d6b ret=01004881 0009:Call gdi32.BitBlt(0000273c,00000000,00000038,00000047,00000028,00002724,00000000,00000038,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(0000273c,00000000,00000000,00000003,00000038,00002724,00000000,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00002724,00000000,00000028,00000045,00000039,00002724,00000003,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00002724,00000000,00000000,00000047,00000028,00000314,0000047a,00000082,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00002724,00000044,00000028,00000003,00000038,00000314,000004be,000000aa,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,0000047a,00000082,00000047,00000060,00002730,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,00000477,000000e2,00000047,00000028,0000273c,00000000,00000038,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,00000477,000000aa,00000003,00000038,0000273c,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call KERNEL32.Sleep(00000005) ret=0100487b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=0100487b 0009:Call winmm.timeGetTime() ret=01004881 0009:Call KERNEL32.GetTickCount() ret=7efabfe0 0009:Ret KERNEL32.GetTickCount() retval=00003d73 ret=7efabfe0 0009:Ret winmm.timeGetTime() retval=00003d73 ret=01004881 0009:Call gdi32.BitBlt(0000273c,00000000,0000003c,00000047,00000024,00002724,00000000,0000003c,00cc0020) ret=010033a6 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033a6 0009:Call gdi32.BitBlt(0000273c,00000000,00000000,00000003,0000003c,00002724,00000000,00000000,00cc0020) ret=010033d9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010033d9 0009:Call gdi32.BitBlt(00002724,00000000,00000024,00000045,0000003d,00002724,00000003,00000000,00cc0020) ret=01003409 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003409 0009:Call gdi32.BitBlt(00002724,00000000,00000000,00000047,00000024,00000314,0000047d,0000005e,00cc0020) ret=01003464 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003464 0009:Call gdi32.BitBlt(00002724,00000044,00000024,00000003,0000003c,00000314,000004c1,00000082,00cc0020) ret=010034ce 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034ce 0009:Call gdi32.BitBlt(00000314,0000047d,0000005e,00000047,00000060,00002730,00000000,00000000,00cc0020) ret=010034e9 0009:Ret gdi32.BitBlt() retval=00000001 ret=010034e9 0009:Call gdi32.BitBlt(00000314,0000047a,000000be,00000047,00000024,0000273c,00000000,0000003c,00cc0020) ret=01003528 0009:Ret gdi32.BitBlt() retval=00000001 ret=01003528 0009:Call gdi32.BitBlt(00000314,0000047a,00000082,00000003,0000003c,0000273c,00000000,00000000,00cc0020) ret=0100358a 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100358a 0009:Call gdi32.SelectObject(00002724,0000006c) ret=01005316 0009:Ret gdi32.SelectObject() retval=00002748 ret=01005316 0009:Call gdi32.SelectObject(00002730,0000006c) ret=01005324 0009:Ret gdi32.SelectObject() retval=0000274c ret=01005324 0009:Call gdi32.SelectObject(0000273c,0000006c) ret=01005332 0009:Ret gdi32.SelectObject() retval=00002750 ret=01005332 0009:Call gdi32.DeleteObject(00002748) ret=01005340 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005340 0009:Call gdi32.DeleteObject(0000274c) ret=01005348 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005348 0009:Call gdi32.DeleteObject(00002750) ret=01005350 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005350 0009:Call gdi32.DeleteDC(00002724) ret=0100535e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100535e 0009:Call gdi32.DeleteDC(00002730) ret=01005366 0009:Ret gdi32.DeleteDC() retval=00000001 ret=01005366 0009:Call gdi32.DeleteDC(0000273c) ret=0100536e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100536e 0009:Call user32.ReleaseDC(00010030,00000314) ret=0100537c 0009:Ret user32.ReleaseDC() retval=00000001 ret=0100537c 0009:Call user32.InvalidateRect(00010030,0033f618,00000000) ret=0100538a 0009:Ret user32.InvalidateRect() retval=00000001 ret=0100538a 0009:Call KERNEL32.GetModuleHandleW(00000000) ret=01006a97 0009:Ret KERNEL32.GetModuleHandleW() retval=01000000 ret=01006a97 0009:Call winmm.PlaySoundW(0000007c,01000000,00040007) ret=01006aa0 0009:Call ntdll.RtlAllocateHeap(00110000,00000008,0000001c) ret=7e7356bc 0009:Ret ntdll.RtlAllocateHeap() retval=0014bef8 ret=7e7356bc 0009:Call KERNEL32.ResetEvent(00000040) ret=7e735513 0009:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e735513 0009:Call KERNEL32.SetEvent(00000038) ret=7e735520 0009:Ret KERNEL32.SetEvent() retval=00000001 ret=7e735520 0009:Call msacm32.drv.wodMessage(0000ffff,0000000c,0014b1d0,00000000,00000000) ret=7e728e1f 0009:Call winmm.waveOutReset(00008001) ret=7e0c0180 0009:Call winealsa.drv.wodMessage(00000000,0000000c,7e72ab2b,00000000,00000000) ret=7e728e1f 0009:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1b2580 0009:Ret KERNEL32.CreateEventW() retval=00000070 ret=7e1b2580 0032:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bd,0014b1d0,0014d3a0,00000000) ret=7e1c4643 0032:Call KERNEL32.IsBadReadPtr(0014b1d0,0000002c) ret=7e0bdbc9 0032:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 0032:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bd,007ceaa4,0014d3a0,00000000) ret=7e0bdf33 0032:Call KERNEL32.SetEvent(00000068) ret=7e7341f6 0032:Ret KERNEL32.SetEvent() retval=00000001 ret=7e7341f6 0032:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 0032:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 0032:Call KERNEL32.SetEvent(00000070) ret=7e1c4f3d 0032:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c4f3d 0030:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e73429b 0030:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 0030:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 0030:Call msacm32.drv.wodMessage(0000ffff,0000000c,0014b1d0,00000000,00000000) ret=7e728e1f 0030:Call winmm.waveOutReset(00008001) ret=7e0c0180 0030:Call winealsa.drv.wodMessage(00000000,0000000c,7e72ab2b,00000000,00000000) ret=7e728e1f 0030:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1b2580 0030:Ret KERNEL32.CreateEventW() retval=000000f0 ret=7e1b2580 0030:Call KERNEL32.WaitForSingleObject(000000f0,ffffffff) ret=7e1b2635 0032:Call KERNEL32.SetEvent(000000f0) ret=7e1c4f3d 0032:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c4f3d 0030:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1b2635 0030:Call KERNEL32.CloseHandle(000000f0) ret=7e1b2640 0030:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1b2640 0030:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0030:Ret winmm.waveOutReset() retval=00000000 ret=7e0c0180 0030:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0030:Call msacm32.drv.wodMessage(0000ffff,00000008,0014b1d0,0014d3a0,00000020) ret=7e728e1f 0030:Call winmm.waveOutUnprepareHeader(00008001,0014d3a0,00000020) ret=7e0c00b6 0030:Call winealsa.drv.wodMessage(00000000,00000008,7e72ab2b,0014d3a0,00000020) ret=7e728e1f 0030:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 0030:Ret winmm.waveOutUnprepareHeader() retval=00000000 ret=7e0c00b6 0030:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0030:Call msacm32.drv.wodMessage(0000ffff,00000008,0014b1d0,0014d3c0,00000020) ret=7e728e1f 0030:Call winmm.waveOutUnprepareHeader(00008001,0014d3c0,00000020) ret=7e0c00b6 0030:Call winealsa.drv.wodMessage(00000000,00000008,7e72ab2b,0014d3c0,00000020) ret=7e728e1f 0030:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 0030:Ret winmm.waveOutUnprepareHeader() retval=00000000 ret=7e0c00b6 0030:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0030:Call KERNEL32.CloseHandle(00000068) ret=7e7349fd 0030:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e7349fd 0030:Call ntdll.RtlFreeHeap(00110000,00000000,0014d3a0) ret=7e734a23 0030:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e734a23 0030:Call ntdll.RtlFreeHeap(00110000,00000000,00148cb8) ret=7e734a49 0030:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e734a49 0030:Call msacm32.drv.wodMessage(0000ffff,00000006,0014b1d0,00000000,00000000) ret=7e728e1f 0030:Call winmm.waveOutClose(00008001) ret=7e0c01a5 0030:Call winealsa.drv.wodMessage(00000000,00000006,7e72ab2b,00000000,00000000) ret=7e728e1f 0030:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1b2580 0030:Ret KERNEL32.CreateEventW() retval=00000068 ret=7e1b2580 0030:Call KERNEL32.WaitForSingleObject(00000068,ffffffff) ret=7e1b2635 0032:Call KERNEL32.SetEvent(00000068) ret=7e1c4ea1 0032:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c4ea1 0032:Call KERNEL32.ExitThread(00000000) ret=7e1c4eb0 0032:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) 0032:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0032:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) 0032:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0032:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) 0032:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0032:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) 0032:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) retval=1 0032:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) 0032:Call KERNEL32.TlsGetValue(00000000) ret=7e3f4071 0032:Ret KERNEL32.TlsGetValue() retval=00000000 ret=7e3f4071 0032:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0032:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) 0032:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0030:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1b2635 0030:Call KERNEL32.CloseHandle(00000068) ret=7e1b2640 0030:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1b2640 0030:Call ntdll.RtlFreeHeap(00110000,00000000,0014c7d0) ret=7e1b24dc 0030:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e1b24dc 0030:Call ntdll.RtlDeleteCriticalSection(0013cefc) ret=7e1b24fb 0030:Ret ntdll.RtlDeleteCriticalSection() retval=00000000 ret=7e1b24fb 0030:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bc,0014b1d0,00000000,00000000) ret=7e1c4643 0030:Call KERNEL32.IsBadReadPtr(0014b1d0,0000002c) ret=7e0bdbc9 0030:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 0030:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bc,007ceaa4,00000000,00000000) ret=7e0bdf33 0030:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 0030:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 0030:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0030:Call ntdll.RtlFreeHeap(00110000,00000000,0014b208) ret=7e72ae0b 0030:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e72ae0b 0030:Ret winmm.waveOutClose() retval=00000000 ret=7e0c01a5 0030:Call ntdll.RtlFreeHeap(00110000,00000000,0014b1d0) ret=7e0c01f7 0030:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e0c01f7 0030:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0030:Call ntdll.RtlFreeHeap(00110000,00000000,0014b290) ret=7e72ae0b 0030:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e72ae0b 0009:Call KERNEL32.WaitForSingleObject(00000070,ffffffff) ret=7e1b2635 0009:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1b2635 0009:Call KERNEL32.CloseHandle(00000070) ret=7e1b2640 0009:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1b2640 0009:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0009:Ret winmm.waveOutReset() retval=00000000 ret=7e0c0180 0009:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0009:Call KERNEL32.WaitForSingleObject(00000040,ffffffff) ret=7e73555a 0030:Call ntdll.RtlFreeHeap(00110000,00000000,00148c28) ret=7e731f79 0030:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e731f79 0030:Call KERNEL32.SetEvent(00000040) ret=7e7343a0 0030:Ret KERNEL32.SetEvent() retval=00000001 ret=7e7343a0 0030:Call KERNEL32.CloseHandle(00000064) ret=7e734340 0030:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e734340 0030:Call ntdll.RtlFreeHeap(00110000,00000000,0014b268) ret=7e734360 0030:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e734360 0030:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) 0030:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0030:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) 0030:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0030:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) 0030:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0030:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) 0030:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) retval=1 0030:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) 0030:Call KERNEL32.TlsGetValue(00000000) ret=7e3f4071 0030:Ret KERNEL32.TlsGetValue() retval=00000000 ret=7e3f4071 0030:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0030:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) 0030:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0009:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e73555a 0009:Call KERNEL32.ResetEvent(00000038) ret=7e735572 0009:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e735572 0009:Call KERNEL32.CreateThread(00000000,00000000,7e7348a0,0014bef8,00000000,0033f598) ret=7e73560c 0034:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) 0034:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0034:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) 0034:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0034:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) 0034:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) retval=1 0034:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) 0034:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0034:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) 0034:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0034:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) 0034:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0034:Starting thread proc 0x7e7348a0 (arg=0x14bef8) 0034:Call KERNEL32.FindResourceW(01000000,0000007c,7e741bde L"WAVE") ret=7e734ca3 0034:Ret KERNEL32.FindResourceW() retval=01014c40 ret=7e734ca3 0034:Call KERNEL32.LoadResource(01000000,01014c40) ret=7e734cb9 0034:Ret KERNEL32.LoadResource() retval=0104d668 ret=7e734cb9 0034:Call KERNEL32.LockResource(0104d668) ret=7e734cce 0034:Ret KERNEL32.LockResource() retval=0104d668 ret=7e734cce 0034:Call KERNEL32.FreeResource(0104d668) ret=7e734ce9 0034:Ret KERNEL32.FreeResource() retval=00000000 ret=7e734ce9 0034:Call ntdll.RtlAllocateHeap(00110000,00000008,0000005c) ret=7e733960 0034:Ret ntdll.RtlAllocateHeap() retval=00148c28 ret=7e733960 0034:Call KERNEL32.GetFileSize(ffffffff,00000000) ret=7e733ab9 0034:Ret KERNEL32.GetFileSize() retval=ffffffff ret=7e733ab9 0034:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7e733cf0 0034:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e733cf0 0034:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7e734e1c 0034:Ret ntdll.RtlAllocateHeap() retval=00148cb8 ret=7e734e1c 0034:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e734f1f 0034:Ret KERNEL32.CreateEventW() retval=00000068 ret=7e734f1f 0034:Call ntdll.RtlAllocateHeap(00110000,00000008,0000001c) ret=7e72abbe 0034:Ret ntdll.RtlAllocateHeap() retval=0014b1d0 ret=7e72abbe 0034:Call msacm32.drv.wodMessage(0000ffff,00000005,008ce918,008ce970,00030000) ret=7e728e1f 0034:Call ntdll.RtlAllocateHeap(00110000,00000000,0000002c) ret=7e0bfd8c 0034:Ret ntdll.RtlAllocateHeap() retval=0014b1f8 ret=7e0bfd8c 0034:Call winmm.waveOutGetNumDevs() ret=7e0bfdb5 0034:Ret winmm.waveOutGetNumDevs() retval=00000002 ret=7e0bfdb5 0034:Call winmm.waveOutOpen(0014b200,00000000,00148cb8,7e0bde60,0014b1f8,00030008) ret=7e0c0313 0034:Call ntdll.RtlAllocateHeap(00110000,00000008,0000001c) ret=7e72abbe 0034:Ret ntdll.RtlAllocateHeap() retval=0014b230 ret=7e72abbe 0034:Call winealsa.drv.wodMessage(00000000,00000005,008ce5b8,008ce610,00030008) ret=7e728e1f 0034:Call ntdll.RtlAllocateHeap(00110000,00000008,00000068) ret=7e1c6c82 0034:Ret ntdll.RtlAllocateHeap() retval=0014b258 ret=7e1c6c82 0034:Call ntdll.RtlAllocateHeap(00110000,00000008,00000300) ret=7e1b2459 0034:Ret ntdll.RtlAllocateHeap() retval=0014c7d0 ret=7e1b2459 0034:Call KERNEL32.InitializeCriticalSection(0013cefc) ret=7e1b2469 0034:Ret KERNEL32.InitializeCriticalSection() retval=00000001 ret=7e1b2469 0034:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1c73ab 0009:Ret KERNEL32.CreateThread() retval=00000064 ret=7e73560c 0009:Call KERNEL32.SetThreadPriority(00000064,0000000f) ret=7e73562d 0009:Ret KERNEL32.SetThreadPriority() retval=00000001 ret=7e73562d 0009:Ret winmm.PlaySoundW() retval=00000001 ret=01006aa0 0009:Call user32.GetMenu(00010030) ret=01003268 0009:Ret user32.GetMenu() retval=000000f0 ret=01003268 0009:Call user32.EnableMenuItem(000000f0,00009c4a,00000001) ret=01003276 0009:Ret user32.EnableMenuItem() retval=00000001 ret=01003276 0009:Call user32.GetClientRect(00010030,0033f618) ret=01002eb3 0009:Ret user32.GetClientRect() retval=00000001 ret=01002eb3 0009:Call user32.GetClientRect(00010030,0033f5f4) ret=01002b2e 0009:Ret user32.GetClientRect() retval=00000001 ret=01002b2e 0009:Call user32.GetClientRect(00010030,0033f5f4) ret=01002b2e 0009:Ret user32.GetClientRect() retval=00000001 ret=01002b2e 0009:Call user32.GetClientRect(00010030,0033f5f4) ret=01002b2e 0009:Ret user32.GetClientRect() retval=00000001 ret=01002b2e 0009:Call user32.GetClientRect(00010030,0033f5f4) ret=01002b2e 0009:Ret user32.GetClientRect() retval=00000001 ret=01002b2e 0009:Call user32.GetClientRect(00010030,0033f5f4) ret=01002b2e 0009:Ret user32.GetClientRect() retval=00000001 ret=01002b2e 0009:Call user32.GetClientRect(00010030,0033f5f4) ret=01002b2e 0009:Ret user32.GetClientRect() retval=00000001 ret=01002b2e 0009:Call user32.GetClientRect(00010030,0033f5f4) ret=01002b2e 0009:Ret user32.GetClientRect() retval=00000001 ret=01002b2e 0009:Call user32.GetClientRect(00010030,0033f5f4) ret=01002b2e 0009:Ret user32.GetClientRect() retval=00000001 ret=01002b2e 0009:Call user32.GetClientRect(00010030,0033f5f4) ret=01002b2e 0009:Ret user32.GetClientRect() retval=00000001 ret=01002b2e 0009:Call user32.GetClientRect(00010030,0033f5f4) ret=01002b2e 0009:Ret user32.GetClientRect() retval=00000001 ret=01002b2e 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_COMMAND,wp=00009c47,lp=00000000) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0034:Ret KERNEL32.CreateEventW() retval=00000070 ret=7e1c73ab 0034:Call KERNEL32.CreateThread(00000000,00000000,7e1c5570,00000000,00000000,0013cedc) ret=7e1c73ef 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=008502a0) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,008502a0) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=008502a0) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=0041029f) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=0041029f) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_PAINT,wp=00000000,lp=00000000) 0009:Call user32.BeginPaint(00010030,0033f8d4) ret=01006ec0 0009:Ret user32.BeginPaint() retval=00000314 ret=01006ec0 0009:Call user32.GetClientRect(00010030,0033f800) ret=01005cd6 0009:Ret user32.GetClientRect() retval=00000001 ret=01005cd6 0009:Call gdi32.CreateCompatibleDC(00000314) ret=0100272b 0009:Ret gdi32.CreateCompatibleDC() retval=000027e4 ret=0100272b 0009:Call user32.LoadBitmapW(01000000,010012bc L"FELT") ret=0100273f 0009:Ret user32.LoadBitmapW() retval=000027fc ret=0100273f 0009:Call gdi32.SelectObject(000027e4,000027fc) ret=0100274c 0009:Ret gdi32.SelectObject() retval=0000006c ret=0100274c 0009:Call gdi32.BitBlt(00000314,00000000,00000000,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000003f,00000000,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000007e,00000000,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000bd,00000000,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000fc,00000000,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000013b,00000000,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000017a,00000000,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001b9,00000000,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001f8,00000000,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000237,00000000,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000276,00000000,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002b5,00000000,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002f4,00000000,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000333,00000000,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000372,00000000,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003b1,00000000,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003f0,00000000,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000042f,00000000,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000046e,00000000,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ad,00000000,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ec,00000000,00000013,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000000,00000040,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000003f,00000040,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000007e,00000040,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000bd,00000040,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000fc,00000040,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000013b,00000040,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000017a,00000040,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001b9,00000040,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001f8,00000040,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000237,00000040,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000276,00000040,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002b5,00000040,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002f4,00000040,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000333,00000040,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000372,00000040,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003b1,00000040,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003f0,00000040,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000042f,00000040,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000046e,00000040,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ad,00000040,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ec,00000040,00000013,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000000,00000080,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000003f,00000080,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000007e,00000080,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000bd,00000080,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000fc,00000080,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000013b,00000080,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000017a,00000080,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001b9,00000080,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001f8,00000080,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000237,00000080,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000276,00000080,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002b5,00000080,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002f4,00000080,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000333,00000080,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000372,00000080,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003b1,00000080,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003f0,00000080,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000042f,00000080,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000046e,00000080,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ad,00000080,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ec,00000080,00000013,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000000,000000c0,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000003f,000000c0,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000007e,000000c0,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000bd,000000c0,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000fc,000000c0,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000013b,000000c0,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000017a,000000c0,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001b9,000000c0,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001f8,000000c0,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000237,000000c0,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000276,000000c0,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002b5,000000c0,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002f4,000000c0,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000333,000000c0,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000372,000000c0,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003b1,000000c0,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003f0,000000c0,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000042f,000000c0,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000046e,000000c0,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ad,000000c0,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ec,000000c0,00000013,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000000,00000100,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000003f,00000100,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000007e,00000100,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000bd,00000100,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000fc,00000100,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000013b,00000100,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000017a,00000100,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001b9,00000100,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001f8,00000100,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000237,00000100,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000276,00000100,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002b5,00000100,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002f4,00000100,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000333,00000100,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000372,00000100,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003b1,00000100,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003f0,00000100,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000042f,00000100,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000046e,00000100,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ad,00000100,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ec,00000100,00000013,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000000,00000140,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000003f,00000140,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000007e,00000140,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000bd,00000140,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000fc,00000140,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000013b,00000140,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000017a,00000140,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001b9,00000140,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001f8,00000140,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000237,00000140,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000276,00000140,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002b5,00000140,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002f4,00000140,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000333,00000140,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000372,00000140,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003b1,00000140,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003f0,00000140,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000042f,00000140,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000046e,00000140,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ad,00000140,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ec,00000140,00000013,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000000,00000180,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000003f,00000180,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000007e,00000180,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000bd,00000180,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000fc,00000180,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000013b,00000180,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000017a,00000180,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001b9,00000180,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001f8,00000180,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000237,00000180,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000276,00000180,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002b5,00000180,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002f4,00000180,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000333,00000180,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000372,00000180,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003b1,00000180,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003f0,00000180,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000042f,00000180,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000046e,00000180,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ad,00000180,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ec,00000180,00000013,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000000,000001c0,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000003f,000001c0,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000007e,000001c0,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000bd,000001c0,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000fc,000001c0,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000013b,000001c0,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000017a,000001c0,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001b9,000001c0,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001f8,000001c0,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000237,000001c0,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000276,000001c0,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0036:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) 0036:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0036:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) 0036:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0036:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) 0036:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) retval=1 0036:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) 0036:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0036:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) 0036:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0036:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) 0036:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0036:Starting thread proc 0x7e1c5570 (arg=(nil)) 0036:Call KERNEL32.SetEvent(00000070) ret=7e1c55aa 0036:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c55aa 0034:Ret KERNEL32.CreateThread() retval=000000f0 ret=7e1c73ef 0034:Call KERNEL32.SetThreadPriority(000000f0,0000000f) ret=7e1c7413 0034:Ret KERNEL32.SetThreadPriority() retval=00000001 ret=7e1c7413 0034:Call KERNEL32.WaitForSingleObject(00000070,ffffffff) ret=7e1c742f 0034:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1c742f 0034:Call KERNEL32.CloseHandle(00000070) ret=7e1c7443 0034:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1c7443 0034:Call ntdll.RtlFreeHeap(00110000,00000000,0014b258) ret=7e1c7479 0034:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e1c7479 0034:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bb,0014b1f8,00000000,00000000) ret=7e1c4643 0034:Call KERNEL32.IsBadReadPtr(0014b1f8,0000002c) ret=7e0bdbc9 0034:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 0034:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bb,008ceaa4,00000000,00000000) ret=7e0bdf33 0034:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 0034:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 0034:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0034:Ret winmm.waveOutOpen() retval=00000000 ret=7e0c0313 0034:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0034:Call ntdll.RtlAllocateHeap(00110000,00000000,000039ac) ret=7e73520d 0034:Ret ntdll.RtlAllocateHeap() retval=0014d3a0 ret=7e73520d 0034:Call msacm32.drv.wodMessage(0000ffff,00000007,0014b1f8,0014d3a0,00000020) ret=7e728e1f 0034:Call winmm.waveOutPrepareHeader(00008001,0014d3a0,00000020) ret=7e0c09d8 0034:Call winealsa.drv.wodMessage(00000000,00000007,7e72ab2b,0014d3a0,00000020) ret=7e728e1f 0034:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 0034:Ret winmm.waveOutPrepareHeader() retval=00000000 ret=7e0c09d8 0034:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0034:Call msacm32.drv.wodMessage(0000ffff,00000007,0014b1f8,0014d3c0,00000020) ret=7e728e1f 0034:Call winmm.waveOutPrepareHeader(00008001,0014d3c0,00000020) ret=7e0c09d8 0034:Call winealsa.drv.wodMessage(00000000,00000007,7e72ab2b,0014d3c0,00000020) ret=7e728e1f 0034:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 0034:Ret winmm.waveOutPrepareHeader() retval=00000000 ret=7e0c09d8 0034:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0034:Call KERNEL32.WaitForSingleObject(00000038,00000000) ret=7e735343 0034:Ret KERNEL32.WaitForSingleObject() retval=00000102 ret=7e735343 0034:Call msacm32.drv.wodMessage(0000ffff,00000009,0014b1f8,0014d3a0,00000020) ret=7e728e1f 0034:Call winmm.waveOutWrite(00008001,0014d3a0,00000020) ret=7e0c09b5 0034:Call winealsa.drv.wodMessage(00000000,00000009,7e72ab2b,0014d3a0,00000020) ret=7e728e1f 0034:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0034:Ret winmm.waveOutWrite() retval=00000000 ret=7e0c09b5 0034:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0034:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 0034:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 0034:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 0034:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 0034:Call KERNEL32.WaitForSingleObject(00000068,ffffffff) ret=7e73429b 0009:Call gdi32.BitBlt(00000314,000002b5,000001c0,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002f4,000001c0,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000333,000001c0,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000372,000001c0,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003b1,000001c0,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003f0,000001c0,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000042f,000001c0,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000046e,000001c0,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ad,000001c0,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ec,000001c0,00000013,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000000,00000200,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000003f,00000200,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000007e,00000200,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000bd,00000200,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000fc,00000200,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000013b,00000200,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000017a,00000200,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001b9,00000200,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001f8,00000200,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000237,00000200,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000276,00000200,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002b5,00000200,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002f4,00000200,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000333,00000200,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000372,00000200,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003b1,00000200,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003f0,00000200,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000042f,00000200,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000046e,00000200,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ad,00000200,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ec,00000200,00000013,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000000,00000240,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000003f,00000240,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000007e,00000240,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000bd,00000240,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000fc,00000240,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000013b,00000240,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000017a,00000240,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001b9,00000240,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001f8,00000240,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000237,00000240,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000276,00000240,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002b5,00000240,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002f4,00000240,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000333,00000240,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000372,00000240,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003b1,00000240,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003f0,00000240,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000042f,00000240,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000046e,00000240,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ad,00000240,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ec,00000240,00000013,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000000,00000280,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000003f,00000280,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000007e,00000280,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000bd,00000280,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000fc,00000280,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000013b,00000280,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000017a,00000280,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001b9,00000280,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001f8,00000280,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000237,00000280,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000276,00000280,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002b5,00000280,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002f4,00000280,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000333,00000280,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000372,00000280,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003b1,00000280,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003f0,00000280,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000042f,00000280,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000046e,00000280,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ad,00000280,0000003f,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ec,00000280,00000013,00000040,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000000,000002c0,0000003f,00000002,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000003f,000002c0,0000003f,00000002,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000007e,000002c0,0000003f,00000002,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000bd,000002c0,0000003f,00000002,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000000fc,000002c0,0000003f,00000002,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000013b,000002c0,0000003f,00000002,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000017a,000002c0,0000003f,00000002,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001b9,000002c0,0000003f,00000002,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000001f8,000002c0,0000003f,00000002,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000237,000002c0,0000003f,00000002,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000276,000002c0,0000003f,00000002,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002b5,000002c0,0000003f,00000002,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000002f4,000002c0,0000003f,00000002,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000333,000002c0,0000003f,00000002,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,00000372,000002c0,0000003f,00000002,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003b1,000002c0,0000003f,00000002,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000003f0,000002c0,0000003f,00000002,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000042f,000002c0,0000003f,00000002,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,0000046e,000002c0,0000003f,00000002,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ad,000002c0,0000003f,00000002,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.BitBlt(00000314,000004ec,000002c0,00000013,00000002,000027e4,00000000,00000000,00cc0020) ret=0100284e 0009:Ret gdi32.BitBlt() retval=00000001 ret=0100284e 0009:Call gdi32.SelectObject(000027e4,0000006c) ret=0100287b 0009:Ret gdi32.SelectObject() retval=000027fc ret=0100287b 0009:Call gdi32.DeleteObject(000027fc) ret=01002884 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01002884 0009:Call gdi32.DeleteDC(000027e4) ret=0100288d 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100288d 0009:Call gdi32.CreateCompatibleDC(00000314) ret=01005cf3 0009:Ret gdi32.CreateCompatibleDC() retval=00002810 ret=01005cf3 0009:Call gdi32.CreateCompatibleDC(00000314) ret=01005cf9 0009:Ret gdi32.CreateCompatibleDC() retval=0000281c ret=01005cf9 0009:Call user32.LoadBitmapW(01000000,010012c8 L"CARDBACK") ret=01005d0d 0009:Ret user32.LoadBitmapW() retval=00002834 ret=01005d0d 0009:Call gdi32.SelectObject(0000281c,00002834) ret=01005d1a 0009:Ret gdi32.SelectObject() retval=0000006c ret=01005d1a 0009:Call gdi32.GetPixel(00000314,00000033,0000000a) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000034,0000000a) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000033,0000000b) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,00000079,0000000a) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,00000078,0000000a) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,00000079,0000000b) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,00000033,0000000a,00000047,00000009,0000281c,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,00000033,0000000a,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000034,0000000a,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000033,0000000b,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,00000079,0000000a,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,00000078,0000000a,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,00000079,0000000b,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,00000033,00000011) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000034,00000011) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000033,00000012) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,00000079,00000011) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,00000078,00000011) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,00000079,00000012) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,00000033,00000011,00000047,00000009,0000281c,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,00000033,00000011,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000034,00000011,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000033,00000012,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,00000079,00000011,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,00000078,00000011,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,00000079,00000012,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,00000033,00000018) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000034,00000018) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000033,00000019) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,00000079,00000018) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,00000078,00000018) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,00000079,00000019) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,00000033,00000018,00000047,00000009,0000281c,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,00000033,00000018,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000034,00000018,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000033,00000019,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,00000079,00000018,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,00000078,00000018,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,00000079,00000019,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,00000033,0000001f) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000034,0000001f) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000033,00000020) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,00000079,0000001f) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,00000078,0000001f) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,00000079,00000020) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,00000033,0000001f,00000047,00000009,0000281c,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,00000033,0000001f,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000034,0000001f,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000033,00000020,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,00000079,0000001f,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,00000078,0000001f,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,00000079,00000020,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,00000033,00000026) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000034,00000026) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000033,00000027) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,00000079,00000026) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,00000078,00000026) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,00000079,00000027) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,00000033,00000026,00000047,00000009,0000281c,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,00000033,00000026,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000034,00000026,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000033,00000027,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,00000079,00000026,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,00000078,00000026,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,00000079,00000027,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,00000033,0000002d) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000034,0000002d) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000033,0000002e) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,00000079,0000002d) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,00000078,0000002d) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,00000079,0000002e) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call user32.LoadBitmapW(01000000,0033f888 L"CARD50") ret=01005f7d 0009:Ret user32.LoadBitmapW() retval=00002854 ret=01005f7d 0009:Call gdi32.SelectObject(00002810,00002854) ret=01005f8a 0009:Ret gdi32.SelectObject() retval=0000006c ret=01005f8a 0009:Call gdi32.BitBlt(00000314,00000033,0000002d,00000047,00000060,00002810,00000000,00000000,00cc0020) ret=01005faa 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005faa 0009:Call gdi32.SelectObject(00002810,0000006c) ret=01005fb6 0009:Ret gdi32.SelectObject() retval=00002854 ret=01005fb6 0009:Call gdi32.DeleteObject(00002854) ret=01005fbf 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005fbf 0009:Call gdi32.SetPixel(00000314,00000033,0000002d,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000034,0000002d,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000033,0000002e,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,00000079,0000002d,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,00000078,0000002d,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,00000079,0000002e,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,00000033,00000049) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000034,00000049) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000033,0000004a) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,00000079,00000049) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,00000078,00000049) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,00000079,0000004a) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call user32.LoadBitmapW(01000000,0033f888 L"CARD45") ret=01005f7d 0009:Ret user32.LoadBitmapW() retval=00002874 ret=01005f7d 0009:Call gdi32.SelectObject(00002810,00002874) ret=01005f8a 0009:Ret gdi32.SelectObject() retval=0000006c ret=01005f8a 0009:Call gdi32.BitBlt(00000314,00000033,00000049,00000047,00000060,00002810,00000000,00000000,00cc0020) ret=01005faa 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005faa 0009:Call gdi32.SelectObject(00002810,0000006c) ret=01005fb6 0009:Ret gdi32.SelectObject() retval=00002874 ret=01005fb6 0009:Call gdi32.DeleteObject(00002874) ret=01005fbf 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005fbf 0009:Call gdi32.SetPixel(00000314,00000033,00000049,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000034,00000049,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000033,0000004a,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,00000079,00000049,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,00000078,00000049,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,00000079,0000004a,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,00000033,00000065) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000034,00000065) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000033,00000066) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,00000079,00000065) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,00000078,00000065) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,00000079,00000066) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.GetPixel(00000314,00000033,000000c4) ret=01005ea5 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ea5 0009:Call gdi32.GetPixel(00000314,00000034,000000c4) ret=01005eba 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005eba 0009:Call gdi32.GetPixel(00000314,00000033,000000c3) ret=01005ecd 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ecd 0009:Call gdi32.GetPixel(00000314,00000079,000000c4) ret=01005ee1 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ee1 0009:Call gdi32.GetPixel(00000314,00000078,000000c4) ret=01005ef5 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ef5 0009:Call gdi32.GetPixel(00000314,00000079,000000c3) ret=01005f09 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005f09 0009:Call user32.LoadBitmapW(01000000,0033f888 L"CARD51") ret=01005f7d 0009:Ret user32.LoadBitmapW() retval=00002894 ret=01005f7d 0009:Call gdi32.SelectObject(00002810,00002894) ret=01005f8a 0009:Ret gdi32.SelectObject() retval=0000006c ret=01005f8a 0009:Call gdi32.BitBlt(00000314,00000033,00000065,00000047,00000060,00002810,00000000,00000000,00cc0020) ret=01005faa 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005faa 0009:Call gdi32.SelectObject(00002810,0000006c) ret=01005fb6 0009:Ret gdi32.SelectObject() retval=00002894 ret=01005fb6 0009:Call gdi32.DeleteObject(00002894) ret=01005fbf 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005fbf 0009:Call gdi32.SetPixel(00000314,00000033,00000065,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000034,00000065,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000033,00000066,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,00000079,00000065,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,00000078,00000065,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,00000079,00000066,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.SetPixel(00000314,00000033,000000c4,ffffffff) ret=01006044 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006044 0009:Call gdi32.SetPixel(00000314,00000034,000000c4,ffffffff) ret=01006059 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006059 0009:Call gdi32.SetPixel(00000314,00000033,000000c3,ffffffff) ret=01006069 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006069 0009:Call gdi32.SetPixel(00000314,00000079,000000c4,ffffffff) ret=0100607d 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100607d 0009:Call gdi32.SetPixel(00000314,00000078,000000c4,ffffffff) ret=01006091 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006091 0009:Call gdi32.SetPixel(00000314,00000079,000000c3,ffffffff) ret=010060a5 0009:Ret gdi32.SetPixel() retval=00ffffff ret=010060a5 0009:Call gdi32.GetPixel(00000314,000000ad,0000000a) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,000000ae,0000000a) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,000000ad,0000000b) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,000000f3,0000000a) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,000000f2,0000000a) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,000000f3,0000000b) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,000000ad,0000000a,00000047,00000009,0000281c,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,000000ad,0000000a,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,000000ae,0000000a,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,000000ad,0000000b,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000000f3,0000000a,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,000000f2,0000000a,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,000000f3,0000000b,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,000000ad,00000011) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,000000ae,00000011) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,000000ad,00000012) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,000000f3,00000011) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,000000f2,00000011) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,000000f3,00000012) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,000000ad,00000011,00000047,00000009,0000281c,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,000000ad,00000011,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,000000ae,00000011,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,000000ad,00000012,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000000f3,00000011,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,000000f2,00000011,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,000000f3,00000012,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,000000ad,00000018) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,000000ae,00000018) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,000000ad,00000019) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,000000f3,00000018) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,000000f2,00000018) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,000000f3,00000019) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,000000ad,00000018,00000047,00000009,0000281c,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,000000ad,00000018,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,000000ae,00000018,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,000000ad,00000019,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000000f3,00000018,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,000000f2,00000018,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,000000f3,00000019,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,000000ad,0000001f) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,000000ae,0000001f) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,000000ad,00000020) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,000000f3,0000001f) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,000000f2,0000001f) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,000000f3,00000020) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,000000ad,0000001f,00000047,00000009,0000281c,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,000000ad,0000001f,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,000000ae,0000001f,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,000000ad,00000020,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000000f3,0000001f,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,000000f2,0000001f,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,000000f3,00000020,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,000000ad,00000026) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,000000ae,00000026) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,000000ad,00000027) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,000000f3,00000026) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,000000f2,00000026) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,000000f3,00000027) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,000000ad,00000026,00000047,00000009,0000281c,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,000000ad,00000026,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,000000ae,00000026,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,000000ad,00000027,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000000f3,00000026,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,000000f2,00000026,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,000000f3,00000027,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,000000ad,0000002d) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,000000ae,0000002d) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,000000ad,0000002e) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,000000f3,0000002d) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,000000f2,0000002d) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,000000f3,0000002e) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call user32.LoadBitmapW(01000000,0033f888 L"CARD44") ret=01005f7d 0009:Ret user32.LoadBitmapW() retval=000028b4 ret=01005f7d 0009:Call gdi32.SelectObject(00002810,000028b4) ret=01005f8a 0009:Ret gdi32.SelectObject() retval=0000006c ret=01005f8a 0009:Call gdi32.BitBlt(00000314,000000ad,0000002d,00000047,00000060,00002810,00000000,00000000,00cc0020) ret=01005faa 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005faa 0009:Call gdi32.SelectObject(00002810,0000006c) ret=01005fb6 0009:Ret gdi32.SelectObject() retval=000028b4 ret=01005fb6 0009:Call gdi32.DeleteObject(000028b4) ret=01005fbf 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005fbf 0009:Call gdi32.SetPixel(00000314,000000ad,0000002d,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,000000ae,0000002d,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,000000ad,0000002e,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000000f3,0000002d,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,000000f2,0000002d,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,000000f3,0000002e,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,000000ad,00000049) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,000000ae,00000049) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,000000ad,0000004a) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,000000f3,00000049) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,000000f2,00000049) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,000000f3,0000004a) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call user32.LoadBitmapW(01000000,0033f888 L"CARD45") ret=01005f7d 0009:Ret user32.LoadBitmapW() retval=000028d4 ret=01005f7d 0009:Call gdi32.SelectObject(00002810,000028d4) ret=01005f8a 0009:Ret gdi32.SelectObject() retval=0000006c ret=01005f8a 0009:Call gdi32.BitBlt(00000314,000000ad,00000049,00000047,00000060,00002810,00000000,00000000,00cc0020) ret=01005faa 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005faa 0009:Call gdi32.SelectObject(00002810,0000006c) ret=01005fb6 0009:Ret gdi32.SelectObject() retval=000028d4 ret=01005fb6 0009:Call gdi32.DeleteObject(000028d4) ret=01005fbf 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005fbf 0009:Call gdi32.SetPixel(00000314,000000ad,00000049,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,000000ae,00000049,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,000000ad,0000004a,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000000f3,00000049,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,000000f2,00000049,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,000000f3,0000004a,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,000000ad,00000065) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,000000ae,00000065) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,000000ad,00000066) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,000000f3,00000065) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,000000f2,00000065) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,000000f3,00000066) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.GetPixel(00000314,000000ad,000000c4) ret=01005ea5 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ea5 0009:Call gdi32.GetPixel(00000314,000000ae,000000c4) ret=01005eba 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005eba 0009:Call gdi32.GetPixel(00000314,000000ad,000000c3) ret=01005ecd 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ecd 0009:Call gdi32.GetPixel(00000314,000000f3,000000c4) ret=01005ee1 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ee1 0009:Call gdi32.GetPixel(00000314,000000f2,000000c4) ret=01005ef5 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ef5 0009:Call gdi32.GetPixel(00000314,000000f3,000000c3) ret=01005f09 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005f09 0009:Call user32.LoadBitmapW(01000000,0033f888 L"CARD42") ret=01005f7d 0009:Ret user32.LoadBitmapW() retval=000028f4 ret=01005f7d 0009:Call gdi32.SelectObject(00002810,000028f4) ret=01005f8a 0009:Ret gdi32.SelectObject() retval=0000006c ret=01005f8a 0009:Call gdi32.BitBlt(00000314,000000ad,00000065,00000047,00000060,00002810,00000000,00000000,00cc0020) ret=01005faa 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005faa 0009:Call gdi32.SelectObject(00002810,0000006c) ret=01005fb6 0009:Ret gdi32.SelectObject() retval=000028f4 ret=01005fb6 0009:Call gdi32.DeleteObject(000028f4) ret=01005fbf 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005fbf 0009:Call gdi32.SetPixel(00000314,000000ad,00000065,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,000000ae,00000065,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,000000ad,00000066,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000000f3,00000065,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,000000f2,00000065,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,000000f3,00000066,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.SetPixel(00000314,000000ad,000000c4,ffffffff) ret=01006044 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006044 0009:Call gdi32.SetPixel(00000314,000000ae,000000c4,ffffffff) ret=01006059 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006059 0009:Call gdi32.SetPixel(00000314,000000ad,000000c3,ffffffff) ret=01006069 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006069 0009:Call gdi32.SetPixel(00000314,000000f3,000000c4,ffffffff) ret=0100607d 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100607d 0009:Call gdi32.SetPixel(00000314,000000f2,000000c4,ffffffff) ret=01006091 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006091 0009:Call gdi32.SetPixel(00000314,000000f3,000000c3,ffffffff) ret=010060a5 0009:Ret gdi32.SetPixel() retval=00ffffff ret=010060a5 0009:Call gdi32.GetPixel(00000314,00000127,0000000a) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000128,0000000a) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000127,0000000b) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,0000016d,0000000a) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,0000016c,0000000a) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,0000016d,0000000b) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,00000127,0000000a,00000047,00000009,0000281c,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,00000127,0000000a,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000128,0000000a,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000127,0000000b,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,0000016d,0000000a,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,0000016c,0000000a,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,0000016d,0000000b,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,00000127,00000011) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000128,00000011) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000127,00000012) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,0000016d,00000011) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,0000016c,00000011) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,0000016d,00000012) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,00000127,00000011,00000047,00000009,0000281c,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,00000127,00000011,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000128,00000011,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000127,00000012,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,0000016d,00000011,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,0000016c,00000011,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,0000016d,00000012,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,00000127,00000018) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000128,00000018) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000127,00000019) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,0000016d,00000018) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,0000016c,00000018) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,0000016d,00000019) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,00000127,00000018,00000047,00000009,0000281c,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,00000127,00000018,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000128,00000018,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000127,00000019,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,0000016d,00000018,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,0000016c,00000018,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,0000016d,00000019,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,00000127,0000001f) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000128,0000001f) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000127,00000020) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,0000016d,0000001f) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,0000016c,0000001f) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,0000016d,00000020) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,00000127,0000001f,00000047,00000009,0000281c,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,00000127,0000001f,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000128,0000001f,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000127,00000020,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,0000016d,0000001f,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,0000016c,0000001f,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,0000016d,00000020,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,00000127,00000026) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000128,00000026) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000127,00000027) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,0000016d,00000026) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,0000016c,00000026) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,0000016d,00000027) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,00000127,00000026,00000047,00000009,0000281c,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,00000127,00000026,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000128,00000026,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000127,00000027,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,0000016d,00000026,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,0000016c,00000026,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,0000016d,00000027,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,00000127,0000002d) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000128,0000002d) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000127,0000002e) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,0000016d,0000002d) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,0000016c,0000002d) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,0000016d,0000002e) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call user32.LoadBitmapW(01000000,0033f888 L"CARD48") ret=01005f7d 0009:Ret user32.LoadBitmapW() retval=00002914 ret=01005f7d 0009:Call gdi32.SelectObject(00002810,00002914) ret=01005f8a 0009:Ret gdi32.SelectObject() retval=0000006c ret=01005f8a 0009:Call gdi32.BitBlt(00000314,00000127,0000002d,00000047,00000060,00002810,00000000,00000000,00cc0020) ret=01005faa 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005faa 0009:Call gdi32.SelectObject(00002810,0000006c) ret=01005fb6 0009:Ret gdi32.SelectObject() retval=00002914 ret=01005fb6 0009:Call gdi32.DeleteObject(00002914) ret=01005fbf 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005fbf 0009:Call gdi32.SetPixel(00000314,00000127,0000002d,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000128,0000002d,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000127,0000002e,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,0000016d,0000002d,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,0000016c,0000002d,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,0000016d,0000002e,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,00000127,00000049) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000128,00000049) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000127,0000004a) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,0000016d,00000049) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,0000016c,00000049) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,0000016d,0000004a) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call user32.LoadBitmapW(01000000,0033f888 L"CARD52") ret=01005f7d 0009:Ret user32.LoadBitmapW() retval=00002934 ret=01005f7d 0009:Call gdi32.SelectObject(00002810,00002934) ret=01005f8a 0009:Ret gdi32.SelectObject() retval=0000006c ret=01005f8a 0009:Call gdi32.BitBlt(00000314,00000127,00000049,00000047,00000060,00002810,00000000,00000000,00cc0020) ret=01005faa 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005faa 0009:Call gdi32.SelectObject(00002810,0000006c) ret=01005fb6 0009:Ret gdi32.SelectObject() retval=00002934 ret=01005fb6 0009:Call gdi32.DeleteObject(00002934) ret=01005fbf 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005fbf 0009:Call gdi32.SetPixel(00000314,00000127,00000049,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000128,00000049,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000127,0000004a,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,0000016d,00000049,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,0000016c,00000049,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,0000016d,0000004a,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,00000127,00000065) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000128,00000065) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000127,00000066) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,0000016d,00000065) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,0000016c,00000065) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,0000016d,00000066) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.GetPixel(00000314,00000127,000000c4) ret=01005ea5 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ea5 0009:Call gdi32.GetPixel(00000314,00000128,000000c4) ret=01005eba 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005eba 0009:Call gdi32.GetPixel(00000314,00000127,000000c3) ret=01005ecd 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ecd 0009:Call gdi32.GetPixel(00000314,0000016d,000000c4) ret=01005ee1 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ee1 0009:Call gdi32.GetPixel(00000314,0000016c,000000c4) ret=01005ef5 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ef5 0009:Call gdi32.GetPixel(00000314,0000016d,000000c3) ret=01005f09 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005f09 0009:Call user32.LoadBitmapW(01000000,0033f888 L"CARD44") ret=01005f7d 0009:Ret user32.LoadBitmapW() retval=00002954 ret=01005f7d 0009:Call gdi32.SelectObject(00002810,00002954) ret=01005f8a 0009:Ret gdi32.SelectObject() retval=0000006c ret=01005f8a 0009:Call gdi32.BitBlt(00000314,00000127,00000065,00000047,00000060,00002810,00000000,00000000,00cc0020) ret=01005faa 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005faa 0009:Call gdi32.SelectObject(00002810,0000006c) ret=01005fb6 0009:Ret gdi32.SelectObject() retval=00002954 ret=01005fb6 0009:Call gdi32.DeleteObject(00002954) ret=01005fbf 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005fbf 0009:Call gdi32.SetPixel(00000314,00000127,00000065,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000128,00000065,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000127,00000066,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,0000016d,00000065,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,0000016c,00000065,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,0000016d,00000066,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.SetPixel(00000314,00000127,000000c4,ffffffff) ret=01006044 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006044 0009:Call gdi32.SetPixel(00000314,00000128,000000c4,ffffffff) ret=01006059 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006059 0009:Call gdi32.SetPixel(00000314,00000127,000000c3,ffffffff) ret=01006069 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006069 0009:Call gdi32.SetPixel(00000314,0000016d,000000c4,ffffffff) ret=0100607d 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100607d 0009:Call gdi32.SetPixel(00000314,0000016c,000000c4,ffffffff) ret=01006091 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006091 0009:Call gdi32.SetPixel(00000314,0000016d,000000c3,ffffffff) ret=010060a5 0009:Ret gdi32.SetPixel() retval=00ffffff ret=010060a5 0009:Call gdi32.GetPixel(00000314,000001a1,0000000a) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,000001a2,0000000a) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,000001a1,0000000b) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,000001e7,0000000a) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,000001e6,0000000a) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,000001e7,0000000b) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,000001a1,0000000a,00000047,00000009,0000281c,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,000001a1,0000000a,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,000001a2,0000000a,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,000001a1,0000000b,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000001e7,0000000a,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,000001e6,0000000a,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,000001e7,0000000b,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,000001a1,00000011) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,000001a2,00000011) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,000001a1,00000012) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,000001e7,00000011) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,000001e6,00000011) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,000001e7,00000012) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,000001a1,00000011,00000047,00000009,0000281c,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,000001a1,00000011,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,000001a2,00000011,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,000001a1,00000012,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000001e7,00000011,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,000001e6,00000011,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,000001e7,00000012,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,000001a1,00000018) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,000001a2,00000018) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,000001a1,00000019) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,000001e7,00000018) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,000001e6,00000018) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,000001e7,00000019) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,000001a1,00000018,00000047,00000009,0000281c,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,000001a1,00000018,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,000001a2,00000018,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,000001a1,00000019,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000001e7,00000018,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,000001e6,00000018,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,000001e7,00000019,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,000001a1,0000001f) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,000001a2,0000001f) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,000001a1,00000020) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,000001e7,0000001f) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,000001e6,0000001f) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,000001e7,00000020) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,000001a1,0000001f,00000047,00000009,0000281c,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,000001a1,0000001f,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,000001a2,0000001f,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,000001a1,00000020,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000001e7,0000001f,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,000001e6,0000001f,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,000001e7,00000020,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,000001a1,00000026) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,000001a2,00000026) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,000001a1,00000027) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,000001e7,00000026) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,000001e6,00000026) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,000001e7,00000027) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,000001a1,00000026,00000047,00000009,0000281c,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,000001a1,00000026,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,000001a2,00000026,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,000001a1,00000027,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000001e7,00000026,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,000001e6,00000026,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,000001e7,00000027,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,000001a1,0000002d) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,000001a2,0000002d) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,000001a1,0000002e) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,000001e7,0000002d) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,000001e6,0000002d) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,000001e7,0000002e) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call user32.LoadBitmapW(01000000,0033f888 L"CARD47") ret=01005f7d 0009:Ret user32.LoadBitmapW() retval=00002974 ret=01005f7d 0009:Call gdi32.SelectObject(00002810,00002974) ret=01005f8a 0009:Ret gdi32.SelectObject() retval=0000006c ret=01005f8a 0009:Call gdi32.BitBlt(00000314,000001a1,0000002d,00000047,00000060,00002810,00000000,00000000,00cc0020) ret=01005faa 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005faa 0009:Call gdi32.SelectObject(00002810,0000006c) ret=01005fb6 0009:Ret gdi32.SelectObject() retval=00002974 ret=01005fb6 0009:Call gdi32.DeleteObject(00002974) ret=01005fbf 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005fbf 0009:Call gdi32.SetPixel(00000314,000001a1,0000002d,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,000001a2,0000002d,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,000001a1,0000002e,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000001e7,0000002d,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,000001e6,0000002d,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,000001e7,0000002e,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,000001a1,00000049) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,000001a2,00000049) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,000001a1,0000004a) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,000001e7,00000049) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,000001e6,00000049) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,000001e7,0000004a) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call user32.LoadBitmapW(01000000,0033f888 L"CARD40") ret=01005f7d 0009:Ret user32.LoadBitmapW() retval=00002994 ret=01005f7d 0009:Call gdi32.SelectObject(00002810,00002994) ret=01005f8a 0009:Ret gdi32.SelectObject() retval=0000006c ret=01005f8a 0009:Call gdi32.BitBlt(00000314,000001a1,00000049,00000047,00000060,00002810,00000000,00000000,00cc0020) ret=01005faa 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005faa 0009:Call gdi32.SelectObject(00002810,0000006c) ret=01005fb6 0009:Ret gdi32.SelectObject() retval=00002994 ret=01005fb6 0009:Call gdi32.DeleteObject(00002994) ret=01005fbf 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005fbf 0009:Call gdi32.SetPixel(00000314,000001a1,00000049,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,000001a2,00000049,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,000001a1,0000004a,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000001e7,00000049,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,000001e6,00000049,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,000001e7,0000004a,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,000001a1,00000065) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,000001a2,00000065) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,000001a1,00000066) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,000001e7,00000065) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,000001e6,00000065) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,000001e7,00000066) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.GetPixel(00000314,000001a1,000000c4) ret=01005ea5 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ea5 0009:Call gdi32.GetPixel(00000314,000001a2,000000c4) ret=01005eba 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005eba 0009:Call gdi32.GetPixel(00000314,000001a1,000000c3) ret=01005ecd 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ecd 0009:Call gdi32.GetPixel(00000314,000001e7,000000c4) ret=01005ee1 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ee1 0009:Call gdi32.GetPixel(00000314,000001e6,000000c4) ret=01005ef5 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ef5 0009:Call gdi32.GetPixel(00000314,000001e7,000000c3) ret=01005f09 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005f09 0009:Call user32.LoadBitmapW(01000000,0033f888 L"CARD47") ret=01005f7d 0009:Ret user32.LoadBitmapW() retval=000029b4 ret=01005f7d 0009:Call gdi32.SelectObject(00002810,000029b4) ret=01005f8a 0009:Ret gdi32.SelectObject() retval=0000006c ret=01005f8a 0009:Call gdi32.BitBlt(00000314,000001a1,00000065,00000047,00000060,00002810,00000000,00000000,00cc0020) ret=01005faa 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005faa 0009:Call gdi32.SelectObject(00002810,0000006c) ret=01005fb6 0009:Ret gdi32.SelectObject() retval=000029b4 ret=01005fb6 0009:Call gdi32.DeleteObject(000029b4) ret=01005fbf 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005fbf 0009:Call gdi32.SetPixel(00000314,000001a1,00000065,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,000001a2,00000065,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,000001a1,00000066,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000001e7,00000065,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,000001e6,00000065,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,000001e7,00000066,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.SetPixel(00000314,000001a1,000000c4,ffffffff) ret=01006044 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006044 0009:Call gdi32.SetPixel(00000314,000001a2,000000c4,ffffffff) ret=01006059 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006059 0009:Call gdi32.SetPixel(00000314,000001a1,000000c3,ffffffff) ret=01006069 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006069 0009:Call gdi32.SetPixel(00000314,000001e7,000000c4,ffffffff) ret=0100607d 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100607d 0009:Call gdi32.SetPixel(00000314,000001e6,000000c4,ffffffff) ret=01006091 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006091 0009:Call gdi32.SetPixel(00000314,000001e7,000000c3,ffffffff) ret=010060a5 0009:Ret gdi32.SetPixel() retval=00ffffff ret=010060a5 0009:Call gdi32.GetPixel(00000314,0000021b,0000000a) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,0000021c,0000000a) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,0000021b,0000000b) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,00000261,0000000a) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,00000260,0000000a) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,00000261,0000000b) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,0000021b,0000000a,00000047,00000009,0000281c,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,0000021b,0000000a,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,0000021c,0000000a,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,0000021b,0000000b,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,00000261,0000000a,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,00000260,0000000a,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,00000261,0000000b,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,0000021b,00000011) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,0000021c,00000011) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,0000021b,00000012) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,00000261,00000011) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,00000260,00000011) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,00000261,00000012) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,0000021b,00000011,00000047,00000009,0000281c,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,0000021b,00000011,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,0000021c,00000011,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,0000021b,00000012,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,00000261,00000011,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,00000260,00000011,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,00000261,00000012,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,0000021b,00000018) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,0000021c,00000018) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,0000021b,00000019) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,00000261,00000018) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,00000260,00000018) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,00000261,00000019) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,0000021b,00000018,00000047,00000009,0000281c,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,0000021b,00000018,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,0000021c,00000018,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,0000021b,00000019,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,00000261,00000018,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,00000260,00000018,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,00000261,00000019,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,0000021b,0000001f) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,0000021c,0000001f) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,0000021b,00000020) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,00000261,0000001f) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,00000260,0000001f) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,00000261,00000020) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,0000021b,0000001f,00000047,00000009,0000281c,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,0000021b,0000001f,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,0000021c,0000001f,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,0000021b,00000020,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,00000261,0000001f,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,00000260,0000001f,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,00000261,00000020,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,0000021b,00000026) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,0000021c,00000026) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,0000021b,00000027) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,00000261,00000026) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,00000260,00000026) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,00000261,00000027) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call user32.LoadBitmapW(01000000,0033f888 L"CARD41") ret=01005f7d 0009:Ret user32.LoadBitmapW() retval=000029d4 ret=01005f7d 0009:Call gdi32.SelectObject(00002810,000029d4) ret=01005f8a 0009:Ret gdi32.SelectObject() retval=0000006c ret=01005f8a 0009:Call gdi32.BitBlt(00000314,0000021b,00000026,00000047,00000060,00002810,00000000,00000000,00cc0020) ret=01005faa 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005faa 0009:Call gdi32.SelectObject(00002810,0000006c) ret=01005fb6 0009:Ret gdi32.SelectObject() retval=000029d4 ret=01005fb6 0009:Call gdi32.DeleteObject(000029d4) ret=01005fbf 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005fbf 0009:Call gdi32.SetPixel(00000314,0000021b,00000026,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,0000021c,00000026,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,0000021b,00000027,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,00000261,00000026,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,00000260,00000026,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,00000261,00000027,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,0000021b,00000042) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,0000021c,00000042) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,0000021b,00000043) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,00000261,00000042) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,00000260,00000042) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,00000261,00000043) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call user32.LoadBitmapW(01000000,0033f888 L"CARD48") ret=01005f7d 0009:Ret user32.LoadBitmapW() retval=000029f4 ret=01005f7d 0009:Call gdi32.SelectObject(00002810,000029f4) ret=01005f8a 0009:Ret gdi32.SelectObject() retval=0000006c ret=01005f8a 0009:Call gdi32.BitBlt(00000314,0000021b,00000042,00000047,00000060,00002810,00000000,00000000,00cc0020) ret=01005faa 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005faa 0009:Call gdi32.SelectObject(00002810,0000006c) ret=01005fb6 0009:Ret gdi32.SelectObject() retval=000029f4 ret=01005fb6 0009:Call gdi32.DeleteObject(000029f4) ret=01005fbf 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005fbf 0009:Call gdi32.SetPixel(00000314,0000021b,00000042,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,0000021c,00000042,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,0000021b,00000043,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,00000261,00000042,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,00000260,00000042,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,00000261,00000043,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,0000021b,0000005e) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,0000021c,0000005e) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,0000021b,0000005f) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,00000261,0000005e) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,00000260,0000005e) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,00000261,0000005f) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.GetPixel(00000314,0000021b,000000bd) ret=01005ea5 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ea5 0009:Call gdi32.GetPixel(00000314,0000021c,000000bd) ret=01005eba 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005eba 0009:Call gdi32.GetPixel(00000314,0000021b,000000bc) ret=01005ecd 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ecd 0009:Call gdi32.GetPixel(00000314,00000261,000000bd) ret=01005ee1 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ee1 0009:Call gdi32.GetPixel(00000314,00000260,000000bd) ret=01005ef5 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ef5 0009:Call gdi32.GetPixel(00000314,00000261,000000bc) ret=01005f09 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005f09 0009:Call user32.LoadBitmapW(01000000,0033f888 L"CARD42") ret=01005f7d 0009:Ret user32.LoadBitmapW() retval=00002a14 ret=01005f7d 0009:Call gdi32.SelectObject(00002810,00002a14) ret=01005f8a 0009:Ret gdi32.SelectObject() retval=0000006c ret=01005f8a 0009:Call gdi32.BitBlt(00000314,0000021b,0000005e,00000047,00000060,00002810,00000000,00000000,00cc0020) ret=01005faa 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005faa 0009:Call gdi32.SelectObject(00002810,0000006c) ret=01005fb6 0009:Ret gdi32.SelectObject() retval=00002a14 ret=01005fb6 0009:Call gdi32.DeleteObject(00002a14) ret=01005fbf 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005fbf 0009:Call gdi32.SetPixel(00000314,0000021b,0000005e,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,0000021c,0000005e,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,0000021b,0000005f,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,00000261,0000005e,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,00000260,0000005e,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,00000261,0000005f,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.SetPixel(00000314,0000021b,000000bd,ffffffff) ret=01006044 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006044 0009:Call gdi32.SetPixel(00000314,0000021c,000000bd,ffffffff) ret=01006059 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006059 0009:Call gdi32.SetPixel(00000314,0000021b,000000bc,ffffffff) ret=01006069 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006069 0009:Call gdi32.SetPixel(00000314,00000261,000000bd,ffffffff) ret=0100607d 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100607d 0009:Call gdi32.SetPixel(00000314,00000260,000000bd,ffffffff) ret=01006091 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006091 0009:Call gdi32.SetPixel(00000314,00000261,000000bc,ffffffff) ret=010060a5 0009:Ret gdi32.SetPixel() retval=00ffffff ret=010060a5 0009:Call gdi32.GetPixel(00000314,00000295,0000000a) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000296,0000000a) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000295,0000000b) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,000002db,0000000a) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,000002da,0000000a) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,000002db,0000000b) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,00000295,0000000a,00000047,00000009,0000281c,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,00000295,0000000a,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000296,0000000a,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000295,0000000b,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000002db,0000000a,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,000002da,0000000a,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,000002db,0000000b,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,00000295,00000011) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000296,00000011) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000295,00000012) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,000002db,00000011) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,000002da,00000011) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,000002db,00000012) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,00000295,00000011,00000047,00000009,0000281c,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,00000295,00000011,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000296,00000011,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000295,00000012,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000002db,00000011,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,000002da,00000011,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,000002db,00000012,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,00000295,00000018) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000296,00000018) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000295,00000019) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,000002db,00000018) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,000002da,00000018) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,000002db,00000019) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,00000295,00000018,00000047,00000009,0000281c,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,00000295,00000018,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000296,00000018,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000295,00000019,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000002db,00000018,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,000002da,00000018,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,000002db,00000019,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,00000295,0000001f) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000296,0000001f) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000295,00000020) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,000002db,0000001f) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,000002da,0000001f) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,000002db,00000020) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,00000295,0000001f,00000047,00000009,0000281c,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,00000295,0000001f,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000296,0000001f,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000295,00000020,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000002db,0000001f,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,000002da,0000001f,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,000002db,00000020,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,00000295,00000026) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000296,00000026) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000295,00000027) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,000002db,00000026) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,000002da,00000026) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,000002db,00000027) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call user32.LoadBitmapW(01000000,0033f888 L"CARD44") ret=01005f7d 0009:Ret user32.LoadBitmapW() retval=00002a34 ret=01005f7d 0009:Call gdi32.SelectObject(00002810,00002a34) ret=01005f8a 0009:Ret gdi32.SelectObject() retval=0000006c ret=01005f8a 0009:Call gdi32.BitBlt(00000314,00000295,00000026,00000047,00000060,00002810,00000000,00000000,00cc0020) ret=01005faa 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005faa 0009:Call gdi32.SelectObject(00002810,0000006c) ret=01005fb6 0009:Ret gdi32.SelectObject() retval=00002a34 ret=01005fb6 0009:Call gdi32.DeleteObject(00002a34) ret=01005fbf 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005fbf 0009:Call gdi32.SetPixel(00000314,00000295,00000026,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000296,00000026,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000295,00000027,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000002db,00000026,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,000002da,00000026,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,000002db,00000027,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,00000295,00000042) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000296,00000042) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000295,00000043) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,000002db,00000042) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,000002da,00000042) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,000002db,00000043) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call user32.LoadBitmapW(01000000,0033f888 L"CARD44") ret=01005f7d 0009:Ret user32.LoadBitmapW() retval=00002a54 ret=01005f7d 0009:Call gdi32.SelectObject(00002810,00002a54) ret=01005f8a 0009:Ret gdi32.SelectObject() retval=0000006c ret=01005f8a 0009:Call gdi32.BitBlt(00000314,00000295,00000042,00000047,00000060,00002810,00000000,00000000,00cc0020) ret=01005faa 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005faa 0009:Call gdi32.SelectObject(00002810,0000006c) ret=01005fb6 0009:Ret gdi32.SelectObject() retval=00002a54 ret=01005fb6 0009:Call gdi32.DeleteObject(00002a54) ret=01005fbf 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005fbf 0009:Call gdi32.SetPixel(00000314,00000295,00000042,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000296,00000042,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000295,00000043,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000002db,00000042,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,000002da,00000042,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,000002db,00000043,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,00000295,0000005e) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000296,0000005e) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000295,0000005f) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,000002db,0000005e) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,000002da,0000005e) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,000002db,0000005f) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.GetPixel(00000314,00000295,000000bd) ret=01005ea5 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ea5 0009:Call gdi32.GetPixel(00000314,00000296,000000bd) ret=01005eba 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005eba 0009:Call gdi32.GetPixel(00000314,00000295,000000bc) ret=01005ecd 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ecd 0009:Call gdi32.GetPixel(00000314,000002db,000000bd) ret=01005ee1 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ee1 0009:Call gdi32.GetPixel(00000314,000002da,000000bd) ret=01005ef5 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ef5 0009:Call gdi32.GetPixel(00000314,000002db,000000bc) ret=01005f09 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005f09 0009:Call user32.LoadBitmapW(01000000,0033f888 L"CARD42") ret=01005f7d 0009:Ret user32.LoadBitmapW() retval=00002a74 ret=01005f7d 0009:Call gdi32.SelectObject(00002810,00002a74) ret=01005f8a 0009:Ret gdi32.SelectObject() retval=0000006c ret=01005f8a 0009:Call gdi32.BitBlt(00000314,00000295,0000005e,00000047,00000060,00002810,00000000,00000000,00cc0020) ret=01005faa 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005faa 0009:Call gdi32.SelectObject(00002810,0000006c) ret=01005fb6 0009:Ret gdi32.SelectObject() retval=00002a74 ret=01005fb6 0009:Call gdi32.DeleteObject(00002a74) ret=01005fbf 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005fbf 0009:Call gdi32.SetPixel(00000314,00000295,0000005e,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000296,0000005e,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000295,0000005f,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000002db,0000005e,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,000002da,0000005e,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,000002db,0000005f,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.SetPixel(00000314,00000295,000000bd,ffffffff) ret=01006044 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006044 0009:Call gdi32.SetPixel(00000314,00000296,000000bd,ffffffff) ret=01006059 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006059 0009:Call gdi32.SetPixel(00000314,00000295,000000bc,ffffffff) ret=01006069 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006069 0009:Call gdi32.SetPixel(00000314,000002db,000000bd,ffffffff) ret=0100607d 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100607d 0009:Call gdi32.SetPixel(00000314,000002da,000000bd,ffffffff) ret=01006091 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006091 0009:Call gdi32.SetPixel(00000314,000002db,000000bc,ffffffff) ret=010060a5 0009:Ret gdi32.SetPixel() retval=00ffffff ret=010060a5 0009:Call gdi32.GetPixel(00000314,0000030f,0000000a) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000310,0000000a) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,0000030f,0000000b) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,00000355,0000000a) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,00000354,0000000a) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,00000355,0000000b) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,0000030f,0000000a,00000047,00000009,0000281c,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,0000030f,0000000a,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000310,0000000a,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,0000030f,0000000b,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,00000355,0000000a,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,00000354,0000000a,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,00000355,0000000b,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,0000030f,00000011) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000310,00000011) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,0000030f,00000012) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,00000355,00000011) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,00000354,00000011) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,00000355,00000012) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,0000030f,00000011,00000047,00000009,0000281c,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,0000030f,00000011,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000310,00000011,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,0000030f,00000012,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,00000355,00000011,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,00000354,00000011,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,00000355,00000012,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,0000030f,00000018) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000310,00000018) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,0000030f,00000019) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,00000355,00000018) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,00000354,00000018) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,00000355,00000019) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,0000030f,00000018,00000047,00000009,0000281c,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,0000030f,00000018,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000310,00000018,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,0000030f,00000019,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,00000355,00000018,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,00000354,00000018,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,00000355,00000019,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,0000030f,0000001f) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000310,0000001f) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,0000030f,00000020) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,00000355,0000001f) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,00000354,0000001f) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,00000355,00000020) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,0000030f,0000001f,00000047,00000009,0000281c,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,0000030f,0000001f,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000310,0000001f,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,0000030f,00000020,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,00000355,0000001f,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,00000354,0000001f,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,00000355,00000020,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,0000030f,00000026) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000310,00000026) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,0000030f,00000027) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,00000355,00000026) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,00000354,00000026) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,00000355,00000027) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call user32.LoadBitmapW(01000000,0033f888 L"CARD40") ret=01005f7d 0009:Ret user32.LoadBitmapW() retval=00002a94 ret=01005f7d 0009:Call gdi32.SelectObject(00002810,00002a94) ret=01005f8a 0009:Ret gdi32.SelectObject() retval=0000006c ret=01005f8a 0009:Call gdi32.BitBlt(00000314,0000030f,00000026,00000047,00000060,00002810,00000000,00000000,00cc0020) ret=01005faa 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005faa 0009:Call gdi32.SelectObject(00002810,0000006c) ret=01005fb6 0009:Ret gdi32.SelectObject() retval=00002a94 ret=01005fb6 0009:Call gdi32.DeleteObject(00002a94) ret=01005fbf 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005fbf 0009:Call gdi32.SetPixel(00000314,0000030f,00000026,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000310,00000026,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,0000030f,00000027,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,00000355,00000026,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,00000354,00000026,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,00000355,00000027,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,0000030f,00000042) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000310,00000042) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,0000030f,00000043) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,00000355,00000042) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,00000354,00000042) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,00000355,00000043) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call user32.LoadBitmapW(01000000,0033f888 L"CARD43") ret=01005f7d 0009:Ret user32.LoadBitmapW() retval=00002ab4 ret=01005f7d 0009:Call gdi32.SelectObject(00002810,00002ab4) ret=01005f8a 0009:Ret gdi32.SelectObject() retval=0000006c ret=01005f8a 0009:Call gdi32.BitBlt(00000314,0000030f,00000042,00000047,00000060,00002810,00000000,00000000,00cc0020) ret=01005faa 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005faa 0009:Call gdi32.SelectObject(00002810,0000006c) ret=01005fb6 0009:Ret gdi32.SelectObject() retval=00002ab4 ret=01005fb6 0009:Call gdi32.DeleteObject(00002ab4) ret=01005fbf 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005fbf 0009:Call gdi32.SetPixel(00000314,0000030f,00000042,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000310,00000042,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,0000030f,00000043,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,00000355,00000042,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,00000354,00000042,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,00000355,00000043,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,0000030f,0000005e) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000310,0000005e) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,0000030f,0000005f) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,00000355,0000005e) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,00000354,0000005e) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,00000355,0000005f) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.GetPixel(00000314,0000030f,000000bd) ret=01005ea5 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ea5 0009:Call gdi32.GetPixel(00000314,00000310,000000bd) ret=01005eba 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005eba 0009:Call gdi32.GetPixel(00000314,0000030f,000000bc) ret=01005ecd 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ecd 0009:Call gdi32.GetPixel(00000314,00000355,000000bd) ret=01005ee1 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ee1 0009:Call gdi32.GetPixel(00000314,00000354,000000bd) ret=01005ef5 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ef5 0009:Call gdi32.GetPixel(00000314,00000355,000000bc) ret=01005f09 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005f09 0009:Call user32.LoadBitmapW(01000000,0033f888 L"CARD47") ret=01005f7d 0009:Ret user32.LoadBitmapW() retval=00002ad4 ret=01005f7d 0009:Call gdi32.SelectObject(00002810,00002ad4) ret=01005f8a 0009:Ret gdi32.SelectObject() retval=0000006c ret=01005f8a 0009:Call gdi32.BitBlt(00000314,0000030f,0000005e,00000047,00000060,00002810,00000000,00000000,00cc0020) ret=01005faa 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005faa 0009:Call gdi32.SelectObject(00002810,0000006c) ret=01005fb6 0009:Ret gdi32.SelectObject() retval=00002ad4 ret=01005fb6 0009:Call gdi32.DeleteObject(00002ad4) ret=01005fbf 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005fbf 0009:Call gdi32.SetPixel(00000314,0000030f,0000005e,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000310,0000005e,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,0000030f,0000005f,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,00000355,0000005e,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,00000354,0000005e,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,00000355,0000005f,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.SetPixel(00000314,0000030f,000000bd,ffffffff) ret=01006044 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006044 0009:Call gdi32.SetPixel(00000314,00000310,000000bd,ffffffff) ret=01006059 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006059 0009:Call gdi32.SetPixel(00000314,0000030f,000000bc,ffffffff) ret=01006069 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006069 0009:Call gdi32.SetPixel(00000314,00000355,000000bd,ffffffff) ret=0100607d 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100607d 0009:Call gdi32.SetPixel(00000314,00000354,000000bd,ffffffff) ret=01006091 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006091 0009:Call gdi32.SetPixel(00000314,00000355,000000bc,ffffffff) ret=010060a5 0009:Ret gdi32.SetPixel() retval=00ffffff ret=010060a5 0009:Call gdi32.GetPixel(00000314,00000389,0000000a) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,0000038a,0000000a) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000389,0000000b) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,000003cf,0000000a) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,000003ce,0000000a) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,000003cf,0000000b) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,00000389,0000000a,00000047,00000009,0000281c,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,00000389,0000000a,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,0000038a,0000000a,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000389,0000000b,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000003cf,0000000a,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,000003ce,0000000a,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,000003cf,0000000b,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,00000389,00000011) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,0000038a,00000011) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000389,00000012) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,000003cf,00000011) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,000003ce,00000011) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,000003cf,00000012) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,00000389,00000011,00000047,00000009,0000281c,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,00000389,00000011,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,0000038a,00000011,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000389,00000012,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000003cf,00000011,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,000003ce,00000011,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,000003cf,00000012,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,00000389,00000018) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,0000038a,00000018) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000389,00000019) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,000003cf,00000018) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,000003ce,00000018) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,000003cf,00000019) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,00000389,00000018,00000047,00000009,0000281c,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,00000389,00000018,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,0000038a,00000018,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000389,00000019,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000003cf,00000018,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,000003ce,00000018,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,000003cf,00000019,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,00000389,0000001f) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,0000038a,0000001f) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000389,00000020) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,000003cf,0000001f) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,000003ce,0000001f) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,000003cf,00000020) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,00000389,0000001f,00000047,00000009,0000281c,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,00000389,0000001f,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,0000038a,0000001f,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000389,00000020,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000003cf,0000001f,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,000003ce,0000001f,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,000003cf,00000020,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,00000389,00000026) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,0000038a,00000026) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000389,00000027) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,000003cf,00000026) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,000003ce,00000026) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,000003cf,00000027) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call user32.LoadBitmapW(01000000,0033f888 L"CARD43") ret=01005f7d 0009:Ret user32.LoadBitmapW() retval=00002af4 ret=01005f7d 0009:Call gdi32.SelectObject(00002810,00002af4) ret=01005f8a 0009:Ret gdi32.SelectObject() retval=0000006c ret=01005f8a 0009:Call gdi32.BitBlt(00000314,00000389,00000026,00000047,00000060,00002810,00000000,00000000,00cc0020) ret=01005faa 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005faa 0009:Call gdi32.SelectObject(00002810,0000006c) ret=01005fb6 0009:Ret gdi32.SelectObject() retval=00002af4 ret=01005fb6 0009:Call gdi32.DeleteObject(00002af4) ret=01005fbf 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005fbf 0009:Call gdi32.SetPixel(00000314,00000389,00000026,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,0000038a,00000026,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000389,00000027,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000003cf,00000026,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,000003ce,00000026,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,000003cf,00000027,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,00000389,00000042) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,0000038a,00000042) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000389,00000043) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,000003cf,00000042) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,000003ce,00000042) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,000003cf,00000043) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call user32.LoadBitmapW(01000000,0033f888 L"CARD48") ret=01005f7d 0009:Ret user32.LoadBitmapW() retval=00002b14 ret=01005f7d 0009:Call gdi32.SelectObject(00002810,00002b14) ret=01005f8a 0009:Ret gdi32.SelectObject() retval=0000006c ret=01005f8a 0009:Call gdi32.BitBlt(00000314,00000389,00000042,00000047,00000060,00002810,00000000,00000000,00cc0020) ret=01005faa 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005faa 0009:Call gdi32.SelectObject(00002810,0000006c) ret=01005fb6 0009:Ret gdi32.SelectObject() retval=00002b14 ret=01005fb6 0009:Call gdi32.DeleteObject(00002b14) ret=01005fbf 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005fbf 0009:Call gdi32.SetPixel(00000314,00000389,00000042,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,0000038a,00000042,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000389,00000043,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000003cf,00000042,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,000003ce,00000042,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,000003cf,00000043,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,00000389,0000005e) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,0000038a,0000005e) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000389,0000005f) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,000003cf,0000005e) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,000003ce,0000005e) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,000003cf,0000005f) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.GetPixel(00000314,00000389,000000bd) ret=01005ea5 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ea5 0009:Call gdi32.GetPixel(00000314,0000038a,000000bd) ret=01005eba 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005eba 0009:Call gdi32.GetPixel(00000314,00000389,000000bc) ret=01005ecd 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ecd 0009:Call gdi32.GetPixel(00000314,000003cf,000000bd) ret=01005ee1 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ee1 0009:Call gdi32.GetPixel(00000314,000003ce,000000bd) ret=01005ef5 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ef5 0009:Call gdi32.GetPixel(00000314,000003cf,000000bc) ret=01005f09 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005f09 0009:Call user32.LoadBitmapW(01000000,0033f888 L"CARD49") ret=01005f7d 0009:Ret user32.LoadBitmapW() retval=00002b34 ret=01005f7d 0009:Call gdi32.SelectObject(00002810,00002b34) ret=01005f8a 0009:Ret gdi32.SelectObject() retval=0000006c ret=01005f8a 0009:Call gdi32.BitBlt(00000314,00000389,0000005e,00000047,00000060,00002810,00000000,00000000,00cc0020) ret=01005faa 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005faa 0009:Call gdi32.SelectObject(00002810,0000006c) ret=01005fb6 0009:Ret gdi32.SelectObject() retval=00002b34 ret=01005fb6 0009:Call gdi32.DeleteObject(00002b34) ret=01005fbf 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005fbf 0009:Call gdi32.SetPixel(00000314,00000389,0000005e,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,0000038a,0000005e,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000389,0000005f,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000003cf,0000005e,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,000003ce,0000005e,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,000003cf,0000005f,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.SetPixel(00000314,00000389,000000bd,ffffffff) ret=01006044 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006044 0009:Call gdi32.SetPixel(00000314,0000038a,000000bd,ffffffff) ret=01006059 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006059 0009:Call gdi32.SetPixel(00000314,00000389,000000bc,ffffffff) ret=01006069 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006069 0009:Call gdi32.SetPixel(00000314,000003cf,000000bd,ffffffff) ret=0100607d 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100607d 0009:Call gdi32.SetPixel(00000314,000003ce,000000bd,ffffffff) ret=01006091 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006091 0009:Call gdi32.SetPixel(00000314,000003cf,000000bc,ffffffff) ret=010060a5 0009:Ret gdi32.SetPixel() retval=00ffffff ret=010060a5 0009:Call gdi32.GetPixel(00000314,00000403,0000000a) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000404,0000000a) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000403,0000000b) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,00000449,0000000a) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,00000448,0000000a) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,00000449,0000000b) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,00000403,0000000a,00000047,00000009,0000281c,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,00000403,0000000a,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000404,0000000a,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000403,0000000b,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,00000449,0000000a,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,00000448,0000000a,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,00000449,0000000b,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,00000403,00000011) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000404,00000011) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000403,00000012) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,00000449,00000011) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,00000448,00000011) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,00000449,00000012) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,00000403,00000011,00000047,00000009,0000281c,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,00000403,00000011,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000404,00000011,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000403,00000012,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,00000449,00000011,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,00000448,00000011,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,00000449,00000012,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,00000403,00000018) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000404,00000018) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000403,00000019) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,00000449,00000018) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,00000448,00000018) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,00000449,00000019) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,00000403,00000018,00000047,00000009,0000281c,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,00000403,00000018,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000404,00000018,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000403,00000019,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,00000449,00000018,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,00000448,00000018,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,00000449,00000019,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,00000403,0000001f) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000404,0000001f) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000403,00000020) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,00000449,0000001f) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,00000448,0000001f) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,00000449,00000020) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,00000403,0000001f,00000047,00000009,0000281c,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,00000403,0000001f,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000404,0000001f,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000403,00000020,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,00000449,0000001f,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,00000448,0000001f,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,00000449,00000020,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,00000403,00000026) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000404,00000026) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000403,00000027) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,00000449,00000026) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,00000448,00000026) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,00000449,00000027) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call user32.LoadBitmapW(01000000,0033f888 L"CARD46") ret=01005f7d 0009:Ret user32.LoadBitmapW() retval=00002b54 ret=01005f7d 0009:Call gdi32.SelectObject(00002810,00002b54) ret=01005f8a 0009:Ret gdi32.SelectObject() retval=0000006c ret=01005f8a 0009:Call gdi32.BitBlt(00000314,00000403,00000026,00000047,00000060,00002810,00000000,00000000,00cc0020) ret=01005faa 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005faa 0009:Call gdi32.SelectObject(00002810,0000006c) ret=01005fb6 0009:Ret gdi32.SelectObject() retval=00002b54 ret=01005fb6 0009:Call gdi32.DeleteObject(00002b54) ret=01005fbf 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005fbf 0009:Call gdi32.SetPixel(00000314,00000403,00000026,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000404,00000026,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000403,00000027,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,00000449,00000026,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,00000448,00000026,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,00000449,00000027,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,00000403,00000042) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000404,00000042) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000403,00000043) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,00000449,00000042) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,00000448,00000042) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,00000449,00000043) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call user32.LoadBitmapW(01000000,0033f888 L"CARD48") ret=01005f7d 0009:Ret user32.LoadBitmapW() retval=00002b74 ret=01005f7d 0009:Call gdi32.SelectObject(00002810,00002b74) ret=01005f8a 0009:Ret gdi32.SelectObject() retval=0000006c ret=01005f8a 0009:Call gdi32.BitBlt(00000314,00000403,00000042,00000047,00000060,00002810,00000000,00000000,00cc0020) ret=01005faa 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005faa 0009:Call gdi32.SelectObject(00002810,0000006c) ret=01005fb6 0009:Ret gdi32.SelectObject() retval=00002b74 ret=01005fb6 0009:Call gdi32.DeleteObject(00002b74) ret=01005fbf 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005fbf 0009:Call gdi32.SetPixel(00000314,00000403,00000042,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000404,00000042,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000403,00000043,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,00000449,00000042,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,00000448,00000042,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,00000449,00000043,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,00000403,0000005e) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,00000404,0000005e) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,00000403,0000005f) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,00000449,0000005e) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,00000448,0000005e) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,00000449,0000005f) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.GetPixel(00000314,00000403,000000bd) ret=01005ea5 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ea5 0009:Call gdi32.GetPixel(00000314,00000404,000000bd) ret=01005eba 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005eba 0009:Call gdi32.GetPixel(00000314,00000403,000000bc) ret=01005ecd 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ecd 0009:Call gdi32.GetPixel(00000314,00000449,000000bd) ret=01005ee1 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ee1 0009:Call gdi32.GetPixel(00000314,00000448,000000bd) ret=01005ef5 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ef5 0009:Call gdi32.GetPixel(00000314,00000449,000000bc) ret=01005f09 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005f09 0009:Call user32.LoadBitmapW(01000000,0033f888 L"CARD40") ret=01005f7d 0009:Ret user32.LoadBitmapW() retval=00002b94 ret=01005f7d 0009:Call gdi32.SelectObject(00002810,00002b94) ret=01005f8a 0009:Ret gdi32.SelectObject() retval=0000006c ret=01005f8a 0009:Call gdi32.BitBlt(00000314,00000403,0000005e,00000047,00000060,00002810,00000000,00000000,00cc0020) ret=01005faa 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005faa 0009:Call gdi32.SelectObject(00002810,0000006c) ret=01005fb6 0009:Ret gdi32.SelectObject() retval=00002b94 ret=01005fb6 0009:Call gdi32.DeleteObject(00002b94) ret=01005fbf 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005fbf 0009:Call gdi32.SetPixel(00000314,00000403,0000005e,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,00000404,0000005e,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,00000403,0000005f,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,00000449,0000005e,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,00000448,0000005e,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,00000449,0000005f,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.SetPixel(00000314,00000403,000000bd,ffffffff) ret=01006044 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006044 0009:Call gdi32.SetPixel(00000314,00000404,000000bd,ffffffff) ret=01006059 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006059 0009:Call gdi32.SetPixel(00000314,00000403,000000bc,ffffffff) ret=01006069 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006069 0009:Call gdi32.SetPixel(00000314,00000449,000000bd,ffffffff) ret=0100607d 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100607d 0009:Call gdi32.SetPixel(00000314,00000448,000000bd,ffffffff) ret=01006091 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006091 0009:Call gdi32.SetPixel(00000314,00000449,000000bc,ffffffff) ret=010060a5 0009:Ret gdi32.SetPixel() retval=00ffffff ret=010060a5 0009:Call gdi32.GetPixel(00000314,0000047d,0000000a) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,0000047e,0000000a) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,0000047d,0000000b) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,000004c3,0000000a) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,000004c2,0000000a) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,000004c3,0000000b) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,0000047d,0000000a,00000047,00000009,0000281c,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,0000047d,0000000a,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,0000047e,0000000a,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,0000047d,0000000b,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000004c3,0000000a,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,000004c2,0000000a,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,000004c3,0000000b,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,0000047d,00000011) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,0000047e,00000011) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,0000047d,00000012) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,000004c3,00000011) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,000004c2,00000011) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,000004c3,00000012) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,0000047d,00000011,00000047,00000009,0000281c,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,0000047d,00000011,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,0000047e,00000011,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,0000047d,00000012,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000004c3,00000011,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,000004c2,00000011,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,000004c3,00000012,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,0000047d,00000018) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,0000047e,00000018) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,0000047d,00000019) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,000004c3,00000018) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,000004c2,00000018) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,000004c3,00000019) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,0000047d,00000018,00000047,00000009,0000281c,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,0000047d,00000018,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,0000047e,00000018,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,0000047d,00000019,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000004c3,00000018,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,000004c2,00000018,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,000004c3,00000019,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,0000047d,0000001f) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,0000047e,0000001f) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,0000047d,00000020) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,000004c3,0000001f) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,000004c2,0000001f) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,000004c3,00000020) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.BitBlt(00000314,0000047d,0000001f,00000047,00000009,0000281c,00000000,00000000,00cc0020) ret=01005f36 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005f36 0009:Call gdi32.SetPixel(00000314,0000047d,0000001f,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,0000047e,0000001f,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,0000047d,00000020,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000004c3,0000001f,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,000004c2,0000001f,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,000004c3,00000020,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,0000047d,00000026) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,0000047e,00000026) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,0000047d,00000027) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,000004c3,00000026) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,000004c2,00000026) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,000004c3,00000027) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call user32.LoadBitmapW(01000000,0033f888 L"CARD43") ret=01005f7d 0009:Ret user32.LoadBitmapW() retval=00002bb4 ret=01005f7d 0009:Call gdi32.SelectObject(00002810,00002bb4) ret=01005f8a 0009:Ret gdi32.SelectObject() retval=0000006c ret=01005f8a 0009:Call gdi32.BitBlt(00000314,0000047d,00000026,00000047,00000060,00002810,00000000,00000000,00cc0020) ret=01005faa 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005faa 0009:Call gdi32.SelectObject(00002810,0000006c) ret=01005fb6 0009:Ret gdi32.SelectObject() retval=00002bb4 ret=01005fb6 0009:Call gdi32.DeleteObject(00002bb4) ret=01005fbf 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005fbf 0009:Call gdi32.SetPixel(00000314,0000047d,00000026,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,0000047e,00000026,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,0000047d,00000027,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000004c3,00000026,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,000004c2,00000026,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,000004c3,00000027,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,0000047d,00000042) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,0000047e,00000042) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,0000047d,00000043) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,000004c3,00000042) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,000004c2,00000042) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,000004c3,00000043) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call user32.LoadBitmapW(01000000,0033f888 L"CARD46") ret=01005f7d 0009:Ret user32.LoadBitmapW() retval=00002bd4 ret=01005f7d 0009:Call gdi32.SelectObject(00002810,00002bd4) ret=01005f8a 0009:Ret gdi32.SelectObject() retval=0000006c ret=01005f8a 0009:Call gdi32.BitBlt(00000314,0000047d,00000042,00000047,00000060,00002810,00000000,00000000,00cc0020) ret=01005faa 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005faa 0009:Call gdi32.SelectObject(00002810,0000006c) ret=01005fb6 0009:Ret gdi32.SelectObject() retval=00002bd4 ret=01005fb6 0009:Call gdi32.DeleteObject(00002bd4) ret=01005fbf 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005fbf 0009:Call gdi32.SetPixel(00000314,0000047d,00000042,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,0000047e,00000042,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,0000047d,00000043,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000004c3,00000042,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,000004c2,00000042,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,000004c3,00000043,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.GetPixel(00000314,0000047d,0000005e) ret=01005e2e 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e2e 0009:Call gdi32.GetPixel(00000314,0000047e,0000005e) ret=01005e3f 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e3f 0009:Call gdi32.GetPixel(00000314,0000047d,0000005f) ret=01005e50 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e50 0009:Call gdi32.GetPixel(00000314,000004c3,0000005e) ret=01005e63 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e63 0009:Call gdi32.GetPixel(00000314,000004c2,0000005e) ret=01005e76 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e76 0009:Call gdi32.GetPixel(00000314,000004c3,0000005f) ret=01005e8b 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005e8b 0009:Call gdi32.GetPixel(00000314,0000047d,000000bd) ret=01005ea5 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ea5 0009:Call gdi32.GetPixel(00000314,0000047e,000000bd) ret=01005eba 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005eba 0009:Call gdi32.GetPixel(00000314,0000047d,000000bc) ret=01005ecd 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ecd 0009:Call gdi32.GetPixel(00000314,000004c3,000000bd) ret=01005ee1 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ee1 0009:Call gdi32.GetPixel(00000314,000004c2,000000bd) ret=01005ef5 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005ef5 0009:Call gdi32.GetPixel(00000314,000004c3,000000bc) ret=01005f09 0009:Ret gdi32.GetPixel() retval=ffffffff ret=01005f09 0009:Call user32.LoadBitmapW(01000000,0033f888 L"CARD46") ret=01005f7d 0009:Ret user32.LoadBitmapW() retval=00002bf4 ret=01005f7d 0009:Call gdi32.SelectObject(00002810,00002bf4) ret=01005f8a 0009:Ret gdi32.SelectObject() retval=0000006c ret=01005f8a 0009:Call gdi32.BitBlt(00000314,0000047d,0000005e,00000047,00000060,00002810,00000000,00000000,00cc0020) ret=01005faa 0009:Ret gdi32.BitBlt() retval=00000001 ret=01005faa 0009:Call gdi32.SelectObject(00002810,0000006c) ret=01005fb6 0009:Ret gdi32.SelectObject() retval=00002bf4 ret=01005fb6 0009:Call gdi32.DeleteObject(00002bf4) ret=01005fbf 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01005fbf 0009:Call gdi32.SetPixel(00000314,0000047d,0000005e,ffffffff) ret=01005fce 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fce 0009:Call gdi32.SetPixel(00000314,0000047e,0000005e,ffffffff) ret=01005fdf 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005fdf 0009:Call gdi32.SetPixel(00000314,0000047d,0000005f,ffffffff) ret=01005ff0 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01005ff0 0009:Call gdi32.SetPixel(00000314,000004c3,0000005e,ffffffff) ret=01006003 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006003 0009:Call gdi32.SetPixel(00000314,000004c2,0000005e,ffffffff) ret=01006016 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006016 0009:Call gdi32.SetPixel(00000314,000004c3,0000005f,ffffffff) ret=0100602b 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100602b 0009:Call gdi32.SetPixel(00000314,0000047d,000000bd,ffffffff) ret=01006044 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006044 0009:Call gdi32.SetPixel(00000314,0000047e,000000bd,ffffffff) ret=01006059 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006059 0009:Call gdi32.SetPixel(00000314,0000047d,000000bc,ffffffff) ret=01006069 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006069 0009:Call gdi32.SetPixel(00000314,000004c3,000000bd,ffffffff) ret=0100607d 0009:Ret gdi32.SetPixel() retval=00ffffff ret=0100607d 0009:Call gdi32.SetPixel(00000314,000004c2,000000bd,ffffffff) ret=01006091 0009:Ret gdi32.SetPixel() retval=00ffffff ret=01006091 0009:Call gdi32.SetPixel(00000314,000004c3,000000bc,ffffffff) ret=010060a5 0009:Ret gdi32.SetPixel() retval=00ffffff ret=010060a5 0009:Call gdi32.SelectObject(0000281c,0000006c) ret=010061a0 0009:Ret gdi32.SelectObject() retval=00002834 ret=010061a0 0009:Call gdi32.DeleteObject(00002834) ret=010061a9 0009:Ret gdi32.DeleteObject() retval=00000001 ret=010061a9 0009:Call gdi32.DeleteDC(0000281c) ret=010061b4 0009:Ret gdi32.DeleteDC() retval=00000001 ret=010061b4 0009:Call gdi32.DeleteDC(00002810) ret=010061b9 0009:Ret gdi32.DeleteDC() retval=00000001 ret=010061b9 0009:Call user32.GetClientRect(00010030,0033f700) ret=01003826 0009:Ret user32.GetClientRect() retval=00000001 ret=01003826 0009:Call user32.GetClientRect(00010030,0033f6b0) ret=01002b2e 0009:Ret user32.GetClientRect() retval=00000001 ret=01002b2e 0009:Call user32.OffsetRect(0033f700,00000000,00000000) ret=01004a4e 0009:Ret user32.OffsetRect() retval=00000001 ret=01004a4e 0009:Call gdi32.CreateSolidBrush(00007f00) ret=01004a59 0009:Ret gdi32.CreateSolidBrush() retval=00002c08 ret=01004a59 0009:Call gdi32.GetStockObject(00000004) ret=01004a63 0009:Ret gdi32.GetStockObject() retval=00000054 ret=01004a63 0009:Call user32.FillRect(00000314,0033f700,00002c08) ret=01004a78 0009:Ret user32.FillRect() retval=00000001 ret=01004a78 0009:Call gdi32.DeleteObject(00002c08) ret=01004a7f 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01004a7f 0009:Call user32.FrameRect(00000314,0033f700,00000054) ret=01004a92 0009:Ret user32.FrameRect() retval=00000001 ret=01004a92 0009:Call gdi32.GetBkMode(00000314) ret=01004a99 0009:Ret gdi32.GetBkMode() retval=00000002 ret=01004a99 0009:Call gdi32.GetTextColor(00000314) ret=01004aa6 0009:Ret gdi32.GetTextColor() retval=00000000 ret=01004aa6 0009:Call gdi32.SetBkMode(00000314,00000001) ret=01004ab5 0009:Ret gdi32.SetBkMode() retval=00000002 ret=01004ab5 0009:Call gdi32.SetTextColor(00000314,00ffffff) ret=01004ac1 0009:Ret gdi32.SetTextColor() retval=00000000 ret=01004ac1 0009:Call user32.SetRect(0033f6ec,00000225,00000276,0000027f,0000028a) ret=01004aec 0009:Ret user32.SetRect() retval=00000001 ret=01004aec 0009:Call user32.LoadStringW(01000000,00000035,01011800,00000400) ret=0100361b 0009:Ret user32.LoadStringW() retval=00000006 ret=0100361b 0009:Call user32.DrawTextW(00000314,01011800 L"Score:",ffffffff,0033f6ec,00000022) ret=01004b08 0009:Ret user32.DrawTextW() retval=00000010 ret=01004b08 0009:Call user32.SetRect(0033f6ec,00000225,0000028a,0000027f,000002a8) ret=01004b2d 0009:Ret user32.SetRect() retval=00000001 ret=01004b2d 0009:Call user32.LoadStringW(01000000,00000036,01011800,00000400) ret=0100361b 0009:Ret user32.LoadStringW() retval=00000006 ret=0100361b 0009:Call user32.DrawTextW(00000314,01011800 L"Moves:",ffffffff,0033f6ec,00000022) ret=01004b43 0009:Ret user32.DrawTextW() retval=00000010 ret=01004b43 0009:Call user32.SetRect(0033f6ec,00000289,00000276,000002e3,0000028a) ret=01004b8c 0009:Ret user32.SetRect() retval=00000001 ret=01004b8c 0009:Call user32.DrawTextW(00000314,0033f714 L"500",ffffffff,0033f6ec,00000020) ret=01004ba1 0009:Ret user32.DrawTextW() retval=00000010 ret=01004ba1 0009:Call user32.SetRect(0033f6ec,00000289,0000028a,000002e3,000002a8) ret=01004bea 0009:Ret user32.SetRect() retval=00000001 ret=01004bea 0009:Call user32.DrawTextW(00000314,0033f714 L"0",ffffffff,0033f6ec,00000020) ret=01004bff 0009:Ret user32.DrawTextW() retval=00000010 ret=01004bff 0009:Call gdi32.SetBkMode(00000314,00000002) ret=01004c0c 0009:Ret gdi32.SetBkMode() retval=00000001 ret=01004c0c 0009:Call gdi32.SetTextColor(00000314,00000000) ret=01004c19 0009:Ret gdi32.SetTextColor() retval=00ffffff ret=01004c19 0009:Call user32.GetClientRect(00010030,0033f7b8) ret=01002b2e 0009:Ret user32.GetClientRect() retval=00000001 ret=01002b2e 0009:Call user32.LoadBitmapW(01000000,010012c8 L"CARDBACK") ret=010028ff 0009:Ret user32.LoadBitmapW() retval=00002c38 ret=010028ff 0009:Call gdi32.CreateCompatibleDC(00000314) ret=01002909 0009:Ret gdi32.CreateCompatibleDC() retval=00002c4c ret=01002909 0009:Call gdi32.SelectObject(00002c4c,00002c38) ret=01002917 0009:Ret gdi32.SelectObject() retval=0000006c ret=01002917 0009:Call gdi32.BitBlt(00000314,0000047d,00000258,00000047,00000060,00002c4c,00000000,00000000,00cc0020) ret=01002938 0009:Ret gdi32.BitBlt() retval=00000001 ret=01002938 0009:Call gdi32.SelectObject(00002c4c,0000006c) ret=0100293e 0009:Ret gdi32.SelectObject() retval=00002c38 ret=0100293e 0009:Call gdi32.DeleteObject(00002c38) ret=01002947 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01002947 0009:Call gdi32.DeleteDC(00002c4c) ret=0100294e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100294e 0009:Call gdi32.SetPixel(00000314,0000047d,00000258,00008000) ret=01002969 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002969 0009:Call gdi32.SetPixel(00000314,0000047e,00000258,00008000) ret=01002976 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002976 0009:Call gdi32.SetPixel(00000314,0000047d,00000259,00008000) ret=01002982 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002982 0009:Call gdi32.SetPixel(00000314,000004c3,00000258,00008000) ret=0100298f 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100298f 0009:Call gdi32.SetPixel(00000314,000004c2,00000258,00008000) ret=0100299c 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100299c 0009:Call gdi32.SetPixel(00000314,000004c3,00000259,00008000) ret=010029ab 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ab 0009:Call gdi32.SetPixel(00000314,0000047d,000002b7,00008000) ret=010029bf 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029bf 0009:Call gdi32.SetPixel(00000314,0000047e,000002b7,00008000) ret=010029d0 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029d0 0009:Call gdi32.SetPixel(00000314,0000047d,000002b6,00008000) ret=010029de 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029de 0009:Call gdi32.SetPixel(00000314,000004c3,000002b7,00008000) ret=010029ef 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ef 0009:Call gdi32.SetPixel(00000314,000004c2,000002b7,00008000) ret=01002a00 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a00 0009:Call gdi32.SetPixel(00000314,000004c3,000002b6,00008000) ret=01002a11 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a11 0009:Call user32.LoadBitmapW(01000000,010012c8 L"CARDBACK") ret=010028ff 0009:Ret user32.LoadBitmapW() retval=00002c64 ret=010028ff 0009:Call gdi32.CreateCompatibleDC(00000314) ret=01002909 0009:Ret gdi32.CreateCompatibleDC() retval=00002c78 ret=01002909 0009:Call gdi32.SelectObject(00002c78,00002c64) ret=01002917 0009:Ret gdi32.SelectObject() retval=0000006c ret=01002917 0009:Call gdi32.BitBlt(00000314,00000471,00000258,00000047,00000060,00002c78,00000000,00000000,00cc0020) ret=01002938 0009:Ret gdi32.BitBlt() retval=00000001 ret=01002938 0009:Call gdi32.SelectObject(00002c78,0000006c) ret=0100293e 0009:Ret gdi32.SelectObject() retval=00002c64 ret=0100293e 0009:Call gdi32.DeleteObject(00002c64) ret=01002947 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01002947 0009:Call gdi32.DeleteDC(00002c78) ret=0100294e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100294e 0009:Call gdi32.SetPixel(00000314,00000471,00000258,00008000) ret=01002969 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002969 0009:Call gdi32.SetPixel(00000314,00000472,00000258,00008000) ret=01002976 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002976 0009:Call gdi32.SetPixel(00000314,00000471,00000259,00008000) ret=01002982 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002982 0009:Call gdi32.SetPixel(00000314,000004b7,00000258,00008000) ret=0100298f 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100298f 0009:Call gdi32.SetPixel(00000314,000004b6,00000258,00008000) ret=0100299c 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100299c 0009:Call gdi32.SetPixel(00000314,000004b7,00000259,00008000) ret=010029ab 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ab 0009:Call gdi32.SetPixel(00000314,00000471,000002b7,00008000) ret=010029bf 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029bf 0009:Call gdi32.SetPixel(00000314,00000472,000002b7,00008000) ret=010029d0 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029d0 0009:Call gdi32.SetPixel(00000314,00000471,000002b6,00008000) ret=010029de 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029de 0009:Call gdi32.SetPixel(00000314,000004b7,000002b7,00008000) ret=010029ef 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ef 0009:Call gdi32.SetPixel(00000314,000004b6,000002b7,00008000) ret=01002a00 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a00 0009:Call gdi32.SetPixel(00000314,000004b7,000002b6,00008000) ret=01002a11 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a11 0009:Call user32.LoadBitmapW(01000000,010012c8 L"CARDBACK") ret=010028ff 0009:Ret user32.LoadBitmapW() retval=00002c90 ret=010028ff 0009:Call gdi32.CreateCompatibleDC(00000314) ret=01002909 0009:Ret gdi32.CreateCompatibleDC() retval=00002ca4 ret=01002909 0009:Call gdi32.SelectObject(00002ca4,00002c90) ret=01002917 0009:Ret gdi32.SelectObject() retval=0000006c ret=01002917 0009:Call gdi32.BitBlt(00000314,00000465,00000258,00000047,00000060,00002ca4,00000000,00000000,00cc0020) ret=01002938 0009:Ret gdi32.BitBlt() retval=00000001 ret=01002938 0009:Call gdi32.SelectObject(00002ca4,0000006c) ret=0100293e 0009:Ret gdi32.SelectObject() retval=00002c90 ret=0100293e 0009:Call gdi32.DeleteObject(00002c90) ret=01002947 0009:Ret gdi32.DeleteObject() retval=00000001 ret=01002947 0009:Call gdi32.DeleteDC(00002ca4) ret=0100294e 0009:Ret gdi32.DeleteDC() retval=00000001 ret=0100294e 0009:Call gdi32.SetPixel(00000314,00000465,00000258,00008000) ret=01002969 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002969 0009:Call gdi32.SetPixel(00000314,00000466,00000258,00008000) ret=01002976 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002976 0009:Call gdi32.SetPixel(00000314,00000465,00000259,00008000) ret=01002982 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002982 0009:Call gdi32.SetPixel(00000314,000004ab,00000258,00008000) ret=0100298f 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100298f 0009:Call gdi32.SetPixel(00000314,000004aa,00000258,00008000) ret=0100299c 0009:Ret gdi32.SetPixel() retval=00008000 ret=0100299c 0009:Call gdi32.SetPixel(00000314,000004ab,00000259,00008000) ret=010029ab 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ab 0009:Call gdi32.SetPixel(00000314,00000465,000002b7,00008000) ret=010029bf 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029bf 0009:Call gdi32.SetPixel(00000314,00000466,000002b7,00008000) ret=010029d0 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029d0 0009:Call gdi32.SetPixel(00000314,00000465,000002b6,00008000) ret=010029de 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029de 0009:Call gdi32.SetPixel(00000314,000004ab,000002b7,00008000) ret=010029ef 0009:Ret gdi32.SetPixel() retval=00008000 ret=010029ef 0009:Call gdi32.SetPixel(00000314,000004aa,000002b7,00008000) ret=01002a00 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a00 0009:Call gdi32.SetPixel(00000314,000004ab,000002b6,00008000) ret=01002a11 0009:Ret gdi32.SetPixel() retval=00008000 ret=01002a11 0009:Call user32.GetClientRect(00010030,0033f7c0) ret=01002b2e 0009:Ret user32.GetClientRect() retval=00000001 ret=01002b2e 0009:Call user32.EndPaint(00010030,0033f8d4) ret=01006ee5 0009:Ret user32.EndPaint() retval=00000001 ret=01006ee5 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_PAINT,wp=00000000,lp=00000000) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=007702a3) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,007702a3) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=007702a3) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=003302a2) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=003302a2) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=007702a4) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,007702a4) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=007702a4) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=003302a3) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=003302a3) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=007702a4) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,007702a4) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=007702a4) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02010001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02010001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02010001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_LBUTTONDOWN,wp=00000001,lp=003302a3) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_LBUTTONDOWN,wp=00000001,lp=003302a3) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=007302a0) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,007302a0) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=007302a0) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000001,lp=002f029f) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000001,lp=002f029f) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00710298) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,00710298) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00710298) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000001,lp=002d0297) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000001,lp=002d0297) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00710295) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,00710295) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00710295) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000001,lp=002d0294) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000001,lp=002d0294) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=0071028b) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,0071028b) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=0071028b) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000001,lp=002d028a) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000001,lp=002d028a) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=0071027f) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,0071027f) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=0071027f) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000001,lp=002d027e) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000001,lp=002d027e) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00730273) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,00730273) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00730273) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000001,lp=002f0272) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000001,lp=002f0272) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00770267) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,00770267) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00770267) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000001,lp=00330266) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000001,lp=00330266) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=007f0255) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,007f0255) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=007f0255) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000001,lp=003b0254) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000001,lp=003b0254) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=0089023f) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,0089023f) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=0089023f) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000001,lp=0045023e) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000001,lp=0045023e) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=0091022b) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,0091022b) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=0091022b) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000001,lp=004d022a) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000001,lp=004d022a) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00990219) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,00990219) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00990219) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000001,lp=00550218) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000001,lp=00550218) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=009f020b) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,009f020b) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=009f020b) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000001,lp=005b020a) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000001,lp=005b020a) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0019:Ret user32.GetMessageW() retval=00000001 ret=7ec5ec4b 0019:Call user32.DispatchMessageW(0033f93c) ret=7ec5ec28 0019:Call window proc 0x7ec60b80 (hwnd=0x10026,msg=WM_TIMER,wp=00000001,lp=00000000) 0019:Ret window proc 0x7ec60b80 (hwnd=0x10026,msg=WM_TIMER,wp=00000001,lp=00000000) retval=00000000 0019:Ret user32.DispatchMessageW() retval=00000000 ret=7ec5ec28 0019:Call user32.GetMessageW(0033f93c,00000000,00000000,00000000) ret=7ec5ec4b 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00a301fd) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,00a301fd) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00a301fd) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000001,lp=005f01fc) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000001,lp=005f01fc) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00a701ed) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,00a701ed) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00a701ed) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000001,lp=006301ec) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000001,lp=006301ec) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00ab01db) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,00ab01db) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00ab01db) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000001,lp=006701da) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000001,lp=006701da) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00af01bd) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,00af01bd) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00af01bd) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000001,lp=006b01bc) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000001,lp=006b01bc) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00b301b1) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,00b301b1) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00b301b1) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000001,lp=006f01b0) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000001,lp=006f01b0) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00b501a3) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,00b501a3) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00b501a3) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000001,lp=007101a2) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000001,lp=007101a2) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00b7019d) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,00b7019d) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00b7019d) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000001,lp=0073019c) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000001,lp=0073019c) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00bb0195) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,00bb0195) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00bb0195) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000001,lp=00770194) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000001,lp=00770194) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00bd018d) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,00bd018d) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00bd018d) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000001,lp=0079018c) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000001,lp=0079018c) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00be018b) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,00be018b) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00be018b) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000001,lp=007a018a) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000001,lp=007a018a) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00c00185) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,00c00185) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00c00185) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000001,lp=007c0184) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000001,lp=007c0184) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00c00183) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,00c00183) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00c00183) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000001,lp=007c0182) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000001,lp=007c0182) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00c00182) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,00c00182) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00c00182) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000001,lp=007c0181) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000001,lp=007c0181) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00c00180) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,00c00180) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00c00180) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000001,lp=007c017f) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000001,lp=007c017f) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00ba0178) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,00ba0178) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00ba0178) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000001,lp=00760177) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000001,lp=00760177) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00ba0178) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,00ba0178) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00ba0178) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02020001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02020001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02020001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_LBUTTONUP,wp=00000000,lp=00760177) 0009:Call user32.GetClientRect(00010030,0033f83c) ret=01002b53 0009:Ret user32.GetClientRect() retval=00000001 ret=01002b53 0009:Call user32.GetClientRect(00010030,0033f884) ret=01003826 0009:Ret user32.GetClientRect() retval=00000001 ret=01003826 0009:Call user32.GetClientRect(00010030,0033f82c) ret=01002b2e 0009:Ret user32.GetClientRect() retval=00000001 ret=01002b2e 0009:Call user32.PtInRect(0033f884,00000177,00000076) ret=010067c3 0009:Ret user32.PtInRect() retval=00000000 ret=010067c3 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_LBUTTONUP,wp=00000000,lp=00760177) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00b90178) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,00b90178) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00b90178) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=00750177) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=00750177) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00b9017a) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,00b9017a) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00b9017a) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=00750179) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=00750179) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00b90182) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,00b90182) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00b90182) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=00750181) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=00750181) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00bf0194) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,00bf0194) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00bf0194) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=007b0193) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=007b0193) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00cb01aa) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,00cb01aa) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00cb01aa) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=008701a9) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=008701a9) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00dd01c4) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,00dd01c4) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00dd01c4) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=009901c3) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=009901c3) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00f101de) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,00f101de) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00f101de) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=00ad01dd) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=00ad01dd) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=010701fa) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,010701fa) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=010701fa) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=00c301f9) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=00c301f9) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=01210218) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,01210218) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=01210218) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=00dd0217) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=00dd0217) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=0143023a) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,0143023a) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=0143023a) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=00ff0239) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=00ff0239) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=0169025a) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,0169025a) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=0169025a) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=01250259) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=01250259) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=018d0278) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,018d0278) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=018d0278) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=01490277) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=01490277) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=019d0286) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,019d0286) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=019d0286) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=01590285) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=01590285) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=01a7028e) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,01a7028e) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=01a7028e) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=0163028d) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=0163028d) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=01b10296) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,01b10296) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=01b10296) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=016d0295) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=016d0295) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=01bd02a2) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,01bd02a2) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=01bd02a2) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=017902a1) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=017902a1) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=01c502a6) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,01c502a6) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=01c502a6) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=018102a5) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=018102a5) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call imm32.ImmProcessKey(00010030,08090809,0000004d,00320001,00000000) ret=7eadc539 0009:Call KERNEL32.TlsGetValue(00000000) ret=7e3f02b5 0009:Ret KERNEL32.TlsGetValue() retval=00147218 ret=7e3f02b5 0009:Call user32.GetPropW(00010030,7e3f7d40 L"WineImmHIMCProperty") ret=7e3f398b 0009:Ret user32.GetPropW() retval=00000000 ret=7e3f398b 0009:Call KERNEL32.TlsGetValue(00000000) ret=7e3f02b5 0009:Ret KERNEL32.TlsGetValue() retval=00147218 ret=7e3f02b5 0009:Call user32.GetKeyboardState(0033f458) ret=7e3f3ae0 0009:Ret user32.GetKeyboardState() retval=00000001 ret=7e3f3ae0 0009:Call winex11.drv.ImeProcessKey(00147230,0000004d,00320001,0033f458) ret=7e3f3b04 0009:Ret winex11.drv.ImeProcessKey() retval=00000000 ret=7e3f3b04 0009:Ret imm32.ImmProcessKey() retval=00000000 ret=7eadc539 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_INITMENU,wp=000000f0,lp=00000000) 0009:Call user32.DefWindowProcW(00010030,00000116,000000f0,00000000) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_INITMENU,wp=000000f0,lp=00000000) retval=00000000 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_INITMENUPOPUP,wp=00000140,lp=00000000) 0009:Call user32.DefWindowProcW(00010030,00000117,00000140,00000000) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_INITMENUPOPUP,wp=00000140,lp=00000000) retval=00000000 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_COMMAND,wp=00019c4d,lp=00000000) 0009:Call user32.GetForegroundWindow() ret=01006c03 0009:Ret user32.GetForegroundWindow() retval=00010030 ret=01006c03 0009:Call user32.GetMenu(00010030) ret=01006c3f 0009:Ret user32.GetMenu() retval=000000f0 ret=01006c3f 0009:Call user32.GetDC(00010030) ret=01004e4d 0009:Ret user32.GetDC() retval=00000314 ret=01004e4d 0009:Call KERNEL32.GetModuleHandleW(00000000) ret=01004e64 0009:Ret KERNEL32.GetModuleHandleW() retval=01000000 ret=01004e64 0009:Call winmm.PlaySoundW(0000007e,01000000,00040007) ret=01004e6d 0009:Call ntdll.RtlAllocateHeap(00110000,00000008,0000001c) ret=7e7356bc 0009:Ret ntdll.RtlAllocateHeap() retval=0014b258 ret=7e7356bc 0009:Call KERNEL32.ResetEvent(00000040) ret=7e735513 0009:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e735513 0009:Call KERNEL32.SetEvent(00000038) ret=7e735520 0009:Ret KERNEL32.SetEvent() retval=00000001 ret=7e735520 0009:Call msacm32.drv.wodMessage(0000ffff,0000000c,0014b1f8,00000000,00000000) ret=7e728e1f 0009:Call winmm.waveOutReset(00008001) ret=7e0c0180 0009:Call winealsa.drv.wodMessage(00000000,0000000c,7e72ab2b,00000000,00000000) ret=7e728e1f 0009:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1b2580 0009:Ret KERNEL32.CreateEventW() retval=00000070 ret=7e1b2580 0036:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bd,0014b1f8,0014d3a0,00000000) ret=7e1c4643 0036:Call KERNEL32.IsBadReadPtr(0014b1f8,0000002c) ret=7e0bdbc9 0036:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 0036:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bd,008ceaa4,0014d3a0,00000000) ret=7e0bdf33 0036:Call KERNEL32.SetEvent(00000068) ret=7e7341f6 0034:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e73429b 0034:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 0034:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 0034:Call msacm32.drv.wodMessage(0000ffff,0000000c,0014b1f8,00000000,00000000) ret=7e728e1f 0034:Call winmm.waveOutReset(00008001) ret=7e0c0180 0034:Call winealsa.drv.wodMessage(00000000,0000000c,7e72ab2b,00000000,00000000) ret=7e728e1f 0034:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1b2580 0034:Ret KERNEL32.CreateEventW() retval=000000f4 ret=7e1b2580 0034:Call KERNEL32.WaitForSingleObject(000000f4,ffffffff) ret=7e1b2635 0036:Ret KERNEL32.SetEvent() retval=00000001 ret=7e7341f6 0036:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 0036:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 0036:fixme:wave:wodPlayer_Reset shouldn't have headers left 0036:Call KERNEL32.SetEvent(000000f4) ret=7e1c4bb8 0034:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1b2635 0034:Call KERNEL32.CloseHandle(000000f4) ret=7e1b2640 0034:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1b2640 0034:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0034:Ret winmm.waveOutReset() retval=00000000 ret=7e0c0180 0034:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0034:Call msacm32.drv.wodMessage(0000ffff,00000008,0014b1f8,0014d3a0,00000020) ret=7e728e1f 0034:Call winmm.waveOutUnprepareHeader(00008001,0014d3a0,00000020) ret=7e0c00b6 0034:Call winealsa.drv.wodMessage(00000000,00000008,7e72ab2b,0014d3a0,00000020) ret=7e728e1f 0034:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 0034:Ret winmm.waveOutUnprepareHeader() retval=00000000 ret=7e0c00b6 0034:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0034:Call msacm32.drv.wodMessage(0000ffff,00000008,0014b1f8,0014d3c0,00000020) ret=7e728e1f 0034:Call winmm.waveOutUnprepareHeader(00008001,0014d3c0,00000020) ret=7e0c00b6 0034:Call winealsa.drv.wodMessage(00000000,00000008,7e72ab2b,0014d3c0,00000020) ret=7e728e1f 0034:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 0034:Ret winmm.waveOutUnprepareHeader() retval=00000000 ret=7e0c00b6 0034:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0034:Call KERNEL32.CloseHandle(00000068) ret=7e7349fd 0034:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e7349fd 0034:Call ntdll.RtlFreeHeap(00110000,00000000,0014d3a0) ret=7e734a23 0034:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e734a23 0034:Call ntdll.RtlFreeHeap(00110000,00000000,00148cb8) ret=7e734a49 0034:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e734a49 0034:Call msacm32.drv.wodMessage(0000ffff,00000006,0014b1f8,00000000,00000000) ret=7e728e1f 0034:Call winmm.waveOutClose(00008001) ret=7e0c01a5 0034:Call winealsa.drv.wodMessage(00000000,00000006,7e72ab2b,00000000,00000000) ret=7e728e1f 0036:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c4bb8 0036:Call KERNEL32.SetEvent(00000070) ret=7e1c4f3d 0036:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c4f3d 0034:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1b2580 0034:Ret KERNEL32.CreateEventW() retval=00000068 ret=7e1b2580 0034:Call KERNEL32.WaitForSingleObject(00000068,ffffffff) ret=7e1b2635 0036:Call KERNEL32.SetEvent(00000068) ret=7e1c4ea1 0036:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c4ea1 0036:Call KERNEL32.ExitThread(00000000) ret=7e1c4eb0 0036:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) 0036:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0036:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) 0036:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0036:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) 0034:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1b2635 0034:Call KERNEL32.CloseHandle(00000068) ret=7e1b2640 0034:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1b2640 0034:Call ntdll.RtlFreeHeap(00110000,00000000,0014c7d0) ret=7e1b24dc 0034:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e1b24dc 0034:Call ntdll.RtlDeleteCriticalSection(0013cefc) ret=7e1b24fb 0034:Ret ntdll.RtlDeleteCriticalSection() retval=00000000 ret=7e1b24fb 0034:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bc,0014b1f8,00000000,00000000) ret=7e1c4643 0034:Call KERNEL32.IsBadReadPtr(0014b1f8,0000002c) ret=7e0bdbc9 0034:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 0034:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bc,008ceaa4,00000000,00000000) ret=7e0bdf33 0034:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 0034:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 0034:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0034:Call ntdll.RtlFreeHeap(00110000,00000000,0014b230) ret=7e72ae0b 0034:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e72ae0b 0034:Ret winmm.waveOutClose() retval=00000000 ret=7e0c01a5 0034:Call ntdll.RtlFreeHeap(00110000,00000000,0014b1f8) ret=7e0c01f7 0034:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e0c01f7 0034:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0034:Call ntdll.RtlFreeHeap(00110000,00000000,0014b1d0) ret=7e72ae0b 0034:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e72ae0b 0036:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0036:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) 0036:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) retval=1 0036:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) 0036:Call KERNEL32.TlsGetValue(00000000) ret=7e3f4071 0036:Ret KERNEL32.TlsGetValue() retval=00000000 ret=7e3f4071 0036:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0036:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) 0036:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0009:Call KERNEL32.WaitForSingleObject(00000070,ffffffff) ret=7e1b2635 0009:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1b2635 0009:Call KERNEL32.CloseHandle(00000070) ret=7e1b2640 0009:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1b2640 0009:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0009:Ret winmm.waveOutReset() retval=00000000 ret=7e0c0180 0009:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0034:Call ntdll.RtlFreeHeap(00110000,00000000,00148c28) ret=7e731f79 0034:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e731f79 0034:Call KERNEL32.SetEvent(00000040) ret=7e7343a0 0034:Ret KERNEL32.SetEvent() retval=00000001 ret=7e7343a0 0034:Call KERNEL32.CloseHandle(00000064) ret=7e734340 0034:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e734340 0034:Call ntdll.RtlFreeHeap(00110000,00000000,0014bef8) ret=7e734360 0034:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e734360 0034:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) 0034:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0034:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) 0034:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0034:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) 0034:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0034:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) 0034:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) retval=1 0034:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) 0034:Call KERNEL32.TlsGetValue(00000000) ret=7e3f4071 0034:Ret KERNEL32.TlsGetValue() retval=00000000 ret=7e3f4071 0034:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0034:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) 0034:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0009:Call KERNEL32.WaitForSingleObject(00000040,ffffffff) ret=7e73555a 0009:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e73555a 0009:Call KERNEL32.ResetEvent(00000038) ret=7e735572 0009:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e735572 0009:Call KERNEL32.CreateThread(00000000,00000000,7e7348a0,0014b258,00000000,0033f448) ret=7e73560c 0038:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) 0038:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0038:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) 0038:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0038:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) 0038:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) retval=1 0038:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) 0038:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0038:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) 0038:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0038:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) 0038:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 0038:Starting thread proc 0x7e7348a0 (arg=0x14b258) 0038:Call KERNEL32.FindResourceW(01000000,0000007e,7e741bde L"WAVE") ret=7e734ca3 0038:Ret KERNEL32.FindResourceW() retval=01014c60 ret=7e734ca3 0038:Call KERNEL32.LoadResource(01000000,01014c60) ret=7e734cb9 0038:Ret KERNEL32.LoadResource() retval=0104f710 ret=7e734cb9 0038:Call KERNEL32.LockResource(0104f710) ret=7e734cce 0038:Ret KERNEL32.LockResource() retval=0104f710 ret=7e734cce 0038:Call KERNEL32.FreeResource(0104f710) ret=7e734ce9 0038:Ret KERNEL32.FreeResource() retval=00000000 ret=7e734ce9 0038:Call ntdll.RtlAllocateHeap(00110000,00000008,0000005c) ret=7e733960 0038:Ret ntdll.RtlAllocateHeap() retval=00148c28 ret=7e733960 0038:Call KERNEL32.GetFileSize(ffffffff,00000000) ret=7e733ab9 0038:Ret KERNEL32.GetFileSize() retval=ffffffff ret=7e733ab9 0038:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7e733cf0 0038:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e733cf0 0038:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7e734e1c 0038:Ret ntdll.RtlAllocateHeap() retval=00148cb8 ret=7e734e1c 0038:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e734f1f 0038:Ret KERNEL32.CreateEventW() retval=00000068 ret=7e734f1f 0038:Call ntdll.RtlAllocateHeap(00110000,00000008,0000001c) ret=7e72abbe 0038:Ret ntdll.RtlAllocateHeap() retval=0014b280 ret=7e72abbe 0038:Call msacm32.drv.wodMessage(0000ffff,00000005,007ce918,007ce970,00030000) ret=7e728e1f 0038:Call ntdll.RtlAllocateHeap(00110000,00000000,0000002c) ret=7e0bfd8c 0038:Ret ntdll.RtlAllocateHeap() retval=0014b1d0 ret=7e0bfd8c 0038:Call winmm.waveOutGetNumDevs() ret=7e0bfdb5 0038:Ret winmm.waveOutGetNumDevs() retval=00000002 ret=7e0bfdb5 0038:Call winmm.waveOutOpen(0014b1d8,00000000,00148cb8,7e0bde60,0014b1d0,00030008) ret=7e0c0313 0038:Call ntdll.RtlAllocateHeap(00110000,00000008,0000001c) ret=7e72abbe 0038:Ret ntdll.RtlAllocateHeap() retval=0014b208 ret=7e72abbe 0038:Call winealsa.drv.wodMessage(00000000,00000005,007ce5b8,007ce610,00030008) ret=7e728e1f 0038:Call ntdll.RtlAllocateHeap(00110000,00000008,00000068) ret=7e1c6c82 0038:Ret ntdll.RtlAllocateHeap() retval=0014bef8 ret=7e1c6c82 0038:Call ntdll.RtlAllocateHeap(00110000,00000008,00000300) ret=7e1b2459 0038:Ret ntdll.RtlAllocateHeap() retval=0014c7d0 ret=7e1b2459 0038:Call KERNEL32.InitializeCriticalSection(0013cefc) ret=7e1b2469 0038:Ret KERNEL32.InitializeCriticalSection() retval=00000001 ret=7e1b2469 0038:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1c73ab 0038:Ret KERNEL32.CreateEventW() retval=00000070 ret=7e1c73ab 0038:Call KERNEL32.CreateThread(00000000,00000000,7e1c5570,00000000,00000000,0013cedc) ret=7e1c73ef 0009:Ret KERNEL32.CreateThread() retval=00000064 ret=7e73560c 0009:Call KERNEL32.SetThreadPriority(00000064,0000000f) ret=7e73562d 0009:Ret KERNEL32.SetThreadPriority() retval=00000001 ret=7e73562d 0009:Ret winmm.PlaySoundW() retval=00000001 ret=01004e6d 0009:Call user32.InvertRect(00000314,0033f500) ret=01004e95 0009:Ret user32.InvertRect() retval=00000001 ret=01004e95 0009:Call gdi32.GdiFlush() ret=01004e9b 0009:Ret gdi32.GdiFlush() retval=00000001 ret=01004e9b 0009:Call KERNEL32.Sleep(000000fa) ret=01004ea6 003a:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) 003a:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 003a:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) 003a:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 003a:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) 003a:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) retval=1 003a:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) 003a:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 003a:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) 003a:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 003a:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) 003a:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 003a:Starting thread proc 0x7e1c5570 (arg=(nil)) 003a:Call KERNEL32.SetEvent(00000070) ret=7e1c55aa 003a:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c55aa 0038:Ret KERNEL32.CreateThread() retval=000000f4 ret=7e1c73ef 0038:Call KERNEL32.SetThreadPriority(000000f4,0000000f) ret=7e1c7413 0038:Ret KERNEL32.SetThreadPriority() retval=00000001 ret=7e1c7413 0038:Call KERNEL32.WaitForSingleObject(00000070,ffffffff) ret=7e1c742f 0038:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1c742f 0038:Call KERNEL32.CloseHandle(00000070) ret=7e1c7443 0038:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1c7443 0038:Call ntdll.RtlFreeHeap(00110000,00000000,0014bef8) ret=7e1c7479 0038:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e1c7479 0038:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bb,0014b1d0,00000000,00000000) ret=7e1c4643 0038:Call KERNEL32.IsBadReadPtr(0014b1d0,0000002c) ret=7e0bdbc9 0038:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 0038:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bb,007ceaa4,00000000,00000000) ret=7e0bdf33 0038:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 0038:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 0038:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0038:Ret winmm.waveOutOpen() retval=00000000 ret=7e0c0313 0038:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0038:Call ntdll.RtlAllocateHeap(00110000,00000000,000039ac) ret=7e73520d 0038:Ret ntdll.RtlAllocateHeap() retval=0014d3a0 ret=7e73520d 0038:Call msacm32.drv.wodMessage(0000ffff,00000007,0014b1d0,0014d3a0,00000020) ret=7e728e1f 0038:Call winmm.waveOutPrepareHeader(00008001,0014d3a0,00000020) ret=7e0c09d8 0038:Call winealsa.drv.wodMessage(00000000,00000007,7e72ab2b,0014d3a0,00000020) ret=7e728e1f 0038:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 0038:Ret winmm.waveOutPrepareHeader() retval=00000000 ret=7e0c09d8 0038:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0038:Call msacm32.drv.wodMessage(0000ffff,00000007,0014b1d0,0014d3c0,00000020) ret=7e728e1f 0038:Call winmm.waveOutPrepareHeader(00008001,0014d3c0,00000020) ret=7e0c09d8 0038:Call winealsa.drv.wodMessage(00000000,00000007,7e72ab2b,0014d3c0,00000020) ret=7e728e1f 0038:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 0038:Ret winmm.waveOutPrepareHeader() retval=00000000 ret=7e0c09d8 0038:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0038:Call KERNEL32.WaitForSingleObject(00000038,00000000) ret=7e735343 0038:Ret KERNEL32.WaitForSingleObject() retval=00000102 ret=7e735343 0038:Call msacm32.drv.wodMessage(0000ffff,00000009,0014b1d0,0014d3a0,00000020) ret=7e728e1f 0038:Call winmm.waveOutWrite(00008001,0014d3a0,00000020) ret=7e0c09b5 0038:Call winealsa.drv.wodMessage(00000000,00000009,7e72ab2b,0014d3a0,00000020) ret=7e728e1f 0038:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0038:Ret winmm.waveOutWrite() retval=00000000 ret=7e0c09b5 0038:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0038:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 0038:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 0038:Call KERNEL32.WaitForSingleObject(00000038,00000000) ret=7e735343 0038:Ret KERNEL32.WaitForSingleObject() retval=00000102 ret=7e735343 0038:Call msacm32.drv.wodMessage(0000ffff,00000009,0014b1d0,0014d3c0,00000020) ret=7e728e1f 0038:Call winmm.waveOutWrite(00008001,0014d3c0,00000020) ret=7e0c09b5 0038:Call winealsa.drv.wodMessage(00000000,00000009,7e72ab2b,0014d3c0,00000020) ret=7e728e1f 0038:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0038:Ret winmm.waveOutWrite() retval=00000000 ret=7e0c09b5 0038:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0038:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 0038:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 0038:Call KERNEL32.WaitForSingleObject(00000068,ffffffff) ret=7e73429b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=01004ea6 0009:Call user32.InvertRect(00000314,0033f500) ret=01004eaf 0009:Ret user32.InvertRect() retval=00000001 ret=01004eaf 0009:Call user32.InvertRect(00000314,0033f500) ret=01004ec9 0009:Ret user32.InvertRect() retval=00000001 ret=01004ec9 0009:Call gdi32.GdiFlush() ret=01004ecf 0009:Ret gdi32.GdiFlush() retval=00000001 ret=01004ecf 0009:Call KERNEL32.Sleep(000000fa) ret=01004eda 003a:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bd,0014b1d0,0014d3a0,00000000) ret=7e1c4643 003a:Call KERNEL32.IsBadReadPtr(0014b1d0,0000002c) ret=7e0bdbc9 003a:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 003a:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bd,007ceaa4,0014d3a0,00000000) ret=7e0bdf33 003a:Call KERNEL32.SetEvent(00000068) ret=7e7341f6 003a:Ret KERNEL32.SetEvent() retval=00000001 ret=7e7341f6 003a:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 003a:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 0038:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e73429b 0038:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 0038:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 0038:Call KERNEL32.WaitForSingleObject(00000038,00000000) ret=7e735343 0038:Ret KERNEL32.WaitForSingleObject() retval=00000102 ret=7e735343 0038:Call msacm32.drv.wodMessage(0000ffff,00000009,0014b1d0,0014d3a0,00000020) ret=7e728e1f 0038:Call winmm.waveOutWrite(00008001,0014d3a0,00000020) ret=7e0c09b5 0038:Call winealsa.drv.wodMessage(00000000,00000009,7e72ab2b,0014d3a0,00000020) ret=7e728e1f 0038:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0038:Ret winmm.waveOutWrite() retval=00000000 ret=7e0c09b5 0038:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0038:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 0038:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 0038:Call KERNEL32.WaitForSingleObject(00000068,ffffffff) ret=7e73429b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=01004eda 0009:Call user32.InvertRect(00000314,0033f500) ret=01004ee3 0009:Ret user32.InvertRect() retval=00000001 ret=01004ee3 0009:Call user32.ReleaseDC(00010030,00000314) ret=01004eee 0009:Ret user32.ReleaseDC() retval=00000001 ret=01004eee 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_COMMAND,wp=00019c4d,lp=00000000) retval=00000000 0009:Ret user32.TranslateAcceleratorW() retval=00000001 ret=01007340 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call imm32.ImmProcessKey(00010030,08090809,0000004d,c0320001,00000000) ret=7eadc539 0009:Call KERNEL32.TlsGetValue(00000000) ret=7e3f02b5 0009:Ret KERNEL32.TlsGetValue() retval=00147218 ret=7e3f02b5 0009:Call user32.GetPropW(00010030,7e3f7d40 L"WineImmHIMCProperty") ret=7e3f398b 0009:Ret user32.GetPropW() retval=00000000 ret=7e3f398b 0009:Call KERNEL32.TlsGetValue(00000000) ret=7e3f02b5 0009:Ret KERNEL32.TlsGetValue() retval=00147218 ret=7e3f02b5 0009:Call user32.GetKeyboardState(0033f458) ret=7e3f3ae0 0009:Ret user32.GetKeyboardState() retval=00000001 ret=7e3f3ae0 0009:Call winex11.drv.ImeProcessKey(00147230,0000004d,c0320001,0033f458) ret=7e3f3b04 0009:Ret winex11.drv.ImeProcessKey() retval=00000000 ret=7e3f3b04 0009:Ret imm32.ImmProcessKey() retval=00000000 ret=7eadc539 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000001 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_KEYUP,wp=0000004d,lp=c0320001) 0009:Call user32.DefWindowProcW(00010030,00000101,0000004d,c0320001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_KEYUP,wp=0000004d,lp=c0320001) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=025302a2) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,025302a2) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=025302a2) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=020f02a1) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=020f02a1) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=026b02a0) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,026b02a0) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=026b02a0) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=0227029f) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=0227029f) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=0281029c) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,0281029c) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=0281029c) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=023d029b) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=023d029b) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=0299029a) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,0299029a) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=0299029a) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02550299) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02550299) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02a3029a) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02a3029a) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02a3029a) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=025f0299) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=025f0299) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02ab029a) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02ab029a) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02ab029a) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02670299) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02670299) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02b50298) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02b50298) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02b50298) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02710297) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02710297) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02c90296) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02c90296) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02c90296) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02850295) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02850295) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02d70294) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02d70294) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02d70294) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02930293) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02930293) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02e30292) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02e30292) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02e30292) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=029f0291) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=029f0291) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02eb0290) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02eb0290) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02eb0290) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02a7028f) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02a7028f) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02f30290) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02f30290) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02f30290) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02af028f) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02af028f) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02f9028e) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02f9028e) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02f9028e) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02b5028d) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02b5028d) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02ff028c) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02ff028c) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02ff028c) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02bb028b) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02bb028b) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=0301028c) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,0301028c) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=0301028c) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02bd028b) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02bd028b) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=0303028b) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,0303028b) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=0303028b) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02bf028a) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02bf028a) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 003a:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bd,0014b1d0,0014d3c0,00000000) ret=7e1c4643 003a:Call KERNEL32.IsBadReadPtr(0014b1d0,0000002c) ret=7e0bdbc9 003a:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 003a:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bd,007ceaa4,0014d3c0,00000000) ret=7e0bdf33 003a:Call KERNEL32.SetEvent(00000068) ret=7e7341f6 003a:Ret KERNEL32.SetEvent() retval=00000001 ret=7e7341f6 003a:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 003a:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 0038:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e73429b 0038:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 0038:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 0038:Call KERNEL32.WaitForSingleObject(00000038,00000000) ret=7e735343 0038:Ret KERNEL32.WaitForSingleObject() retval=00000102 ret=7e735343 0038:Call msacm32.drv.wodMessage(0000ffff,00000009,0014b1d0,0014d3c0,00000020) ret=7e728e1f 0038:Call winmm.waveOutWrite(00008001,0014d3c0,00000020) ret=7e0c09b5 0038:Call winealsa.drv.wodMessage(00000000,00000009,7e72ab2b,0014d3c0,00000020) ret=7e728e1f 0038:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0038:Ret winmm.waveOutWrite() retval=00000000 ret=7e0c09b5 0038:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0038:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 0038:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 0038:Call KERNEL32.WaitForSingleObject(00000068,ffffffff) ret=7e73429b 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=0305028b) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,0305028b) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=0305028b) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02c1028a) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02c1028a) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0019:Ret user32.GetMessageW() retval=00000001 ret=7ec5ec4b 0019:Call user32.DispatchMessageW(0033f93c) ret=7ec5ec28 0019:Call window proc 0x7ec60b80 (hwnd=0x10026,msg=WM_TIMER,wp=00000001,lp=00000000) 0019:Ret window proc 0x7ec60b80 (hwnd=0x10026,msg=WM_TIMER,wp=00000001,lp=00000000) retval=00000000 0019:Ret user32.DispatchMessageW() retval=00000000 ret=7ec5ec28 0019:Call user32.GetMessageW(0033f93c,00000000,00000000,00000000) ret=7ec5ec4b 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=0305028b) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,0305028b) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=0305028b) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02c1028a) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02c1028a) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=0303028c) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,0303028c) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=0303028c) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02bf028b) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02bf028b) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=0300028c) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,0300028c) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=0300028c) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02bc028b) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02bc028b) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02fe028d) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02fe028d) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02fe028d) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02ba028c) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02ba028c) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02fc028e) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02fc028e) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02fc028e) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02b8028d) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02b8028d) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02fa028e) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02fa028e) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02fa028e) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02b6028d) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02b6028d) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02f9028e) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02f9028e) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02f9028e) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02b5028d) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02b5028d) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02f8028f) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02f8028f) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02f8028f) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02b4028e) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02b4028e) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02f70290) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02f70290) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02f70290) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02b3028f) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02b3028f) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02f50290) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02f50290) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02f50290) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02b1028f) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02b1028f) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02ef0292) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02ef0292) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02ef0292) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02ab0291) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02ab0291) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02ed0293) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02ed0293) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02ed0293) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02a90292) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02a90292) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02e50293) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02e50293) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02e50293) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02a10292) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=02a10292) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02e20293) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02e20293) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02e20293) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=029e0292) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=029e0292) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 003a:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bd,0014b1d0,0014d3a0,00000000) ret=7e1c4643 003a:Call KERNEL32.IsBadReadPtr(0014b1d0,0000002c) ret=7e0bdbc9 003a:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 003a:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bd,007ceaa4,0014d3a0,00000000) ret=7e0bdf33 003a:Call KERNEL32.SetEvent(00000068) ret=7e7341f6 0038:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e73429b 0038:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 0038:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 0038:Call KERNEL32.WaitForSingleObject(00000038,00000000) ret=7e735343 0038:Ret KERNEL32.WaitForSingleObject() retval=00000102 ret=7e735343 0038:Call msacm32.drv.wodMessage(0000ffff,00000009,0014b1d0,0014d3a0,00000020) ret=7e728e1f 0038:Call winmm.waveOutWrite(00008001,0014d3a0,00000020) ret=7e0c09b5 0038:Call winealsa.drv.wodMessage(00000000,00000009,7e72ab2b,0014d3a0,00000020) ret=7e728e1f 0038:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0038:Ret winmm.waveOutWrite() retval=00000000 ret=7e0c09b5 0038:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0038:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 0038:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 0038:Call KERNEL32.WaitForSingleObject(00000068,ffffffff) ret=7e73429b 003a:Ret KERNEL32.SetEvent() retval=00000001 ret=7e7341f6 003a:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 003a:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02e20293) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02e20293) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02e20293) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02010001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02010001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02010001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_LBUTTONDOWN,wp=00000001,lp=029e0292) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_LBUTTONDOWN,wp=00000001,lp=029e0292) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02e20293) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,02e20293) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=02e20293) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02020001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02020001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02020001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_LBUTTONUP,wp=00000000,lp=029e0292) 0009:Call user32.GetClientRect(00010030,0033f83c) ret=01002b53 0009:Ret user32.GetClientRect() retval=00000001 ret=01002b53 0009:Call user32.GetClientRect(00010030,0033f884) ret=01003826 0009:Ret user32.GetClientRect() retval=00000001 ret=01003826 0009:Call user32.GetClientRect(00010030,0033f82c) ret=01002b2e 0009:Ret user32.GetClientRect() retval=00000001 ret=01002b2e 0009:Call user32.PtInRect(0033f884,00000292,0000029e) ret=010067c3 0009:Ret user32.PtInRect() retval=00000001 ret=010067c3 0009:Call user32.PostMessageW(00010030,00000111,00009c4d,00000000) ret=010067d8 0009:Ret user32.PostMessageW() retval=00000001 ret=010067d8 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_LBUTTONUP,wp=00000000,lp=029e0292) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_COMMAND,wp=00009c4d,lp=00000000) 0009:Call user32.GetForegroundWindow() ret=01006c03 0009:Ret user32.GetForegroundWindow() retval=00010030 ret=01006c03 0009:Call user32.GetMenu(00010030) ret=01006c3f 0009:Ret user32.GetMenu() retval=000000f0 ret=01006c3f 0009:Call user32.GetDC(00010030) ret=01004e4d 0009:Ret user32.GetDC() retval=00000314 ret=01004e4d 0009:Call KERNEL32.GetModuleHandleW(00000000) ret=01004e64 0009:Ret KERNEL32.GetModuleHandleW() retval=01000000 ret=01004e64 0009:Call winmm.PlaySoundW(0000007e,01000000,00040007) ret=01004e6d 0009:Call ntdll.RtlAllocateHeap(00110000,00000008,0000001c) ret=7e7356bc 0009:Ret ntdll.RtlAllocateHeap() retval=0014bef8 ret=7e7356bc 0009:Call KERNEL32.ResetEvent(00000040) ret=7e735513 0009:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e735513 0009:Call KERNEL32.SetEvent(00000038) ret=7e735520 0009:Ret KERNEL32.SetEvent() retval=00000001 ret=7e735520 0009:Call msacm32.drv.wodMessage(0000ffff,0000000c,0014b1d0,00000000,00000000) ret=7e728e1f 0009:Call winmm.waveOutReset(00008001) ret=7e0c0180 0009:Call winealsa.drv.wodMessage(00000000,0000000c,7e72ab2b,00000000,00000000) ret=7e728e1f 0009:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1b2580 0009:Ret KERNEL32.CreateEventW() retval=00000070 ret=7e1b2580 0009:Call KERNEL32.WaitForSingleObject(00000070,ffffffff) ret=7e1b2635 003a:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bd,0014b1d0,0014d3c0,00000000) ret=7e1c4643 003a:Call KERNEL32.IsBadReadPtr(0014b1d0,0000002c) ret=7e0bdbc9 003a:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 003a:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bd,007ceaa4,0014d3c0,00000000) ret=7e0bdf33 003a:Call KERNEL32.SetEvent(00000068) ret=7e7341f6 0038:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e73429b 0038:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 0038:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 0038:Call KERNEL32.WaitForSingleObject(00000038,00000000) ret=7e735343 0038:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e735343 0038:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 0038:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 0038:Call KERNEL32.WaitForSingleObject(00000068,ffffffff) ret=7e73429b 003a:Ret KERNEL32.SetEvent() retval=00000001 ret=7e7341f6 003a:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 003a:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 003a:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bd,0014b1d0,0014d3a0,00000000) ret=7e1c4643 003a:Call KERNEL32.IsBadReadPtr(0014b1d0,0000002c) ret=7e0bdbc9 003a:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 003a:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bd,007ceaa4,0014d3a0,00000000) ret=7e0bdf33 003a:Call KERNEL32.SetEvent(00000068) ret=7e7341f6 0038:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e73429b 0038:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 0038:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 0038:Call msacm32.drv.wodMessage(0000ffff,0000000c,0014b1d0,00000000,00000000) ret=7e728e1f 0038:Call winmm.waveOutReset(00008001) ret=7e0c0180 0038:Call winealsa.drv.wodMessage(00000000,0000000c,7e72ab2b,00000000,00000000) ret=7e728e1f 0038:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1b2580 0038:Ret KERNEL32.CreateEventW() retval=000000f8 ret=7e1b2580 0038:Call KERNEL32.WaitForSingleObject(000000f8,ffffffff) ret=7e1b2635 003a:Ret KERNEL32.SetEvent() retval=00000001 ret=7e7341f6 003a:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 003a:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 003a:fixme:wave:wodPlayer_Reset shouldn't have headers left 003a:Call KERNEL32.SetEvent(000000f8) ret=7e1c4bb8 0038:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1b2635 0038:Call KERNEL32.CloseHandle(000000f8) ret=7e1b2640 0038:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1b2640 0038:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0038:Ret winmm.waveOutReset() retval=00000000 ret=7e0c0180 0038:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0038:Call msacm32.drv.wodMessage(0000ffff,00000008,0014b1d0,0014d3a0,00000020) ret=7e728e1f 0038:Call winmm.waveOutUnprepareHeader(00008001,0014d3a0,00000020) ret=7e0c00b6 0038:Call winealsa.drv.wodMessage(00000000,00000008,7e72ab2b,0014d3a0,00000020) ret=7e728e1f 0038:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 0038:Ret winmm.waveOutUnprepareHeader() retval=00000000 ret=7e0c00b6 0038:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0038:Call msacm32.drv.wodMessage(0000ffff,00000008,0014b1d0,0014d3c0,00000020) ret=7e728e1f 0038:Call winmm.waveOutUnprepareHeader(00008001,0014d3c0,00000020) ret=7e0c00b6 0038:Call winealsa.drv.wodMessage(00000000,00000008,7e72ab2b,0014d3c0,00000020) ret=7e728e1f 0038:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 0038:Ret winmm.waveOutUnprepareHeader() retval=00000000 ret=7e0c00b6 0038:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0038:Call KERNEL32.CloseHandle(00000068) ret=7e7349fd 0038:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e7349fd 0038:Call ntdll.RtlFreeHeap(00110000,00000000,0014d3a0) ret=7e734a23 0038:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e734a23 0038:Call ntdll.RtlFreeHeap(00110000,00000000,00148cb8) ret=7e734a49 0038:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e734a49 0038:Call msacm32.drv.wodMessage(0000ffff,00000006,0014b1d0,00000000,00000000) ret=7e728e1f 0038:Call winmm.waveOutClose(00008001) ret=7e0c01a5 0038:Call winealsa.drv.wodMessage(00000000,00000006,7e72ab2b,00000000,00000000) ret=7e728e1f 003a:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c4bb8 003a:Call KERNEL32.SetEvent(00000070) ret=7e1c4f3d 0038:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1b2580 0038:Ret KERNEL32.CreateEventW() retval=00000068 ret=7e1b2580 0038:Call KERNEL32.WaitForSingleObject(00000068,ffffffff) ret=7e1b2635 0009:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1b2635 0009:Call KERNEL32.CloseHandle(00000070) ret=7e1b2640 0009:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1b2640 0009:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0009:Ret winmm.waveOutReset() retval=00000000 ret=7e0c0180 0009:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0009:Call KERNEL32.WaitForSingleObject(00000040,ffffffff) ret=7e73555a 003a:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c4f3d 003a:Call KERNEL32.SetEvent(00000068) ret=7e1c4ea1 0038:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1b2635 0038:Call KERNEL32.CloseHandle(00000068) ret=7e1b2640 0038:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1b2640 0038:Call ntdll.RtlFreeHeap(00110000,00000000,0014c7d0) ret=7e1b24dc 0038:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e1b24dc 0038:Call ntdll.RtlDeleteCriticalSection(0013cefc) ret=7e1b24fb 0038:Ret ntdll.RtlDeleteCriticalSection() retval=00000000 ret=7e1b24fb 0038:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bc,0014b1d0,00000000,00000000) ret=7e1c4643 0038:Call KERNEL32.IsBadReadPtr(0014b1d0,0000002c) ret=7e0bdbc9 0038:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 0038:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bc,007ceaa4,00000000,00000000) ret=7e0bdf33 0038:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 0038:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 0038:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 0038:Call ntdll.RtlFreeHeap(00110000,00000000,0014b208) ret=7e72ae0b 0038:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e72ae0b 0038:Ret winmm.waveOutClose() retval=00000000 ret=7e0c01a5 0038:Call ntdll.RtlFreeHeap(00110000,00000000,0014b1d0) ret=7e0c01f7 0038:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e0c01f7 0038:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 0038:Call ntdll.RtlFreeHeap(00110000,00000000,0014b280) ret=7e72ae0b 0038:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e72ae0b 0038:Call ntdll.RtlFreeHeap(00110000,00000000,00148c28) ret=7e731f79 0038:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e731f79 0038:Call KERNEL32.SetEvent(00000040) ret=7e7343a0 0038:Ret KERNEL32.SetEvent() retval=00000001 ret=7e7343a0 0038:Call KERNEL32.CloseHandle(00000064) ret=7e734340 0038:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e734340 0038:Call ntdll.RtlFreeHeap(00110000,00000000,0014b258) ret=7e734360 0038:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e734360 0038:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) 0038:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0038:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) 0038:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0038:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) 0038:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0038:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) 0038:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) retval=1 0038:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) 0038:Call KERNEL32.TlsGetValue(00000000) ret=7e3f4071 0038:Ret KERNEL32.TlsGetValue() retval=00000000 ret=7e3f4071 0038:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0038:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) 0038:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0009:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e73555a 0009:Call KERNEL32.ResetEvent(00000038) ret=7e735572 0009:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e735572 0009:Call KERNEL32.CreateThread(00000000,00000000,7e7348a0,0014bef8,00000000,0033f5b8) ret=7e73560c 003a:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c4ea1 003a:Call KERNEL32.ExitThread(00000000) ret=7e1c4eb0 003a:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) 003a:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 003a:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) 003a:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) retval=1 003a:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) 003a:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 003a:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) 003a:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) retval=1 003a:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) 003a:Call KERNEL32.TlsGetValue(00000000) ret=7e3f4071 003a:Ret KERNEL32.TlsGetValue() retval=00000000 ret=7e3f4071 003a:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 003a:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) 003a:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 003c:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) 003c:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 003c:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) 003c:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 003c:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) 003c:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) retval=1 003c:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) 003c:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 003c:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) 003c:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 003c:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) 003c:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 003c:Starting thread proc 0x7e7348a0 (arg=0x14bef8) 003c:Call KERNEL32.FindResourceW(01000000,0000007e,7e741bde L"WAVE") ret=7e734ca3 003c:Ret KERNEL32.FindResourceW() retval=01014c60 ret=7e734ca3 003c:Call KERNEL32.LoadResource(01000000,01014c60) ret=7e734cb9 003c:Ret KERNEL32.LoadResource() retval=0104f710 ret=7e734cb9 003c:Call KERNEL32.LockResource(0104f710) ret=7e734cce 003c:Ret KERNEL32.LockResource() retval=0104f710 ret=7e734cce 003c:Call KERNEL32.FreeResource(0104f710) ret=7e734ce9 003c:Ret KERNEL32.FreeResource() retval=00000000 ret=7e734ce9 003c:Call ntdll.RtlAllocateHeap(00110000,00000008,0000005c) ret=7e733960 003c:Ret ntdll.RtlAllocateHeap() retval=00148c28 ret=7e733960 003c:Call KERNEL32.GetFileSize(ffffffff,00000000) ret=7e733ab9 003c:Ret KERNEL32.GetFileSize() retval=ffffffff ret=7e733ab9 003c:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7e733cf0 003c:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e733cf0 003c:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=7e734e1c 003c:Ret ntdll.RtlAllocateHeap() retval=00148cb8 ret=7e734e1c 003c:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e734f1f 003c:Ret KERNEL32.CreateEventW() retval=00000068 ret=7e734f1f 003c:Call ntdll.RtlAllocateHeap(00110000,00000008,0000001c) ret=7e72abbe 003c:Ret ntdll.RtlAllocateHeap() retval=0014b1d0 ret=7e72abbe 003c:Call msacm32.drv.wodMessage(0000ffff,00000005,008ce918,008ce970,00030000) ret=7e728e1f 003c:Call ntdll.RtlAllocateHeap(00110000,00000000,0000002c) ret=7e0bfd8c 003c:Ret ntdll.RtlAllocateHeap() retval=0014b1f8 ret=7e0bfd8c 003c:Call winmm.waveOutGetNumDevs() ret=7e0bfdb5 003c:Ret winmm.waveOutGetNumDevs() retval=00000002 ret=7e0bfdb5 003c:Call winmm.waveOutOpen(0014b200,00000000,00148cb8,7e0bde60,0014b1f8,00030008) ret=7e0c0313 003c:Call ntdll.RtlAllocateHeap(00110000,00000008,0000001c) ret=7e72abbe 003c:Ret ntdll.RtlAllocateHeap() retval=0014b230 ret=7e72abbe 003c:Call winealsa.drv.wodMessage(00000000,00000005,008ce5b8,008ce610,00030008) ret=7e728e1f 003c:Call ntdll.RtlAllocateHeap(00110000,00000008,00000068) ret=7e1c6c82 003c:Ret ntdll.RtlAllocateHeap() retval=0014b258 ret=7e1c6c82 003c:Call ntdll.RtlAllocateHeap(00110000,00000008,00000300) ret=7e1b2459 003c:Ret ntdll.RtlAllocateHeap() retval=0014c7d0 ret=7e1b2459 003c:Call KERNEL32.InitializeCriticalSection(0013cefc) ret=7e1b2469 003c:Ret KERNEL32.InitializeCriticalSection() retval=00000001 ret=7e1b2469 003c:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1c73ab 003c:Ret KERNEL32.CreateEventW() retval=00000070 ret=7e1c73ab 003c:Call KERNEL32.CreateThread(00000000,00000000,7e1c5570,00000000,00000000,0013cedc) ret=7e1c73ef 0009:Ret KERNEL32.CreateThread() retval=00000064 ret=7e73560c 0009:Call KERNEL32.SetThreadPriority(00000064,0000000f) ret=7e73562d 0009:Ret KERNEL32.SetThreadPriority() retval=00000001 ret=7e73562d 0009:Ret winmm.PlaySoundW() retval=00000001 ret=01004e6d 0009:Call user32.InvertRect(00000314,0033f670) ret=01004e95 0009:Ret user32.InvertRect() retval=00000001 ret=01004e95 0009:Call gdi32.GdiFlush() ret=01004e9b 0009:Ret gdi32.GdiFlush() retval=00000001 ret=01004e9b 0009:Call KERNEL32.Sleep(000000fa) ret=01004ea6 003e:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) 003e:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 003e:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) 003e:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 003e:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) 003e:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_ATTACH,res=(nil)) retval=1 003e:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) 003e:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 003e:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) 003e:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 003e:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) 003e:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 003e:Starting thread proc 0x7e1c5570 (arg=(nil)) 003e:Call KERNEL32.SetEvent(00000070) ret=7e1c55aa 003e:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c55aa 003c:Ret KERNEL32.CreateThread() retval=000000f8 ret=7e1c73ef 003c:Call KERNEL32.SetThreadPriority(000000f8,0000000f) ret=7e1c7413 003c:Ret KERNEL32.SetThreadPriority() retval=00000001 ret=7e1c7413 003c:Call KERNEL32.WaitForSingleObject(00000070,ffffffff) ret=7e1c742f 003c:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1c742f 003c:Call KERNEL32.CloseHandle(00000070) ret=7e1c7443 003c:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1c7443 003c:Call ntdll.RtlFreeHeap(00110000,00000000,0014b258) ret=7e1c7479 003c:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e1c7479 003c:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bb,0014b1f8,00000000,00000000) ret=7e1c4643 003c:Call KERNEL32.IsBadReadPtr(0014b1f8,0000002c) ret=7e0bdbc9 003c:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 003c:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bb,008ceaa4,00000000,00000000) ret=7e0bdf33 003c:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 003c:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 003c:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 003c:Ret winmm.waveOutOpen() retval=00000000 ret=7e0c0313 003c:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 003c:Call ntdll.RtlAllocateHeap(00110000,00000000,000039ac) ret=7e73520d 003c:Ret ntdll.RtlAllocateHeap() retval=0014d3a0 ret=7e73520d 003c:Call msacm32.drv.wodMessage(0000ffff,00000007,0014b1f8,0014d3a0,00000020) ret=7e728e1f 003c:Call winmm.waveOutPrepareHeader(00008001,0014d3a0,00000020) ret=7e0c09d8 003c:Call winealsa.drv.wodMessage(00000000,00000007,7e72ab2b,0014d3a0,00000020) ret=7e728e1f 003c:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 003c:Ret winmm.waveOutPrepareHeader() retval=00000000 ret=7e0c09d8 003c:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 003c:Call msacm32.drv.wodMessage(0000ffff,00000007,0014b1f8,0014d3c0,00000020) ret=7e728e1f 003c:Call winmm.waveOutPrepareHeader(00008001,0014d3c0,00000020) ret=7e0c09d8 003c:Call winealsa.drv.wodMessage(00000000,00000007,7e72ab2b,0014d3c0,00000020) ret=7e728e1f 003c:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 003c:Ret winmm.waveOutPrepareHeader() retval=00000000 ret=7e0c09d8 003c:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 003c:Call KERNEL32.WaitForSingleObject(00000038,00000000) ret=7e735343 003c:Ret KERNEL32.WaitForSingleObject() retval=00000102 ret=7e735343 003c:Call msacm32.drv.wodMessage(0000ffff,00000009,0014b1f8,0014d3a0,00000020) ret=7e728e1f 003c:Call winmm.waveOutWrite(00008001,0014d3a0,00000020) ret=7e0c09b5 003c:Call winealsa.drv.wodMessage(00000000,00000009,7e72ab2b,0014d3a0,00000020) ret=7e728e1f 003c:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 003c:Ret winmm.waveOutWrite() retval=00000000 ret=7e0c09b5 003c:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 003c:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 003c:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 003c:Call KERNEL32.WaitForSingleObject(00000038,00000000) ret=7e735343 003c:Ret KERNEL32.WaitForSingleObject() retval=00000102 ret=7e735343 003c:Call msacm32.drv.wodMessage(0000ffff,00000009,0014b1f8,0014d3c0,00000020) ret=7e728e1f 003c:Call winmm.waveOutWrite(00008001,0014d3c0,00000020) ret=7e0c09b5 003c:Call winealsa.drv.wodMessage(00000000,00000009,7e72ab2b,0014d3c0,00000020) ret=7e728e1f 003c:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 003c:Ret winmm.waveOutWrite() retval=00000000 ret=7e0c09b5 003c:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 003c:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 003c:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 003c:Call KERNEL32.WaitForSingleObject(00000068,ffffffff) ret=7e73429b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=01004ea6 0009:Call user32.InvertRect(00000314,0033f670) ret=01004eaf 0009:Ret user32.InvertRect() retval=00000001 ret=01004eaf 0009:Call user32.InvertRect(00000314,0033f670) ret=01004ec9 0009:Ret user32.InvertRect() retval=00000001 ret=01004ec9 0009:Call gdi32.GdiFlush() ret=01004ecf 0009:Ret gdi32.GdiFlush() retval=00000001 ret=01004ecf 0009:Call KERNEL32.Sleep(000000fa) ret=01004eda 003e:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bd,0014b1f8,0014d3a0,00000000) ret=7e1c4643 003e:Call KERNEL32.IsBadReadPtr(0014b1f8,0000002c) ret=7e0bdbc9 003e:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 003e:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bd,008ceaa4,0014d3a0,00000000) ret=7e0bdf33 003e:Call KERNEL32.SetEvent(00000068) ret=7e7341f6 003e:Ret KERNEL32.SetEvent() retval=00000001 ret=7e7341f6 003e:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 003e:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 003c:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e73429b 003c:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 003c:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 003c:Call KERNEL32.WaitForSingleObject(00000038,00000000) ret=7e735343 003c:Ret KERNEL32.WaitForSingleObject() retval=00000102 ret=7e735343 003c:Call msacm32.drv.wodMessage(0000ffff,00000009,0014b1f8,0014d3a0,00000020) ret=7e728e1f 003c:Call winmm.waveOutWrite(00008001,0014d3a0,00000020) ret=7e0c09b5 003c:Call winealsa.drv.wodMessage(00000000,00000009,7e72ab2b,0014d3a0,00000020) ret=7e728e1f 003c:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 003c:Ret winmm.waveOutWrite() retval=00000000 ret=7e0c09b5 003c:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 003c:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 003c:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 003c:Call KERNEL32.WaitForSingleObject(00000068,ffffffff) ret=7e73429b 0009:Ret KERNEL32.Sleep() retval=00000000 ret=01004eda 0009:Call user32.InvertRect(00000314,0033f670) ret=01004ee3 0009:Ret user32.InvertRect() retval=00000001 ret=01004ee3 0009:Call user32.ReleaseDC(00010030,00000314) ret=01004eee 0009:Ret user32.ReleaseDC() retval=00000001 ret=01004eee 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_COMMAND,wp=00009c4d,lp=00000000) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=010802cb) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,010802cb) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=010802cb) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=00c402ca) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=00c402ca) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=010002d3) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,010002d3) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=010002d3) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=00bc02d2) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=00bc02d2) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00fe02d9) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,00fe02d9) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00fe02d9) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=00ba02d8) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=00ba02d8) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00fc02df) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,00fc02df) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00fc02df) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=00b802de) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=00b802de) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00fa02e7) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,00fa02e7) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00fa02e7) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=00b602e6) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=00b602e6) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00f802f9) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,00f802f9) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00f802f9) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=00b402f8) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=00b402f8) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00f60311) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,00f60311) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00f60311) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=00b20310) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=00b20310) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00f4031f) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,00f4031f) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00f4031f) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=00b0031e) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=00b0031e) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00f4032d) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,00f4032d) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00f4032d) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=00b0032c) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=00b0032c) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00f4033d) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,00f4033d) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00f4033d) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=00b0033c) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=00b0033c) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00f60357) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,00f60357) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00f60357) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=00b20356) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=00b20356) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00f80361) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,00f80361) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00f80361) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=00b40360) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=00b40360) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00f80364) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,00f80364) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00f80364) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=00b40363) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=00b40363) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00f90366) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,00f90366) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00f90366) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=00b50365) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=00b50365) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 003e:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bd,0014b1f8,0014d3c0,00000000) ret=7e1c4643 003e:Call KERNEL32.IsBadReadPtr(0014b1f8,0000002c) ret=7e0bdbc9 003e:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 003e:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bd,008ceaa4,0014d3c0,00000000) ret=7e0bdf33 003e:Call KERNEL32.SetEvent(00000068) ret=7e7341f6 003e:Ret KERNEL32.SetEvent() retval=00000001 ret=7e7341f6 003e:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 003e:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 003c:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e73429b 003c:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 003c:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 003c:Call KERNEL32.WaitForSingleObject(00000038,00000000) ret=7e735343 003c:Ret KERNEL32.WaitForSingleObject() retval=00000102 ret=7e735343 003c:Call msacm32.drv.wodMessage(0000ffff,00000009,0014b1f8,0014d3c0,00000020) ret=7e728e1f 003c:Call winmm.waveOutWrite(00008001,0014d3c0,00000020) ret=7e0c09b5 003c:Call winealsa.drv.wodMessage(00000000,00000009,7e72ab2b,0014d3c0,00000020) ret=7e728e1f 003c:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 003c:Ret winmm.waveOutWrite() retval=00000000 ret=7e0c09b5 003c:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 003c:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 003c:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 003c:Call KERNEL32.WaitForSingleObject(00000068,ffffffff) ret=7e73429b 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00e1037a) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,00e1037a) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00e1037a) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=009d0379) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=009d0379) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 003e:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bd,0014b1f8,0014d3a0,00000000) ret=7e1c4643 003e:Call KERNEL32.IsBadReadPtr(0014b1f8,0000002c) ret=7e0bdbc9 003e:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 003e:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bd,008ceaa4,0014d3a0,00000000) ret=7e0bdf33 003e:Call KERNEL32.SetEvent(00000068) ret=7e7341f6 003c:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e73429b 003c:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 003c:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 003c:Call KERNEL32.WaitForSingleObject(00000038,00000000) ret=7e735343 003c:Ret KERNEL32.WaitForSingleObject() retval=00000102 ret=7e735343 003c:Call msacm32.drv.wodMessage(0000ffff,00000009,0014b1f8,0014d3a0,00000020) ret=7e728e1f 003c:Call winmm.waveOutWrite(00008001,0014d3a0,00000020) ret=7e0c09b5 003c:Call winealsa.drv.wodMessage(00000000,00000009,7e72ab2b,0014d3a0,00000020) ret=7e728e1f 003c:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 003c:Ret winmm.waveOutWrite() retval=00000000 ret=7e0c09b5 003c:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 003c:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 003c:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 003c:Call KERNEL32.WaitForSingleObject(00000068,ffffffff) ret=7e73429b 003e:Ret KERNEL32.SetEvent() retval=00000001 ret=7e7341f6 003e:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 003e:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00c30396) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,00c30396) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00c30396) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=007f0395) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=007f0395) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00a703b6) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,00a703b6) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00a703b6) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=006303b5) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=006303b5) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=009303d6) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,009303d6) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=009303d6) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=004f03d5) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=004f03d5) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=008b03ee) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,008b03ee) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=008b03ee) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=004703ed) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=004703ed) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00930400) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,00930400) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00930400) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=004f03ff) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=004f03ff) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00bf0418) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,00bf0418) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00bf0418) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=007b0417) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=007b0417) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00be041a) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,00be041a) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00be041a) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=007a0419) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=007a0419) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00b60422) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,00b60422) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00b60422) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=00720421) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=00720421) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00ac0432) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,00ac0432) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00ac0432) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=00680431) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=00680431) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00a40446) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,00a40446) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00a40446) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=00600445) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=00600445) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00a2045c) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,00a2045c) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00a2045c) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=005e045b) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=005e045b) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00a40470) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,00a40470) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00a40470) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=0060046f) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=0060046f) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00a80482) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,00a80482) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00a80482) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=00640481) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=00640481) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00b0048c) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,00b0048c) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00b0048c) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=006c048b) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=006c048b) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 003e:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bd,0014b1f8,0014d3c0,00000000) ret=7e1c4643 003e:Call KERNEL32.IsBadReadPtr(0014b1f8,0000002c) ret=7e0bdbc9 003e:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 003e:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bd,008ceaa4,0014d3c0,00000000) ret=7e0bdf33 003e:Call KERNEL32.SetEvent(00000068) ret=7e7341f6 003c:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e73429b 003c:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 003c:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 003c:Call KERNEL32.WaitForSingleObject(00000038,00000000) ret=7e735343 003c:Ret KERNEL32.WaitForSingleObject() retval=00000102 ret=7e735343 003c:Call msacm32.drv.wodMessage(0000ffff,00000009,0014b1f8,0014d3c0,00000020) ret=7e728e1f 003c:Call winmm.waveOutWrite(00008001,0014d3c0,00000020) ret=7e0c09b5 003c:Call winealsa.drv.wodMessage(00000000,00000009,7e72ab2b,0014d3c0,00000020) ret=7e728e1f 003c:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 003c:Ret winmm.waveOutWrite() retval=00000000 ret=7e0c09b5 003c:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 003c:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 003c:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 003c:Call KERNEL32.WaitForSingleObject(00000068,ffffffff) ret=7e73429b 003e:Ret KERNEL32.SetEvent() retval=00000001 ret=7e7341f6 003e:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 003e:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 0019:Ret user32.GetMessageW() retval=00000001 ret=7ec5ec4b 0019:Call user32.DispatchMessageW(0033f93c) ret=7ec5ec28 0019:Call window proc 0x7ec60b80 (hwnd=0x10026,msg=WM_TIMER,wp=00000001,lp=00000000) 0019:Ret window proc 0x7ec60b80 (hwnd=0x10026,msg=WM_TIMER,wp=00000001,lp=00000000) retval=00000000 0019:Ret user32.DispatchMessageW() retval=00000000 ret=7ec5ec28 0019:Call user32.GetMessageW(0033f93c,00000000,00000000,00000000) ret=7ec5ec4b 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00a8048c) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,00a8048c) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00a8048c) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=0064048b) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=0064048b) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=009e048c) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,009e048c) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=009e048c) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=005a048b) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=005a048b) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=0094048e) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,0094048e) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=0094048e) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=0050048d) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=0050048d) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=0092048e) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,0092048e) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=0092048e) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=004e048d) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=004e048d) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=008e0490) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,008e0490) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=008e0490) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=004a048f) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=004a048f) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=008d0491) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,008d0491) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=008d0491) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=00490490) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=00490490) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=008c0491) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,008c0491) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=008c0491) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=00480490) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=00480490) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=008b0491) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,008b0491) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=008b0491) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=00470490) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=00470490) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 003e:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bd,0014b1f8,0014d3a0,00000000) ret=7e1c4643 003e:Call KERNEL32.IsBadReadPtr(0014b1f8,0000002c) ret=7e0bdbc9 003e:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 003e:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bd,008ceaa4,0014d3a0,00000000) ret=7e0bdf33 003e:Call KERNEL32.SetEvent(00000068) ret=7e7341f6 003c:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e73429b 003c:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 003c:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 003c:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 003c:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 003c:Call KERNEL32.WaitForSingleObject(00000068,ffffffff) ret=7e73429b 003e:Ret KERNEL32.SetEvent() retval=00000001 ret=7e7341f6 003e:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 003e:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=008b0492) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,008b0492) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=008b0492) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=00470491) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=00470491) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=008a0493) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,008a0493) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=008a0493) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=00460492) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=00460492) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00890494) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,00890494) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00890494) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=00450493) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=00450493) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00880495) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,00880495) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00880495) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=00440494) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=00440494) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00870496) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,00870496) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00870496) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=00430495) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=00430495) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00860498) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,00860498) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00860498) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=00420497) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=00420497) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00840499) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,00840499) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=00840499) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=00400498) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=00400498) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=0083049a) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,0083049a) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=0083049a) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=003f0499) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=003f0499) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=0082049b) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,0082049b) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=0082049b) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=003e049a) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=003e049a) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=007c049d) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,007c049d) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=007c049d) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=0038049c) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=0038049c) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=007a049d) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,007a049d) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=007a049d) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=0036049c) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=0036049c) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=0078049e) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,0078049e) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=0078049e) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=0034049d) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=0034049d) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=0076049f) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,0076049f) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=0076049f) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=0032049e) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=0032049e) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=007404a0) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,007404a0) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=007404a0) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=0030049f) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=0030049f) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=007204a1) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,007204a1) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=007204a1) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=002e04a0) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=002e04a0) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=007104a2) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,007104a2) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=007104a2) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=002d04a1) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=002d04a1) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=006f04a3) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,006f04a3) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=006f04a3) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=002b04a2) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=002b04a2) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=006904a5) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,006904a5) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=006904a5) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=002504a4) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=002504a4) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 003e:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bd,0014b1f8,0014d3c0,00000000) ret=7e1c4643 003e:Call KERNEL32.IsBadReadPtr(0014b1f8,0000002c) ret=7e0bdbc9 003e:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 003e:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bd,008ceaa4,0014d3c0,00000000) ret=7e0bdf33 003e:Call KERNEL32.SetEvent(00000068) ret=7e7341f6 003c:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e73429b 003c:Call KERNEL32.ResetEvent(00000068) ret=7e7342a8 003c:Ret KERNEL32.ResetEvent() retval=00000001 ret=7e7342a8 003c:Call msacm32.drv.wodMessage(0000ffff,0000000c,0014b1f8,00000000,00000000) ret=7e728e1f 003c:Call winmm.waveOutReset(00008001) ret=7e0c0180 003c:Call winealsa.drv.wodMessage(00000000,0000000c,7e72ab2b,00000000,00000000) ret=7e728e1f 003c:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1b2580 003c:Ret KERNEL32.CreateEventW() retval=00000070 ret=7e1b2580 003c:Call KERNEL32.WaitForSingleObject(00000070,ffffffff) ret=7e1b2635 003e:Ret KERNEL32.SetEvent() retval=00000001 ret=7e7341f6 003e:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 003e:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 003e:Call KERNEL32.SetEvent(00000070) ret=7e1c4f3d 003c:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1b2635 003c:Call KERNEL32.CloseHandle(00000070) ret=7e1b2640 003c:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1b2640 003c:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 003c:Ret winmm.waveOutReset() retval=00000000 ret=7e0c0180 003c:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 003c:Call msacm32.drv.wodMessage(0000ffff,00000008,0014b1f8,0014d3a0,00000020) ret=7e728e1f 003c:Call winmm.waveOutUnprepareHeader(00008001,0014d3a0,00000020) ret=7e0c00b6 003c:Call winealsa.drv.wodMessage(00000000,00000008,7e72ab2b,0014d3a0,00000020) ret=7e728e1f 003c:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 003c:Ret winmm.waveOutUnprepareHeader() retval=00000000 ret=7e0c00b6 003c:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 003c:Call msacm32.drv.wodMessage(0000ffff,00000008,0014b1f8,0014d3c0,00000020) ret=7e728e1f 003c:Call winmm.waveOutUnprepareHeader(00008001,0014d3c0,00000020) ret=7e0c00b6 003c:Call winealsa.drv.wodMessage(00000000,00000008,7e72ab2b,0014d3c0,00000020) ret=7e728e1f 003c:Ret winealsa.drv.wodMessage() retval=00000008 ret=7e728e1f 003c:Ret winmm.waveOutUnprepareHeader() retval=00000000 ret=7e0c00b6 003c:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 003c:Call KERNEL32.CloseHandle(00000068) ret=7e7349fd 003c:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e7349fd 003c:Call ntdll.RtlFreeHeap(00110000,00000000,0014d3a0) ret=7e734a23 003c:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e734a23 003c:Call ntdll.RtlFreeHeap(00110000,00000000,00148cb8) ret=7e734a49 003c:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e734a49 003c:Call msacm32.drv.wodMessage(0000ffff,00000006,0014b1f8,00000000,00000000) ret=7e728e1f 003c:Call winmm.waveOutClose(00008001) ret=7e0c01a5 003c:Call winealsa.drv.wodMessage(00000000,00000006,7e72ab2b,00000000,00000000) ret=7e728e1f 003c:Call KERNEL32.CreateEventW(00000000,00000000,00000000,00000000) ret=7e1b2580 003c:Ret KERNEL32.CreateEventW() retval=00000068 ret=7e1b2580 003c:Call KERNEL32.WaitForSingleObject(00000068,ffffffff) ret=7e1b2635 003e:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c4f3d 003e:Call KERNEL32.SetEvent(00000068) ret=7e1c4ea1 003c:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7e1b2635 003c:Call KERNEL32.CloseHandle(00000068) ret=7e1b2640 003c:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1b2640 003c:Call ntdll.RtlFreeHeap(00110000,00000000,0014c7d0) ret=7e1b24dc 003c:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e1b24dc 003c:Call ntdll.RtlDeleteCriticalSection(0013cefc) ret=7e1b24fb 003c:Ret ntdll.RtlDeleteCriticalSection() retval=00000000 ret=7e1b24fb 003c:Call winmm.DriverCallback(7e0bde60,00000003,00008001,000003bc,0014b1f8,00000000,00000000) ret=7e1c4643 003c:Call KERNEL32.IsBadReadPtr(0014b1f8,0000002c) ret=7e0bdbc9 003c:Ret KERNEL32.IsBadReadPtr() retval=00000000 ret=7e0bdbc9 003c:Call winmm.DriverCallback(7e734190,00000003,00008000,000003bc,008ceaa4,00000000,00000000) ret=7e0bdf33 003c:Ret winmm.DriverCallback() retval=00000001 ret=7e0bdf33 003c:Ret winmm.DriverCallback() retval=00000001 ret=7e1c4643 003c:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728e1f 003c:Call ntdll.RtlFreeHeap(00110000,00000000,0014b230) ret=7e72ae0b 003c:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e72ae0b 003c:Ret winmm.waveOutClose() retval=00000000 ret=7e0c01a5 003c:Call ntdll.RtlFreeHeap(00110000,00000000,0014b1f8) ret=7e0c01f7 003c:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e0c01f7 003c:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728e1f 003c:Call ntdll.RtlFreeHeap(00110000,00000000,0014b1d0) ret=7e72ae0b 003c:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e72ae0b 003c:Call ntdll.RtlFreeHeap(00110000,00000000,00148c28) ret=7e731f79 003c:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e731f79 003c:Call KERNEL32.SetEvent(00000040) ret=7e7343a0 003c:Ret KERNEL32.SetEvent() retval=00000001 ret=7e7343a0 003c:Call KERNEL32.CloseHandle(00000064) ret=7e734340 003c:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e734340 003c:Call ntdll.RtlFreeHeap(00110000,00000000,0014bef8) ret=7e734360 003c:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e734360 003c:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) 003c:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 003c:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) 003c:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) retval=1 003c:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) 003c:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 003c:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) 003c:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) retval=1 003c:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) 003c:Call KERNEL32.TlsGetValue(00000000) ret=7e3f4071 003c:Ret KERNEL32.TlsGetValue() retval=00000000 ret=7e3f4071 003c:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 003c:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) 003c:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 003e:Ret KERNEL32.SetEvent() retval=00000001 ret=7e1c4ea1 003e:Call KERNEL32.ExitThread(00000000) ret=7e1c4eb0 003e:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) 003e:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 003e:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) 003e:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=THREAD_DETACH,res=(nil)) retval=1 003e:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) 003e:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 003e:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) 003e:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=THREAD_DETACH,res=(nil)) retval=1 003e:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) 003e:Call KERNEL32.TlsGetValue(00000000) ret=7e3f4071 003e:Ret KERNEL32.TlsGetValue() retval=00000000 ret=7e3f4071 003e:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 003e:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) 003e:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=THREAD_DETACH,res=(nil)) retval=1 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=006304a7) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,006304a7) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=006304a7) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=001f04a6) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=001f04a6) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=005b04a9) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,005b04a9) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=005b04a9) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=001704a8) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=001704a8) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=005304ab) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,005304ab) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=005304ab) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=000f04aa) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=000f04aa) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=004d04ad) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,004d04ad) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=004d04ad) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=000904ac) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=000904ac) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=004704af) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,004704af) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=004704af) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000001) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000001) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=000304ae) 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_MOUSEMOVE,wp=00000000,lp=000304ae) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=004304b3) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,004304b3) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000005 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=004304b3) retval=00000005 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000005) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000005) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000005) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCMOUSEMOVE,wp=00000005,lp=004304b3) 0009:Call user32.DefWindowProcW(00010030,000000a0,00000005,004304b3) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCMOUSEMOVE,wp=00000005,lp=004304b3) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=004104b4) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,004104b4) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000005 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=004104b4) retval=00000005 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000005) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000005) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000005) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCMOUSEMOVE,wp=00000005,lp=004104b4) 0009:Call user32.DefWindowProcW(00010030,000000a0,00000005,004104b4) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCMOUSEMOVE,wp=00000005,lp=004104b4) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=004004b5) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,004004b5) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000005 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=004004b5) retval=00000005 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000005) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000005) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000005) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCMOUSEMOVE,wp=00000005,lp=004004b5) 0009:Call user32.DefWindowProcW(00010030,000000a0,00000005,004004b5) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCMOUSEMOVE,wp=00000005,lp=004004b5) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=003f04b6) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,003f04b6) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000005 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=003f04b6) retval=00000005 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000005) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000005) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000005) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCMOUSEMOVE,wp=00000005,lp=003f04b6) 0009:Call user32.DefWindowProcW(00010030,000000a0,00000005,003f04b6) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCMOUSEMOVE,wp=00000005,lp=003f04b6) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=003e04b8) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,003e04b8) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000005 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=003e04b8) retval=00000005 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000005) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000005) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000005) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCMOUSEMOVE,wp=00000005,lp=003e04b8) 0009:Call user32.DefWindowProcW(00010030,000000a0,00000005,003e04b8) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCMOUSEMOVE,wp=00000005,lp=003e04b8) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=003c04be) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,003c04be) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000005 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=003c04be) retval=00000005 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000005) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000005) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000005) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCMOUSEMOVE,wp=00000005,lp=003c04be) 0009:Call user32.DefWindowProcW(00010030,000000a0,00000005,003c04be) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCMOUSEMOVE,wp=00000005,lp=003c04be) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=003a04c6) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,003a04c6) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000005 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=003a04c6) retval=00000005 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000005) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000005) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000005) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCMOUSEMOVE,wp=00000005,lp=003a04c6) 0009:Call user32.DefWindowProcW(00010030,000000a0,00000005,003a04c6) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCMOUSEMOVE,wp=00000005,lp=003a04c6) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=003804cc) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,003804cc) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000005 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=003804cc) retval=00000005 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000005) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000005) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000005) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCMOUSEMOVE,wp=00000005,lp=003804cc) 0009:Call user32.DefWindowProcW(00010030,000000a0,00000005,003804cc) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCMOUSEMOVE,wp=00000005,lp=003804cc) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=003404d2) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,003404d2) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000005 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=003404d2) retval=00000005 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000005) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000005) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000005) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCMOUSEMOVE,wp=00000005,lp=003404d2) 0009:Call user32.DefWindowProcW(00010030,000000a0,00000005,003404d2) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCMOUSEMOVE,wp=00000005,lp=003404d2) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=003304d4) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,003304d4) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000005 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=003304d4) retval=00000005 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000005) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000005) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000005) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCMOUSEMOVE,wp=00000005,lp=003304d4) 0009:Call user32.DefWindowProcW(00010030,000000a0,00000005,003304d4) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCMOUSEMOVE,wp=00000005,lp=003304d4) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=003204d5) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,003204d5) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000005 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=003204d5) retval=00000005 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000005) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000005) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000005) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCMOUSEMOVE,wp=00000005,lp=003204d5) 0009:Call user32.DefWindowProcW(00010030,000000a0,00000005,003204d5) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCMOUSEMOVE,wp=00000005,lp=003204d5) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=003104d5) 0009:Call user32.DefWindowProcW(00010030,00000084,00000000,003104d5) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000005 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCHITTEST,wp=00000000,lp=003104d5) retval=00000005 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000005) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,02000005) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=02000005) retval=00000000 0009:Ret user32.GetMessageW() retval=00000001 ret=01007303 0009:Call hhctrl.ocx.HtmlHelpW(00000000,00000000,000000fd,0033facc) ret=0100fe4b 0009:Ret hhctrl.ocx.HtmlHelpW() retval=00000000 ret=0100fe4b 0009:Call user32.TranslateAcceleratorW(00010030,00001127,0033facc) ret=01007340 0009:Ret user32.TranslateAcceleratorW() retval=00000000 ret=01007340 0009:Call user32.TranslateMessage(0033facc) ret=01007351 0009:Ret user32.TranslateMessage() retval=00000000 ret=01007351 0009:Call user32.DispatchMessageW(0033facc) ret=0100735e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCMOUSEMOVE,wp=00000005,lp=003104d5) 0009:Call user32.DefWindowProcW(00010030,000000a0,00000005,003104d5) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCMOUSEMOVE,wp=00000005,lp=003104d5) retval=00000000 0009:Ret user32.DispatchMessageW() retval=00000000 ret=0100735e 0009:Call user32.GetMessageW(0033facc,00000000,00000000,00000000) ret=01007303 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SYSCOMMAND,wp=0000f060,lp=00000000) 0009:Call user32.DefWindowProcW(00010030,00000112,0000f060,00000000) ret=01006e3b 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_CLOSE,wp=00000000,lp=00000000) 0009:Call user32.LoadStringW(01000000,00000009,01011800,00000400) ret=0100361b 0009:Ret user32.LoadStringW() retval=00000019 ret=0100361b 0009:Call advapi32.RegCreateKeyExW(80000001,01011800 L"Software\\Microsoft\\Spider",00000000,00000000,00000000,00020006,00000000,0033eff4,0033efec) ret=01004151 0009:Ret advapi32.RegCreateKeyExW() retval=00000000 ret=01004151 0009:Call user32.IsZoomed(00010030) ret=01004164 0009:Ret user32.IsZoomed() retval=00000001 ret=01004164 0009:Call user32.IsZoomed(00010030) ret=01004173 0009:Ret user32.IsZoomed() retval=00000001 ret=01004173 0009:Call user32.GetWindowPlacement(00010030,0033efac) ret=010041a4 0009:Ret user32.GetWindowPlacement() retval=00000001 ret=010041a4 0009:Call user32.LoadStringW(01000000,0000000a,01011800,00000400) ret=0100361b 0009:Ret user32.LoadStringW() retval=00000008 ret=0100361b 0009:Call advapi32.RegSetValueExW(00000064,01011800 L"WndState",00000000,00000004,0033efe8,00000004) ret=010041cd 0009:Ret advapi32.RegSetValueExW() retval=00000000 ret=010041cd 0009:Call user32.LoadStringW(01000000,0000000b,01011800,00000400) ret=0100361b 0009:Ret user32.LoadStringW() retval=00000004 ret=0100361b 0009:Call advapi32.RegSetValueExW(00000064,01011800 L"WndX",00000000,00000004,0033efd8,00000004) ret=010041e2 0009:Ret advapi32.RegSetValueExW() retval=00000000 ret=010041e2 0009:Call user32.LoadStringW(01000000,0000000c,01011800,00000400) ret=0100361b 0009:Ret user32.LoadStringW() retval=00000004 ret=0100361b 0009:Call advapi32.RegSetValueExW(00000064,01011800 L"WndY",00000000,00000004,0033efdc,00000004) ret=010041f7 0009:Ret advapi32.RegSetValueExW() retval=00000000 ret=010041f7 0009:Call user32.LoadStringW(01000000,0000000d,01011800,00000400) ret=0100361b 0009:Ret user32.LoadStringW() retval=00000008 ret=0100361b 0009:Call advapi32.RegSetValueExW(00000064,01011800 L"WndWidth",00000000,00000004,0033efec,00000004) ret=01004215 0009:Ret advapi32.RegSetValueExW() retval=00000000 ret=01004215 0009:Call user32.LoadStringW(01000000,0000000e,01011800,00000400) ret=0100361b 0009:Ret user32.LoadStringW() retval=00000009 ret=0100361b 0009:Call advapi32.RegSetValueExW(00000064,01011800 L"WndHeight",00000000,00000004,0033efec,00000004) ret=01004233 0009:Ret advapi32.RegSetValueExW() retval=00000000 ret=01004233 0009:Call user32.LoadStringW(01000000,00000015,01011800,00000400) ret=0100361b 0009:Ret user32.LoadStringW() retval=00000008 ret=0100361b 0009:Call advapi32.RegSetValueExW(00000064,01011800 L"AnimDeal",00000000,00000004,0033eff0,00000004) ret=01004251 0009:Ret advapi32.RegSetValueExW() retval=00000000 ret=01004251 0009:Call user32.LoadStringW(01000000,00000016,01011800,00000400) ret=0100361b 0009:Ret user32.LoadStringW() retval=0000000a ret=0100361b 0009:Call advapi32.RegSetValueExW(00000064,01011800 L"SaveOnExit",00000000,00000004,0033eff0,00000004) ret=0100426f 0009:Ret advapi32.RegSetValueExW() retval=00000000 ret=0100426f 0009:Call user32.LoadStringW(01000000,00000017,01011800,00000400) ret=0100361b 0009:Ret user32.LoadStringW() retval=0000000b ret=0100361b 0009:Call advapi32.RegSetValueExW(00000064,01011800 L"LoadAtStart",00000000,00000004,0033eff0,00000004) ret=0100428d 0009:Ret advapi32.RegSetValueExW() retval=00000000 ret=0100428d 0009:Call user32.LoadStringW(01000000,00000018,01011800,00000400) ret=0100361b 0009:Ret user32.LoadStringW() retval=0000000a ret=0100361b 0009:Call advapi32.RegSetValueExW(00000064,01011800 L"PromptSave",00000000,00000004,0033eff0,00000004) ret=010042ab 0009:Ret advapi32.RegSetValueExW() retval=00000000 ret=010042ab 0009:Call user32.LoadStringW(01000000,00000019,01011800,00000400) ret=0100361b 0009:Ret user32.LoadStringW() retval=0000000a ret=0100361b 0009:Call advapi32.RegSetValueExW(00000064,01011800 L"PromptLoad",00000000,00000004,0033eff0,00000004) ret=010042c9 0009:Ret advapi32.RegSetValueExW() retval=00000000 ret=010042c9 0009:Call user32.LoadStringW(01000000,00000033,01011800,00000400) ret=0100361b 0009:Ret user32.LoadStringW() retval=00000005 ret=0100361b 0009:Call advapi32.RegSetValueExW(00000064,01011800 L"Sound",00000000,00000004,0033eff0,00000004) ret=010042e7 0009:Ret advapi32.RegSetValueExW() retval=00000000 ret=010042e7 0009:Call user32.LoadStringW(01000000,00000031,01011800,00000400) ret=0100361b 0009:Ret user32.LoadStringW() retval=00000008 ret=0100361b 0009:Call advapi32.RegSetValueExW(00000064,01011800 L"NumSuits",00000000,00000004,0033efec,00000004) ret=01004304 0009:Ret advapi32.RegSetValueExW() retval=00000000 ret=01004304 0009:Call advapi32.RegSetValueExW(00000064,010015bc L"HighScore_Easy",00000000,00000004,01012f88,00000004) ret=01004319 0009:Ret advapi32.RegSetValueExW() retval=00000000 ret=01004319 0009:Call advapi32.RegSetValueExW(00000064,010015a8 L"Wins_Easy",00000000,00000004,01012f8c,00000004) ret=0100432e 0009:Ret advapi32.RegSetValueExW() retval=00000000 ret=0100432e 0009:Call advapi32.RegSetValueExW(00000064,01001590 L"Losses_Easy",00000000,00000004,01012f90,00000004) ret=01004343 0009:Ret advapi32.RegSetValueExW() retval=00000000 ret=01004343 0009:Call advapi32.RegSetValueExW(00000064,01001570 L"StreakWins_Easy",00000000,00000004,01012f94,00000004) ret=01004358 0009:Ret advapi32.RegSetValueExW() retval=00000000 ret=01004358 0009:Call advapi32.RegSetValueExW(00000064,0100154c L"StreakLosses_Easy",00000000,00000004,01012f98,00000004) ret=0100436d 0009:Ret advapi32.RegSetValueExW() retval=00000000 ret=0100436d 0009:Call advapi32.RegSetValueExW(00000064,01001524 L"StreakCurrent_Easy",00000000,00000004,01012f9c,00000004) ret=01004382 0009:Ret advapi32.RegSetValueExW() retval=00000000 ret=01004382 0009:Call advapi32.RegSetValueExW(00000064,01001504 L"FWinStreak_Easy",00000000,00000004,01012fa0,00000004) ret=01004397 0009:Ret advapi32.RegSetValueExW() retval=00000000 ret=01004397 0009:Call advapi32.RegSetValueExW(00000064,010014e0 L"HighScore_Medium",00000000,00000004,01012fa4,00000004) ret=010043ac 0009:Ret advapi32.RegSetValueExW() retval=00000000 ret=010043ac 0009:Call advapi32.RegSetValueExW(00000064,010014c8 L"Wins_Medium",00000000,00000004,01012fa8,00000004) ret=010043c1 0009:Ret advapi32.RegSetValueExW() retval=00000000 ret=010043c1 0009:Call advapi32.RegSetValueExW(00000064,010014ac L"Losses_Medium",00000000,00000004,01012fac,00000004) ret=010043d6 0009:Ret advapi32.RegSetValueExW() retval=00000000 ret=010043d6 0009:Call advapi32.RegSetValueExW(00000064,01001488 L"StreakWins_Medium",00000000,00000004,01012fb0,00000004) ret=010043eb 0009:Ret advapi32.RegSetValueExW() retval=00000000 ret=010043eb 0009:Call advapi32.RegSetValueExW(00000064,01001460 L"StreakLosses_Medium",00000000,00000004,01012fb4,00000004) ret=01004400 0009:Ret advapi32.RegSetValueExW() retval=00000000 ret=01004400 0009:Call advapi32.RegSetValueExW(00000064,01001434 L"StreakCurrent_Medium",00000000,00000004,01012fb8,00000004) ret=01004415 0009:Ret advapi32.RegSetValueExW() retval=00000000 ret=01004415 0009:Call advapi32.RegSetValueExW(00000064,01001410 L"FWinStreak_Medium",00000000,00000004,01012fbc,00000004) ret=0100442a 0009:Ret advapi32.RegSetValueExW() retval=00000000 ret=0100442a 0009:Call advapi32.RegSetValueExW(00000064,010013e8 L"HighScore_Difficult",00000000,00000004,01012fc0,00000004) ret=0100443f 0009:Ret advapi32.RegSetValueExW() retval=00000000 ret=0100443f 0009:Call advapi32.RegSetValueExW(00000064,010013c8 L"Wins_Difficult",00000000,00000004,01012fc4,00000004) ret=01004454 0009:Ret advapi32.RegSetValueExW() retval=00000000 ret=01004454 0009:Call advapi32.RegSetValueExW(00000064,010013a4 L"Losses_Difficult",00000000,00000004,01012fc8,00000004) ret=01004469 0009:Ret advapi32.RegSetValueExW() retval=00000000 ret=01004469 0009:Call advapi32.RegSetValueExW(00000064,01001378 L"StreakWins_Difficult",00000000,00000004,01012fcc,00000004) ret=0100447e 0009:Ret advapi32.RegSetValueExW() retval=00000000 ret=0100447e 0009:Call advapi32.RegSetValueExW(00000064,01001348 L"StreakLosses_Difficult",00000000,00000004,01012fd0,00000004) ret=01004493 0009:Ret advapi32.RegSetValueExW() retval=00000000 ret=01004493 0009:Call advapi32.RegSetValueExW(00000064,01001318 L"StreakCurrent_Difficult",00000000,00000004,01012fd4,00000004) ret=010044a8 0009:Ret advapi32.RegSetValueExW() retval=00000000 ret=010044a8 0009:Call advapi32.RegSetValueExW(00000064,010012ec L"FWinStreak_Difficult",00000000,00000004,01012fd8,00000004) ret=010044bd 0009:Ret advapi32.RegSetValueExW() retval=00000000 ret=010044bd 0009:Call advapi32.RegCloseKey(00000064) ret=010044c6 0009:Ret advapi32.RegCloseKey() retval=00000000 ret=010044c6 0009:Call user32.LoadStringW(01000000,00000002,01011800,00000400) ret=0100361b 0009:Ret user32.LoadStringW() retval=00000006 ret=0100361b 0009:Call KERNEL32.lstrcpyW(0033e7e4,01011800 L"Spider") ret=01003654 0009:Ret KERNEL32.lstrcpyW() retval=0033e7e4 ret=01003654 0009:Call user32.LoadStringW(01000000,00000032,01011800,00000400) ret=0100361b 0009:Ret user32.LoadStringW() retval=00000030 ret=0100361b 0009:Call user32.MessageBoxW(00010030,01011800 L"Do you want to save this game before closing it?",0033e7e4 L"Spider",00000223) ret=0100366e 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_CANCELMODE,wp=00000000,lp=00000000) 0009:Call user32.DefWindowProcW(00010030,0000001f,00000000,00000000) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_CANCELMODE,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_KILLFOCUS,wp=00000000,lp=00000000) 0009:Call user32.DefWindowProcW(00010030,00000008,00000000,00000000) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_KILLFOCUS,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_ENABLE,wp=00000000,lp=00000000) 0009:Call user32.DefWindowProcW(00010030,0000000a,00000000,00000000) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_ENABLE,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_NCCREATE,wp=00000000,lp=0033e298) 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_NCCREATE,wp=00000000,lp=0033e298) retval=00000001 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_NCCALCSIZE,wp=00000000,lp=0033e244) 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_NCCALCSIZE,wp=00000000,lp=0033e244) retval=00000000 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_CREATE,wp=00000000,lp=0033e298) 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_CREATE,wp=00000000,lp=0033e298) retval=00000000 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_SIZE,wp=00000000,lp=015001b0) 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_SIZE,wp=00000000,lp=015001b0) retval=00000000 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_MOVE,wp=00000000,lp=00e400c9) 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_MOVE,wp=00000000,lp=00e400c9) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x2004c,msg=WM_NCCREATE,wp=00000000,lp=0033e298) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x2004c,msg=WM_NCCREATE,wp=00000000,lp=0033e298) retval=00000001 0009:Call window proc 0x7eaf1c70 (hwnd=0x2004c,msg=WM_NCCALCSIZE,wp=00000000,lp=0033e244) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x2004c,msg=WM_NCCALCSIZE,wp=00000000,lp=0033e244) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x2004c,msg=WM_CREATE,wp=00000000,lp=0033e298) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x2004c,msg=WM_CREATE,wp=00000000,lp=0033e298) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x2004c,msg=WM_SIZE,wp=00000000,lp=00200020) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x2004c,msg=WM_SIZE,wp=00000000,lp=00200020) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x2004c,msg=WM_MOVE,wp=00000000,lp=00280010) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x2004c,msg=WM_MOVE,wp=00000000,lp=00280010) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x2004c,msg=WM_SHOWWINDOW,wp=00000001,lp=00000000) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x2004c,msg=WM_SHOWWINDOW,wp=00000001,lp=00000000) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x2004c,msg=WM_GETDLGCODE,wp=00000000,lp=00000000) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x2004c,msg=WM_GETDLGCODE,wp=00000000,lp=00000000) retval=00000100 0009:Call window proc 0x7eaf1c70 (hwnd=0x2004a,msg=WM_NCCREATE,wp=00000000,lp=0033e298) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x2004a,msg=WM_NCCREATE,wp=00000000,lp=0033e298) retval=00000001 0009:Call window proc 0x7eaf1c70 (hwnd=0x2004a,msg=WM_NCCALCSIZE,wp=00000000,lp=0033e244) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x2004a,msg=WM_NCCALCSIZE,wp=00000000,lp=0033e244) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x2004a,msg=WM_CREATE,wp=00000000,lp=0033e298) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x2004a,msg=WM_CREATE,wp=00000000,lp=0033e298) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x2004a,msg=WM_SIZE,wp=00000000,lp=00600160) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x2004a,msg=WM_SIZE,wp=00000000,lp=00600160) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x2004a,msg=WM_MOVE,wp=00000000,lp=00080040) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x2004a,msg=WM_MOVE,wp=00000000,lp=00080040) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x2004a,msg=WM_SHOWWINDOW,wp=00000001,lp=00000000) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x2004a,msg=WM_SHOWWINDOW,wp=00000001,lp=00000000) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x2004a,msg=WM_GETDLGCODE,wp=00000000,lp=00000000) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x2004a,msg=WM_GETDLGCODE,wp=00000000,lp=00000000) retval=00000100 0009:Call window proc 0x7ea833d0 (hwnd=0x20048,msg=WM_NCCREATE,wp=00000000,lp=0033e298) 0009:Ret window proc 0x7ea833d0 (hwnd=0x20048,msg=WM_NCCREATE,wp=00000000,lp=0033e298) retval=00000001 0009:Call window proc 0x7ea833d0 (hwnd=0x20048,msg=WM_NCCALCSIZE,wp=00000000,lp=0033e244) 0009:Ret window proc 0x7ea833d0 (hwnd=0x20048,msg=WM_NCCALCSIZE,wp=00000000,lp=0033e244) retval=00000300 0009:Call window proc 0x7ea833d0 (hwnd=0x20048,msg=WM_CREATE,wp=00000000,lp=0033e298) 0009:Ret window proc 0x7ea833d0 (hwnd=0x20048,msg=WM_CREATE,wp=00000000,lp=0033e298) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x20048,msg=WM_SIZE,wp=00000000,lp=001c0050) 0009:Ret window proc 0x7ea833d0 (hwnd=0x20048,msg=WM_SIZE,wp=00000000,lp=001c0050) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x20048,msg=WM_MOVE,wp=00000000,lp=00700020) 0009:Ret window proc 0x7ea833d0 (hwnd=0x20048,msg=WM_MOVE,wp=00000000,lp=00700020) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x20048,msg=WM_SHOWWINDOW,wp=00000001,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x20048,msg=WM_SHOWWINDOW,wp=00000001,lp=00000000) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x20048,msg=WM_GETDLGCODE,wp=00000000,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x20048,msg=WM_GETDLGCODE,wp=00000000,lp=00000000) retval=00002020 0009:Call window proc 0x7ea833d0 (hwnd=0x20046,msg=WM_NCCREATE,wp=00000000,lp=0033e298) 0009:Ret window proc 0x7ea833d0 (hwnd=0x20046,msg=WM_NCCREATE,wp=00000000,lp=0033e298) retval=00000001 0009:Call window proc 0x7ea833d0 (hwnd=0x20046,msg=WM_NCCALCSIZE,wp=00000000,lp=0033e244) 0009:Ret window proc 0x7ea833d0 (hwnd=0x20046,msg=WM_NCCALCSIZE,wp=00000000,lp=0033e244) retval=00000300 0009:Call window proc 0x7ea833d0 (hwnd=0x20046,msg=WM_CREATE,wp=00000000,lp=0033e298) 0009:Ret window proc 0x7ea833d0 (hwnd=0x20046,msg=WM_CREATE,wp=00000000,lp=0033e298) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x20046,msg=WM_SIZE,wp=00000000,lp=001c0050) 0009:Ret window proc 0x7ea833d0 (hwnd=0x20046,msg=WM_SIZE,wp=00000000,lp=001c0050) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x20046,msg=WM_MOVE,wp=00000000,lp=00700080) 0009:Ret window proc 0x7ea833d0 (hwnd=0x20046,msg=WM_MOVE,wp=00000000,lp=00700080) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x20046,msg=WM_SHOWWINDOW,wp=00000001,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x20046,msg=WM_SHOWWINDOW,wp=00000001,lp=00000000) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x20046,msg=WM_GETDLGCODE,wp=00000000,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x20046,msg=WM_GETDLGCODE,wp=00000000,lp=00000000) retval=00002020 0009:Call window proc 0x7ea833d0 (hwnd=0x20044,msg=WM_NCCREATE,wp=00000000,lp=0033e298) 0009:Ret window proc 0x7ea833d0 (hwnd=0x20044,msg=WM_NCCREATE,wp=00000000,lp=0033e298) retval=00000001 0009:Call window proc 0x7ea833d0 (hwnd=0x20044,msg=WM_NCCALCSIZE,wp=00000000,lp=0033e244) 0009:Ret window proc 0x7ea833d0 (hwnd=0x20044,msg=WM_NCCALCSIZE,wp=00000000,lp=0033e244) retval=00000300 0009:Call window proc 0x7ea833d0 (hwnd=0x20044,msg=WM_CREATE,wp=00000000,lp=0033e298) 0009:Ret window proc 0x7ea833d0 (hwnd=0x20044,msg=WM_CREATE,wp=00000000,lp=0033e298) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x20044,msg=WM_SIZE,wp=00000000,lp=001c0050) 0009:Ret window proc 0x7ea833d0 (hwnd=0x20044,msg=WM_SIZE,wp=00000000,lp=001c0050) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x20044,msg=WM_MOVE,wp=00000000,lp=007000e0) 0009:Ret window proc 0x7ea833d0 (hwnd=0x20044,msg=WM_MOVE,wp=00000000,lp=007000e0) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x20044,msg=WM_SHOWWINDOW,wp=00000001,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x20044,msg=WM_SHOWWINDOW,wp=00000001,lp=00000000) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x20044,msg=WM_GETDLGCODE,wp=00000000,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x20044,msg=WM_GETDLGCODE,wp=00000000,lp=00000000) retval=00002020 0009:Call window proc 0x7ea833d0 (hwnd=0x20042,msg=WM_NCCREATE,wp=00000000,lp=0033e298) 0009:Ret window proc 0x7ea833d0 (hwnd=0x20042,msg=WM_NCCREATE,wp=00000000,lp=0033e298) retval=00000001 0009:Call window proc 0x7ea833d0 (hwnd=0x20042,msg=WM_NCCALCSIZE,wp=00000000,lp=0033e244) 0009:Ret window proc 0x7ea833d0 (hwnd=0x20042,msg=WM_NCCALCSIZE,wp=00000000,lp=0033e244) retval=00000300 0009:Call window proc 0x7ea833d0 (hwnd=0x20042,msg=WM_CREATE,wp=00000000,lp=0033e298) 0009:Ret window proc 0x7ea833d0 (hwnd=0x20042,msg=WM_CREATE,wp=00000000,lp=0033e298) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x20042,msg=WM_SIZE,wp=00000000,lp=001c0050) 0009:Ret window proc 0x7ea833d0 (hwnd=0x20042,msg=WM_SIZE,wp=00000000,lp=001c0050) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x20042,msg=WM_MOVE,wp=00000000,lp=00700140) 0009:Ret window proc 0x7ea833d0 (hwnd=0x20042,msg=WM_MOVE,wp=00000000,lp=00700140) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x20042,msg=WM_SHOWWINDOW,wp=00000001,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x20042,msg=WM_SHOWWINDOW,wp=00000001,lp=00000000) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x20042,msg=WM_GETDLGCODE,wp=00000000,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x20042,msg=WM_GETDLGCODE,wp=00000000,lp=00000000) retval=00002020 0009:Call window proc 0x7ea833d0 (hwnd=0x20040,msg=WM_NCCREATE,wp=00000000,lp=0033e298) 0009:Ret window proc 0x7ea833d0 (hwnd=0x20040,msg=WM_NCCREATE,wp=00000000,lp=0033e298) retval=00000001 0009:Call window proc 0x7ea833d0 (hwnd=0x20040,msg=WM_NCCALCSIZE,wp=00000000,lp=0033e244) 0009:Ret window proc 0x7ea833d0 (hwnd=0x20040,msg=WM_NCCALCSIZE,wp=00000000,lp=0033e244) retval=00000300 0009:Call window proc 0x7ea833d0 (hwnd=0x20040,msg=WM_CREATE,wp=00000000,lp=0033e298) 0009:Ret window proc 0x7ea833d0 (hwnd=0x20040,msg=WM_CREATE,wp=00000000,lp=0033e298) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x20040,msg=WM_SIZE,wp=00000000,lp=001c0050) 0009:Ret window proc 0x7ea833d0 (hwnd=0x20040,msg=WM_SIZE,wp=00000000,lp=001c0050) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x20040,msg=WM_MOVE,wp=00000000,lp=007001a0) 0009:Ret window proc 0x7ea833d0 (hwnd=0x20040,msg=WM_MOVE,wp=00000000,lp=007001a0) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x20040,msg=WM_SHOWWINDOW,wp=00000001,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x20040,msg=WM_SHOWWINDOW,wp=00000001,lp=00000000) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x20040,msg=WM_GETDLGCODE,wp=00000000,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x20040,msg=WM_GETDLGCODE,wp=00000000,lp=00000000) retval=00002020 0009:Call window proc 0x7ea833d0 (hwnd=0x2003e,msg=WM_NCCREATE,wp=00000000,lp=0033e298) 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003e,msg=WM_NCCREATE,wp=00000000,lp=0033e298) retval=00000001 0009:Call window proc 0x7ea833d0 (hwnd=0x2003e,msg=WM_NCCALCSIZE,wp=00000000,lp=0033e244) 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003e,msg=WM_NCCALCSIZE,wp=00000000,lp=0033e244) retval=00000300 0009:Call window proc 0x7ea833d0 (hwnd=0x2003e,msg=WM_CREATE,wp=00000000,lp=0033e298) 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003e,msg=WM_CREATE,wp=00000000,lp=0033e298) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x2003e,msg=WM_SIZE,wp=00000000,lp=001c0050) 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003e,msg=WM_SIZE,wp=00000000,lp=001c0050) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x2003e,msg=WM_MOVE,wp=00000000,lp=00700200) 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003e,msg=WM_MOVE,wp=00000000,lp=00700200) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x2003e,msg=WM_SHOWWINDOW,wp=00000001,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003e,msg=WM_SHOWWINDOW,wp=00000001,lp=00000000) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x2003e,msg=WM_GETDLGCODE,wp=00000000,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003e,msg=WM_GETDLGCODE,wp=00000000,lp=00000000) retval=00002020 0009:Call window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_NCCREATE,wp=00000000,lp=0033e298) 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_NCCREATE,wp=00000000,lp=0033e298) retval=00000001 0009:Call window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_NCCALCSIZE,wp=00000000,lp=0033e244) 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_NCCALCSIZE,wp=00000000,lp=0033e244) retval=00000300 0009:Call window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_CREATE,wp=00000000,lp=0033e298) 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_CREATE,wp=00000000,lp=0033e298) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_SIZE,wp=00000000,lp=001c0050) 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_SIZE,wp=00000000,lp=001c0050) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_MOVE,wp=00000000,lp=00700260) 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_MOVE,wp=00000000,lp=00700260) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_SHOWWINDOW,wp=00000001,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_SHOWWINDOW,wp=00000001,lp=00000000) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_GETDLGCODE,wp=00000000,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_GETDLGCODE,wp=00000000,lp=00000000) retval=00002020 0009:Call window proc 0x7ea833d0 (hwnd=0x2003a,msg=WM_NCCREATE,wp=00000000,lp=0033e298) 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003a,msg=WM_NCCREATE,wp=00000000,lp=0033e298) retval=00000001 0009:Call window proc 0x7ea833d0 (hwnd=0x2003a,msg=WM_NCCALCSIZE,wp=00000000,lp=0033e244) 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003a,msg=WM_NCCALCSIZE,wp=00000000,lp=0033e244) retval=00000300 0009:Call window proc 0x7ea833d0 (hwnd=0x2003a,msg=WM_CREATE,wp=00000000,lp=0033e298) 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003a,msg=WM_CREATE,wp=00000000,lp=0033e298) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x2003a,msg=WM_SIZE,wp=00000000,lp=001c0050) 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003a,msg=WM_SIZE,wp=00000000,lp=001c0050) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x2003a,msg=WM_MOVE,wp=00000000,lp=007002c0) 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003a,msg=WM_MOVE,wp=00000000,lp=007002c0) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x2003a,msg=WM_SHOWWINDOW,wp=00000001,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003a,msg=WM_SHOWWINDOW,wp=00000001,lp=00000000) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x2003a,msg=WM_GETDLGCODE,wp=00000000,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003a,msg=WM_GETDLGCODE,wp=00000000,lp=00000000) retval=00002020 0009:Call window proc 0x7ea833d0 (hwnd=0x20038,msg=WM_NCCREATE,wp=00000000,lp=0033e298) 0009:Ret window proc 0x7ea833d0 (hwnd=0x20038,msg=WM_NCCREATE,wp=00000000,lp=0033e298) retval=00000001 0009:Call window proc 0x7ea833d0 (hwnd=0x20038,msg=WM_NCCALCSIZE,wp=00000000,lp=0033e244) 0009:Ret window proc 0x7ea833d0 (hwnd=0x20038,msg=WM_NCCALCSIZE,wp=00000000,lp=0033e244) retval=00000300 0009:Call window proc 0x7ea833d0 (hwnd=0x20038,msg=WM_CREATE,wp=00000000,lp=0033e298) 0009:Ret window proc 0x7ea833d0 (hwnd=0x20038,msg=WM_CREATE,wp=00000000,lp=0033e298) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x20038,msg=WM_SIZE,wp=00000000,lp=001c0050) 0009:Ret window proc 0x7ea833d0 (hwnd=0x20038,msg=WM_SIZE,wp=00000000,lp=001c0050) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x20038,msg=WM_MOVE,wp=00000000,lp=00700320) 0009:Ret window proc 0x7ea833d0 (hwnd=0x20038,msg=WM_MOVE,wp=00000000,lp=00700320) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x20038,msg=WM_SHOWWINDOW,wp=00000001,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x20038,msg=WM_SHOWWINDOW,wp=00000001,lp=00000000) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x20038,msg=WM_GETDLGCODE,wp=00000000,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x20038,msg=WM_GETDLGCODE,wp=00000000,lp=00000000) retval=00002020 0009:Call window proc 0x7ea833d0 (hwnd=0x20036,msg=WM_NCCREATE,wp=00000000,lp=0033e298) 0009:Ret window proc 0x7ea833d0 (hwnd=0x20036,msg=WM_NCCREATE,wp=00000000,lp=0033e298) retval=00000001 0009:Call window proc 0x7ea833d0 (hwnd=0x20036,msg=WM_NCCALCSIZE,wp=00000000,lp=0033e244) 0009:Ret window proc 0x7ea833d0 (hwnd=0x20036,msg=WM_NCCALCSIZE,wp=00000000,lp=0033e244) retval=00000300 0009:Call window proc 0x7ea833d0 (hwnd=0x20036,msg=WM_CREATE,wp=00000000,lp=0033e298) 0009:Ret window proc 0x7ea833d0 (hwnd=0x20036,msg=WM_CREATE,wp=00000000,lp=0033e298) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x20036,msg=WM_SIZE,wp=00000000,lp=001c0050) 0009:Ret window proc 0x7ea833d0 (hwnd=0x20036,msg=WM_SIZE,wp=00000000,lp=001c0050) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x20036,msg=WM_MOVE,wp=00000000,lp=00700380) 0009:Ret window proc 0x7ea833d0 (hwnd=0x20036,msg=WM_MOVE,wp=00000000,lp=00700380) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x20036,msg=WM_SHOWWINDOW,wp=00000001,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x20036,msg=WM_SHOWWINDOW,wp=00000001,lp=00000000) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x20036,msg=WM_GETDLGCODE,wp=00000000,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x20036,msg=WM_GETDLGCODE,wp=00000000,lp=00000000) retval=00002020 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_INITDIALOG,wp=00000000,lp=0033e6fc) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_INITDIALOG,wp=00000000,lp=0033e6fc) 0009:Call window proc 0x7ea833d0 (hwnd=0x20048,msg=WM_SETFONT,wp=00002cc8,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x20048,msg=WM_SETFONT,wp=00002cc8,lp=00000000) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x20046,msg=WM_SETFONT,wp=00002cc8,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x20046,msg=WM_SETFONT,wp=00002cc8,lp=00000000) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x20044,msg=WM_SETFONT,wp=00002cc8,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x20044,msg=WM_SETFONT,wp=00002cc8,lp=00000000) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x20042,msg=WM_SETFONT,wp=00002cc8,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x20042,msg=WM_SETFONT,wp=00002cc8,lp=00000000) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x20040,msg=WM_SETFONT,wp=00002cc8,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x20040,msg=WM_SETFONT,wp=00002cc8,lp=00000000) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x2003e,msg=WM_SETFONT,wp=00002cc8,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003e,msg=WM_SETFONT,wp=00002cc8,lp=00000000) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_SETFONT,wp=00002cc8,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_SETFONT,wp=00002cc8,lp=00000000) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x20036,msg=WM_SETFONT,wp=00002cc8,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x20036,msg=WM_SETFONT,wp=00002cc8,lp=00000000) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x2003a,msg=WM_SETFONT,wp=00002cc8,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003a,msg=WM_SETFONT,wp=00002cc8,lp=00000000) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x20038,msg=WM_SETFONT,wp=00002cc8,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x20038,msg=WM_SETFONT,wp=00002cc8,lp=00000000) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x2004a,msg=WM_SETFONT,wp=00002cc8,lp=00000000) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x2004a,msg=WM_SETFONT,wp=00002cc8,lp=00000000) retval=00000000 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_SETTEXT,wp=00000000,lp=0033e7e4) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_SETTEXT,wp=00000000,lp=0033e7e4) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_SETTEXT,wp=00000000,lp=0033e7e4) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_SETTEXT,wp=00000000,lp=0033e7e4) retval=00000001 0009:Call window proc 0x7eaf1c70 (hwnd=0x2004a,msg=WM_SETTEXT,wp=00000000,lp=01011800) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x2004a,msg=WM_SETTEXT,wp=00000000,lp=01011800) retval=00000001 0009:Call window proc 0x7ea833d0 (hwnd=0x20048,msg=WM_SHOWWINDOW,wp=00000000,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x20048,msg=WM_SHOWWINDOW,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x20044,msg=WM_SHOWWINDOW,wp=00000000,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x20044,msg=WM_SHOWWINDOW,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x20042,msg=WM_SHOWWINDOW,wp=00000000,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x20042,msg=WM_SHOWWINDOW,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x20040,msg=WM_SHOWWINDOW,wp=00000000,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x20040,msg=WM_SHOWWINDOW,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x20038,msg=WM_SHOWWINDOW,wp=00000000,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x20038,msg=WM_SHOWWINDOW,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x2003a,msg=WM_SHOWWINDOW,wp=00000000,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003a,msg=WM_SHOWWINDOW,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x2004c,msg=STM_SETICON,wp=0000114e,lp=00000000) 0009:Call window proc 0x7eaf1c70 (hwnd=0x2004c,msg=WM_WINDOWPOSCHANGING,wp=00000000,lp=0033d260) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x2004c,msg=WM_WINDOWPOSCHANGING,wp=00000000,lp=0033d260) retval=00000000 0009:Ret window proc 0x7eaf1c70 (hwnd=0x2004c,msg=STM_SETICON,wp=0000114e,lp=00000000) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x20036,msg=WM_SHOWWINDOW,wp=00000000,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x20036,msg=WM_SHOWWINDOW,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x20046,msg=WM_GETTEXT,wp=00000400,lp=0033d5f0) 0009:Ret window proc 0x7ea833d0 (hwnd=0x20046,msg=WM_GETTEXT,wp=00000400,lp=0033d5f0) retval=00000007 0009:Call window proc 0x7ea833d0 (hwnd=0x2003e,msg=WM_GETTEXT,wp=00000400,lp=0033d5f0) 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003e,msg=WM_GETTEXT,wp=00000400,lp=0033d5f0) retval=00000004 0009:Call window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_GETTEXT,wp=00000400,lp=0033d5f0) 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_GETTEXT,wp=00000400,lp=0033d5f0) retval=00000003 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_WINDOWPOSCHANGING,wp=00000000,lp=0033d520) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_WINDOWPOSCHANGING,wp=00000000,lp=0033d520) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_WINDOWPOSCHANGING,wp=00000000,lp=0033d520) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_WINDOWPOSCHANGING,wp=00000000,lp=0033d520) retval=00000000 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_NCCALCSIZE,wp=00000001,lp=0033d43c) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_NCCALCSIZE,wp=00000001,lp=0033d43c) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_NCCALCSIZE,wp=00000001,lp=0033d43c) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_NCCALCSIZE,wp=00000001,lp=0033d43c) retval=00000000 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_WINDOWPOSCHANGED,wp=00000000,lp=0033d520) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_WINDOWPOSCHANGED,wp=00000000,lp=0033d520) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_WINDOWPOSCHANGED,wp=00000000,lp=0033d520) retval=00000000 result=00000000 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_MOVE,wp=00000000,lp=017001e3) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_MOVE,wp=00000000,lp=017001e3) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_MOVE,wp=00000000,lp=017001e3) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_MOVE,wp=00000000,lp=017001e3) retval=00000000 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_SIZE,wp=00000000,lp=00520139) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_SIZE,wp=00000000,lp=00520139) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_SIZE,wp=00000000,lp=00520139) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_SIZE,wp=00000000,lp=00520139) retval=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_WINDOWPOSCHANGED,wp=00000000,lp=0033d520) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x2004c,msg=WM_WINDOWPOSCHANGING,wp=00000000,lp=0033d520) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x2004c,msg=WM_WINDOWPOSCHANGING,wp=00000000,lp=0033d520) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x2004c,msg=WM_WINDOWPOSCHANGED,wp=00000000,lp=0033d520) 0009:Call window proc 0x7eaf1c70 (hwnd=0x2004c,msg=WM_MOVE,wp=00000000,lp=00080010) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x2004c,msg=WM_MOVE,wp=00000000,lp=00080010) retval=00000000 0009:Ret window proc 0x7eaf1c70 (hwnd=0x2004c,msg=WM_WINDOWPOSCHANGED,wp=00000000,lp=0033d520) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x2004a,msg=WM_WINDOWPOSCHANGING,wp=00000000,lp=0033d520) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x2004a,msg=WM_WINDOWPOSCHANGING,wp=00000000,lp=0033d520) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x2004a,msg=WM_NCCALCSIZE,wp=00000001,lp=0033d43c) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x2004a,msg=WM_NCCALCSIZE,wp=00000001,lp=0033d43c) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x2004a,msg=WM_WINDOWPOSCHANGED,wp=00000000,lp=0033d520) 0009:Call window proc 0x7eaf1c70 (hwnd=0x2004a,msg=WM_MOVE,wp=00000000,lp=00110040) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x2004a,msg=WM_MOVE,wp=00000000,lp=00110040) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x2004a,msg=WM_SIZE,wp=00000000,lp=000d00e9) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x2004a,msg=WM_SIZE,wp=00000000,lp=000d00e9) retval=00000000 0009:Ret window proc 0x7eaf1c70 (hwnd=0x2004a,msg=WM_WINDOWPOSCHANGED,wp=00000000,lp=0033d520) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x2003e,msg=WM_WINDOWPOSCHANGING,wp=00000000,lp=0033d520) 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003e,msg=WM_WINDOWPOSCHANGING,wp=00000000,lp=0033d520) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x2003e,msg=WM_NCCALCSIZE,wp=00000001,lp=0033d43c) 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003e,msg=WM_NCCALCSIZE,wp=00000001,lp=0033d43c) retval=00000300 0009:Call window proc 0x7ea833d0 (hwnd=0x2003e,msg=WM_WINDOWPOSCHANGED,wp=00000000,lp=0033d520) 0009:Call window proc 0x7ea833d0 (hwnd=0x2003e,msg=WM_MOVE,wp=00000000,lp=0030002a) 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003e,msg=WM_MOVE,wp=00000000,lp=0030002a) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x2003e,msg=WM_SIZE,wp=00000000,lp=001a0040) 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003e,msg=WM_SIZE,wp=00000000,lp=001a0040) retval=00000000 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003e,msg=WM_WINDOWPOSCHANGED,wp=00000000,lp=0033d520) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_WINDOWPOSCHANGING,wp=00000000,lp=0033d520) 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_WINDOWPOSCHANGING,wp=00000000,lp=0033d520) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_NCCALCSIZE,wp=00000001,lp=0033d43c) 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_NCCALCSIZE,wp=00000001,lp=0033d43c) retval=00000300 0009:Call window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_WINDOWPOSCHANGED,wp=00000000,lp=0033d520) 0009:Call window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_MOVE,wp=00000000,lp=0030007f) 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_MOVE,wp=00000000,lp=0030007f) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_SIZE,wp=00000000,lp=001a0040) 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_SIZE,wp=00000000,lp=001a0040) retval=00000000 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_WINDOWPOSCHANGED,wp=00000000,lp=0033d520) retval=00000000 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCACTIVATE,wp=00000000,lp=00020032) 0009:Call user32.DefWindowProcW(00010030,00000086,00000000,00020032) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCACTIVATE,wp=00000000,lp=00020032) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_ACTIVATE,wp=00000000,lp=00020032) 0009:Call user32.DefWindowProcW(00010030,00000006,00000000,00020032) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_ACTIVATE,wp=00000000,lp=00020032) retval=00000000 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_QUERYNEWPALETTE,wp=00000000,lp=00000000) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_QUERYNEWPALETTE,wp=00000000,lp=00000000) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_QUERYNEWPALETTE,wp=00000000,lp=00000000) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_QUERYNEWPALETTE,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_NCACTIVATE,wp=00000001,lp=00010030) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_NCACTIVATE,wp=00000001,lp=00010030) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_NCACTIVATE,wp=00000001,lp=00010030) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_NCACTIVATE,wp=00000001,lp=00010030) retval=00000001 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_ACTIVATE,wp=00000001,lp=00010030) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_ACTIVATE,wp=00000001,lp=00010030) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_ACTIVATE,wp=00000001,lp=00010030) retval=00000000 result=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x20046,msg=WM_GETDLGCODE,wp=00000000,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x20046,msg=WM_GETDLGCODE,wp=00000000,lp=00000000) retval=00002020 0009:Call window proc 0x7ea833d0 (hwnd=0x20046,msg=WM_SETFOCUS,wp=00000000,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x20046,msg=WM_SETFOCUS,wp=00000000,lp=00000000) retval=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_ACTIVATE,wp=00000001,lp=00010030) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x20046,msg=BM_SETSTYLE,wp=00000001,lp=00000001) 0009:Ret window proc 0x7ea833d0 (hwnd=0x20046,msg=BM_SETSTYLE,wp=00000001,lp=00000001) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x20046,msg=WM_WINDOWPOSCHANGING,wp=00000000,lp=0033d520) 0009:Ret window proc 0x7ea833d0 (hwnd=0x20046,msg=WM_WINDOWPOSCHANGING,wp=00000000,lp=0033d520) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x20046,msg=WM_NCCALCSIZE,wp=00000001,lp=0033d43c) 0009:Ret window proc 0x7ea833d0 (hwnd=0x20046,msg=WM_NCCALCSIZE,wp=00000001,lp=0033d43c) retval=00000300 0009:Call window proc 0x7ea833d0 (hwnd=0x20046,msg=WM_WINDOWPOSCHANGED,wp=00000000,lp=0033d520) 0009:Call window proc 0x7ea833d0 (hwnd=0x20046,msg=WM_MOVE,wp=00000000,lp=003000d4) 0009:Ret window proc 0x7ea833d0 (hwnd=0x20046,msg=WM_MOVE,wp=00000000,lp=003000d4) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x20046,msg=WM_SIZE,wp=00000000,lp=001a0040) 0009:Ret window proc 0x7ea833d0 (hwnd=0x20046,msg=WM_SIZE,wp=00000000,lp=001a0040) retval=00000000 0009:Ret window proc 0x7ea833d0 (hwnd=0x20046,msg=WM_WINDOWPOSCHANGED,wp=00000000,lp=0033d520) retval=00000000 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_INITDIALOG,wp=00000000,lp=0033e6fc) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_INITDIALOG,wp=00000000,lp=0033e6fc) retval=00000000 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_SHOWWINDOW,wp=00000001,lp=00000000) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_SHOWWINDOW,wp=00000001,lp=00000000) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_SHOWWINDOW,wp=00000001,lp=00000000) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_SHOWWINDOW,wp=00000001,lp=00000000) retval=00000000 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_WINDOWPOSCHANGING,wp=00000000,lp=0033e210) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_WINDOWPOSCHANGING,wp=00000000,lp=0033e210) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_WINDOWPOSCHANGING,wp=00000000,lp=0033e210) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_WINDOWPOSCHANGING,wp=00000000,lp=0033e210) retval=00000000 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_GETICON,wp=00000001,lp=00000000) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_GETICON,wp=00000001,lp=00000000) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_GETICON,wp=00000001,lp=00000000) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_GETICON,wp=00000001,lp=00000000) retval=00000000 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_WINDOWPOSCHANGED,wp=00000000,lp=0033e210) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_WINDOWPOSCHANGED,wp=00000000,lp=0033e210) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_WINDOWPOSCHANGED,wp=00000000,lp=0033e210) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_WINDOWPOSCHANGED,wp=00000000,lp=0033e210) retval=00000000 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_PAINT,wp=00000000,lp=00000000) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_PAINT,wp=00000000,lp=00000000) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_PAINT,wp=00000000,lp=00000000) retval=00000000 result=00000000 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_NCPAINT,wp=00000001,lp=00000000) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_NCPAINT,wp=00000001,lp=00000000) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_NCPAINT,wp=00000001,lp=00000000) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_NCPAINT,wp=00000001,lp=00000000) retval=00000000 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_ERASEBKGND,wp=00000314,lp=00000000) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_ERASEBKGND,wp=00000314,lp=00000000) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_ERASEBKGND,wp=00000314,lp=00000000) retval=00000000 result=00000000 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_CTLCOLORDLG,wp=00000314,lp=00020032) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_CTLCOLORDLG,wp=00000314,lp=00020032) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_CTLCOLORDLG,wp=00000314,lp=00020032) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_CTLCOLORDLG,wp=00000314,lp=00020032) retval=0000010c 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_ERASEBKGND,wp=00000314,lp=00000000) retval=00000001 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_PAINT,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x2004c,msg=WM_PAINT,wp=00000000,lp=00000000) 0009:Call window proc 0x7eaf1c70 (hwnd=0x2004c,msg=WM_NCPAINT,wp=00000001,lp=00000000) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x2004c,msg=WM_NCPAINT,wp=00000001,lp=00000000) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x2004c,msg=WM_ERASEBKGND,wp=00000314,lp=00000000) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x2004c,msg=WM_ERASEBKGND,wp=00000314,lp=00000000) retval=00000001 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_CTLCOLORSTATIC,wp=00000314,lp=0002004c) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_CTLCOLORSTATIC,wp=00000314,lp=0002004c) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_CTLCOLORSTATIC,wp=00000314,lp=0002004c) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_CTLCOLORSTATIC,wp=00000314,lp=0002004c) retval=0000010c 0009:Ret window proc 0x7eaf1c70 (hwnd=0x2004c,msg=WM_PAINT,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x2004a,msg=WM_PAINT,wp=00000000,lp=00000000) 0009:Call window proc 0x7eaf1c70 (hwnd=0x2004a,msg=WM_NCPAINT,wp=00000001,lp=00000000) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x2004a,msg=WM_NCPAINT,wp=00000001,lp=00000000) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x2004a,msg=WM_ERASEBKGND,wp=00000314,lp=00000000) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x2004a,msg=WM_ERASEBKGND,wp=00000314,lp=00000000) retval=00000001 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_CTLCOLORSTATIC,wp=00000314,lp=0002004a) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_CTLCOLORSTATIC,wp=00000314,lp=0002004a) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_CTLCOLORSTATIC,wp=00000314,lp=0002004a) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_CTLCOLORSTATIC,wp=00000314,lp=0002004a) retval=0000010c 0009:Ret window proc 0x7eaf1c70 (hwnd=0x2004a,msg=WM_PAINT,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x20046,msg=WM_PAINT,wp=00000000,lp=00000000) 0009:Call window proc 0x7ea833d0 (hwnd=0x20046,msg=WM_NCPAINT,wp=00000001,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x20046,msg=WM_NCPAINT,wp=00000001,lp=00000000) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x20046,msg=WM_ERASEBKGND,wp=00000314,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x20046,msg=WM_ERASEBKGND,wp=00000314,lp=00000000) retval=00000001 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_CTLCOLORBTN,wp=00000314,lp=00020046) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_CTLCOLORBTN,wp=00000314,lp=00020046) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_CTLCOLORBTN,wp=00000314,lp=00020046) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_CTLCOLORBTN,wp=00000314,lp=00020046) retval=0000010c 0009:Ret window proc 0x7ea833d0 (hwnd=0x20046,msg=WM_PAINT,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x2003e,msg=WM_PAINT,wp=00000000,lp=00000000) 0009:Call window proc 0x7ea833d0 (hwnd=0x2003e,msg=WM_NCPAINT,wp=00000001,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003e,msg=WM_NCPAINT,wp=00000001,lp=00000000) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x2003e,msg=WM_ERASEBKGND,wp=00000314,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003e,msg=WM_ERASEBKGND,wp=00000314,lp=00000000) retval=00000001 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_CTLCOLORBTN,wp=00000314,lp=0002003e) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_CTLCOLORBTN,wp=00000314,lp=0002003e) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_CTLCOLORBTN,wp=00000314,lp=0002003e) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_CTLCOLORBTN,wp=00000314,lp=0002003e) retval=0000010c 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003e,msg=WM_PAINT,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_PAINT,wp=00000000,lp=00000000) 0009:Call window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_NCPAINT,wp=00000001,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_NCPAINT,wp=00000001,lp=00000000) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_ERASEBKGND,wp=00000314,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_ERASEBKGND,wp=00000314,lp=00000000) retval=00000001 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_CTLCOLORBTN,wp=00000314,lp=0002003c) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_CTLCOLORBTN,wp=00000314,lp=0002003c) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_CTLCOLORBTN,wp=00000314,lp=0002003c) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_CTLCOLORBTN,wp=00000314,lp=0002003c) retval=0000010c 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_PAINT,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_MOUSEACTIVATE,wp=00020032,lp=02010002) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_MOUSEACTIVATE,wp=00020032,lp=02010002) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_MOUSEACTIVATE,wp=00020032,lp=02010002) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_MOUSEACTIVATE,wp=00020032,lp=02010002) retval=00000001 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_PAINT,wp=00000000,lp=00000000) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_PAINT,wp=00000000,lp=00000000) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_PAINT,wp=00000000,lp=00000000) retval=00000000 result=00000000 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_ERASEBKGND,wp=00000314,lp=00000000) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_ERASEBKGND,wp=00000314,lp=00000000) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_ERASEBKGND,wp=00000314,lp=00000000) retval=00000000 result=00000000 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_CTLCOLORDLG,wp=00000314,lp=00020032) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_CTLCOLORDLG,wp=00000314,lp=00020032) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_CTLCOLORDLG,wp=00000314,lp=00020032) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_CTLCOLORDLG,wp=00000314,lp=00020032) retval=0000010c 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_ERASEBKGND,wp=00000314,lp=00000000) retval=00000001 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_PAINT,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x2004c,msg=WM_PAINT,wp=00000000,lp=00000000) 0009:Call window proc 0x7eaf1c70 (hwnd=0x2004c,msg=WM_NCPAINT,wp=00000001,lp=00000000) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x2004c,msg=WM_NCPAINT,wp=00000001,lp=00000000) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x2004c,msg=WM_ERASEBKGND,wp=00000314,lp=00000000) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x2004c,msg=WM_ERASEBKGND,wp=00000314,lp=00000000) retval=00000001 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_CTLCOLORSTATIC,wp=00000314,lp=0002004c) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_CTLCOLORSTATIC,wp=00000314,lp=0002004c) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_CTLCOLORSTATIC,wp=00000314,lp=0002004c) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_CTLCOLORSTATIC,wp=00000314,lp=0002004c) retval=0000010c 0009:Ret window proc 0x7eaf1c70 (hwnd=0x2004c,msg=WM_PAINT,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x2004a,msg=WM_PAINT,wp=00000000,lp=00000000) 0009:Call window proc 0x7eaf1c70 (hwnd=0x2004a,msg=WM_NCPAINT,wp=00000001,lp=00000000) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x2004a,msg=WM_NCPAINT,wp=00000001,lp=00000000) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x2004a,msg=WM_ERASEBKGND,wp=00000314,lp=00000000) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x2004a,msg=WM_ERASEBKGND,wp=00000314,lp=00000000) retval=00000001 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_CTLCOLORSTATIC,wp=00000314,lp=0002004a) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_CTLCOLORSTATIC,wp=00000314,lp=0002004a) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_CTLCOLORSTATIC,wp=00000314,lp=0002004a) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_CTLCOLORSTATIC,wp=00000314,lp=0002004a) retval=0000010c 0009:Ret window proc 0x7eaf1c70 (hwnd=0x2004a,msg=WM_PAINT,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x20046,msg=WM_PAINT,wp=00000000,lp=00000000) 0009:Call window proc 0x7ea833d0 (hwnd=0x20046,msg=WM_NCPAINT,wp=00000001,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x20046,msg=WM_NCPAINT,wp=00000001,lp=00000000) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x20046,msg=WM_ERASEBKGND,wp=00000314,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x20046,msg=WM_ERASEBKGND,wp=00000314,lp=00000000) retval=00000001 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_CTLCOLORBTN,wp=00000314,lp=00020046) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_CTLCOLORBTN,wp=00000314,lp=00020046) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_CTLCOLORBTN,wp=00000314,lp=00020046) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_CTLCOLORBTN,wp=00000314,lp=00020046) retval=0000010c 0009:Ret window proc 0x7ea833d0 (hwnd=0x20046,msg=WM_PAINT,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x2003e,msg=WM_PAINT,wp=00000000,lp=00000000) 0009:Call window proc 0x7ea833d0 (hwnd=0x2003e,msg=WM_NCPAINT,wp=00000001,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003e,msg=WM_NCPAINT,wp=00000001,lp=00000000) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x2003e,msg=WM_ERASEBKGND,wp=00000314,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003e,msg=WM_ERASEBKGND,wp=00000314,lp=00000000) retval=00000001 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_CTLCOLORBTN,wp=00000314,lp=0002003e) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_CTLCOLORBTN,wp=00000314,lp=0002003e) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_CTLCOLORBTN,wp=00000314,lp=0002003e) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_CTLCOLORBTN,wp=00000314,lp=0002003e) retval=0000010c 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003e,msg=WM_PAINT,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_PAINT,wp=00000000,lp=00000000) 0009:Call window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_NCPAINT,wp=00000001,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_NCPAINT,wp=00000001,lp=00000000) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_ERASEBKGND,wp=00000314,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_ERASEBKGND,wp=00000314,lp=00000000) retval=00000001 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_CTLCOLORBTN,wp=00000314,lp=0002003c) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_CTLCOLORBTN,wp=00000314,lp=0002003c) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_CTLCOLORBTN,wp=00000314,lp=0002003c) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_CTLCOLORBTN,wp=00000314,lp=0002003c) retval=0000010c 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_PAINT,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=0200fffe) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,0200fffe) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=0200fffe) retval=00000000 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=0200fffe) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,0200fffe) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=0200fffe) retval=00000000 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=0200fffe) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,0200fffe) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=0200fffe) retval=00000000 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=0200fffe) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,0200fffe) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=0200fffe) retval=00000000 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=0200fffe) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,0200fffe) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=0200fffe) retval=00000000 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=0200fffe) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,0200fffe) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=0200fffe) retval=00000000 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=0200fffe) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,0200fffe) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=0200fffe) retval=00000000 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=0200fffe) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,0200fffe) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=0200fffe) retval=00000000 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=0200fffe) 0009:Call user32.DefWindowProcW(00010030,00000020,00010030,0200fffe) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETCURSOR,wp=00010030,lp=0200fffe) retval=00000000 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_NCHITTEST,wp=00000000,lp=01a402fd) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_NCHITTEST,wp=00000000,lp=01a402fd) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_NCHITTEST,wp=00000000,lp=01a402fd) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_NCHITTEST,wp=00000000,lp=01a402fd) retval=00000001 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_SETCURSOR,wp=00020032,lp=02000001) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_SETCURSOR,wp=00020032,lp=02000001) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_SETCURSOR,wp=00020032,lp=02000001) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_SETCURSOR,wp=00020032,lp=02000001) retval=00000000 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_MOUSEMOVE,wp=00000000,lp=0034011a) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_MOUSEMOVE,wp=00000000,lp=0034011a) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_MOUSEMOVE,wp=00000000,lp=0034011a) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_MOUSEMOVE,wp=00000000,lp=0034011a) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x20046,msg=WM_NCHITTEST,wp=00000000,lp=01b602c9) 0009:Ret window proc 0x7ea833d0 (hwnd=0x20046,msg=WM_NCHITTEST,wp=00000000,lp=01b602c9) retval=00000001 0009:Call window proc 0x7ea833d0 (hwnd=0x20046,msg=WM_SETCURSOR,wp=00020046,lp=02000001) 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_SETCURSOR,wp=00020046,lp=02000001) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_SETCURSOR,wp=00020046,lp=02000001) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_SETCURSOR,wp=00020046,lp=02000001) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_SETCURSOR,wp=00020046,lp=02000001) retval=00000000 0009:Ret window proc 0x7ea833d0 (hwnd=0x20046,msg=WM_SETCURSOR,wp=00020046,lp=02000001) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x20046,msg=WM_MOUSEMOVE,wp=00000000,lp=00160012) 0009:Ret window proc 0x7ea833d0 (hwnd=0x20046,msg=WM_MOUSEMOVE,wp=00000000,lp=00160012) retval=00000000 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_NCHITTEST,wp=00000000,lp=01be02a3) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_NCHITTEST,wp=00000000,lp=01be02a3) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_NCHITTEST,wp=00000000,lp=01be02a3) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_NCHITTEST,wp=00000000,lp=01be02a3) retval=00000001 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_SETCURSOR,wp=00020032,lp=02000001) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_SETCURSOR,wp=00020032,lp=02000001) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_SETCURSOR,wp=00020032,lp=02000001) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_SETCURSOR,wp=00020032,lp=02000001) retval=00000000 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_MOUSEMOVE,wp=00000000,lp=004e00c0) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_MOUSEMOVE,wp=00000000,lp=004e00c0) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_MOUSEMOVE,wp=00000000,lp=004e00c0) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_MOUSEMOVE,wp=00000000,lp=004e00c0) retval=00000000 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_NCHITTEST,wp=00000000,lp=01c0028d) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_NCHITTEST,wp=00000000,lp=01c0028d) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_NCHITTEST,wp=00000000,lp=01c0028d) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_NCHITTEST,wp=00000000,lp=01c0028d) retval=00000001 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_SETCURSOR,wp=00020032,lp=02000001) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_SETCURSOR,wp=00020032,lp=02000001) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_SETCURSOR,wp=00020032,lp=02000001) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_SETCURSOR,wp=00020032,lp=02000001) retval=00000000 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_MOUSEMOVE,wp=00000000,lp=005000aa) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_MOUSEMOVE,wp=00000000,lp=005000aa) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_MOUSEMOVE,wp=00000000,lp=005000aa) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_MOUSEMOVE,wp=00000000,lp=005000aa) retval=00000000 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_NCHITTEST,wp=00000000,lp=01c00281) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_NCHITTEST,wp=00000000,lp=01c00281) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_NCHITTEST,wp=00000000,lp=01c00281) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_NCHITTEST,wp=00000000,lp=01c00281) retval=00000001 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_SETCURSOR,wp=00020032,lp=02000001) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_SETCURSOR,wp=00020032,lp=02000001) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_SETCURSOR,wp=00020032,lp=02000001) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_SETCURSOR,wp=00020032,lp=02000001) retval=00000000 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_MOUSEMOVE,wp=00000000,lp=0050009e) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_MOUSEMOVE,wp=00000000,lp=0050009e) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_MOUSEMOVE,wp=00000000,lp=0050009e) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_MOUSEMOVE,wp=00000000,lp=0050009e) retval=00000000 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_NCHITTEST,wp=00000000,lp=01be027b) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_NCHITTEST,wp=00000000,lp=01be027b) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_NCHITTEST,wp=00000000,lp=01be027b) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_NCHITTEST,wp=00000000,lp=01be027b) retval=00000001 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_SETCURSOR,wp=00020032,lp=02000001) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_SETCURSOR,wp=00020032,lp=02000001) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_SETCURSOR,wp=00020032,lp=02000001) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_SETCURSOR,wp=00020032,lp=02000001) retval=00000000 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_MOUSEMOVE,wp=00000000,lp=004e0098) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_MOUSEMOVE,wp=00000000,lp=004e0098) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_MOUSEMOVE,wp=00000000,lp=004e0098) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_MOUSEMOVE,wp=00000000,lp=004e0098) retval=00000000 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_NCHITTEST,wp=00000000,lp=01be027a) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_NCHITTEST,wp=00000000,lp=01be027a) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_NCHITTEST,wp=00000000,lp=01be027a) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_NCHITTEST,wp=00000000,lp=01be027a) retval=00000001 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_SETCURSOR,wp=00020032,lp=02000001) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_SETCURSOR,wp=00020032,lp=02000001) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_SETCURSOR,wp=00020032,lp=02000001) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_SETCURSOR,wp=00020032,lp=02000001) retval=00000000 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_MOUSEMOVE,wp=00000000,lp=004e0097) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_MOUSEMOVE,wp=00000000,lp=004e0097) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_MOUSEMOVE,wp=00000000,lp=004e0097) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_MOUSEMOVE,wp=00000000,lp=004e0097) retval=00000000 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_NCHITTEST,wp=00000000,lp=01be0278) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_NCHITTEST,wp=00000000,lp=01be0278) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_NCHITTEST,wp=00000000,lp=01be0278) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_NCHITTEST,wp=00000000,lp=01be0278) retval=00000001 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_SETCURSOR,wp=00020032,lp=02000001) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_SETCURSOR,wp=00020032,lp=02000001) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_SETCURSOR,wp=00020032,lp=02000001) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_SETCURSOR,wp=00020032,lp=02000001) retval=00000000 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_MOUSEMOVE,wp=00000000,lp=004e0095) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_MOUSEMOVE,wp=00000000,lp=004e0095) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_MOUSEMOVE,wp=00000000,lp=004e0095) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_MOUSEMOVE,wp=00000000,lp=004e0095) retval=00000000 0019:Ret user32.GetMessageW() retval=00000001 ret=7ec5ec4b 0019:Call user32.DispatchMessageW(0033f93c) ret=7ec5ec28 0019:Call window proc 0x7ec60b80 (hwnd=0x10026,msg=WM_TIMER,wp=00000001,lp=00000000) 0019:Ret window proc 0x7ec60b80 (hwnd=0x10026,msg=WM_TIMER,wp=00000001,lp=00000000) retval=00000000 0019:Ret user32.DispatchMessageW() retval=00000000 ret=7ec5ec28 0019:Call user32.GetMessageW(0033f93c,00000000,00000000,00000000) ret=7ec5ec4b 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_NCHITTEST,wp=00000000,lp=01be0275) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_NCHITTEST,wp=00000000,lp=01be0275) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_NCHITTEST,wp=00000000,lp=01be0275) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_NCHITTEST,wp=00000000,lp=01be0275) retval=00000001 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_SETCURSOR,wp=00020032,lp=02000001) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_SETCURSOR,wp=00020032,lp=02000001) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_SETCURSOR,wp=00020032,lp=02000001) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_SETCURSOR,wp=00020032,lp=02000001) retval=00000000 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_MOUSEMOVE,wp=00000000,lp=004e0092) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_MOUSEMOVE,wp=00000000,lp=004e0092) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_MOUSEMOVE,wp=00000000,lp=004e0092) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_MOUSEMOVE,wp=00000000,lp=004e0092) retval=00000000 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_NCHITTEST,wp=00000000,lp=01bd0273) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_NCHITTEST,wp=00000000,lp=01bd0273) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_NCHITTEST,wp=00000000,lp=01bd0273) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_NCHITTEST,wp=00000000,lp=01bd0273) retval=00000001 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_SETCURSOR,wp=00020032,lp=02000001) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_SETCURSOR,wp=00020032,lp=02000001) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_SETCURSOR,wp=00020032,lp=02000001) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_SETCURSOR,wp=00020032,lp=02000001) retval=00000000 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_MOUSEMOVE,wp=00000000,lp=004d0090) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_MOUSEMOVE,wp=00000000,lp=004d0090) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_MOUSEMOVE,wp=00000000,lp=004d0090) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_MOUSEMOVE,wp=00000000,lp=004d0090) retval=00000000 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_NCHITTEST,wp=00000000,lp=01bb026d) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_NCHITTEST,wp=00000000,lp=01bb026d) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_NCHITTEST,wp=00000000,lp=01bb026d) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_NCHITTEST,wp=00000000,lp=01bb026d) retval=00000001 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_SETCURSOR,wp=00020032,lp=02000001) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_SETCURSOR,wp=00020032,lp=02000001) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_SETCURSOR,wp=00020032,lp=02000001) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_SETCURSOR,wp=00020032,lp=02000001) retval=00000000 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_MOUSEMOVE,wp=00000000,lp=004b008a) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_MOUSEMOVE,wp=00000000,lp=004b008a) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_MOUSEMOVE,wp=00000000,lp=004b008a) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_MOUSEMOVE,wp=00000000,lp=004b008a) retval=00000000 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_NCHITTEST,wp=00000000,lp=01ba026c) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_NCHITTEST,wp=00000000,lp=01ba026c) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_NCHITTEST,wp=00000000,lp=01ba026c) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_NCHITTEST,wp=00000000,lp=01ba026c) retval=00000001 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_SETCURSOR,wp=00020032,lp=02000001) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_SETCURSOR,wp=00020032,lp=02000001) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_SETCURSOR,wp=00020032,lp=02000001) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_SETCURSOR,wp=00020032,lp=02000001) retval=00000000 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_MOUSEMOVE,wp=00000000,lp=004a0089) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_MOUSEMOVE,wp=00000000,lp=004a0089) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_MOUSEMOVE,wp=00000000,lp=004a0089) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_MOUSEMOVE,wp=00000000,lp=004a0089) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_NCHITTEST,wp=00000000,lp=01b9026b) 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_NCHITTEST,wp=00000000,lp=01b9026b) retval=00000001 0009:Call window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_SETCURSOR,wp=0002003c,lp=02000001) 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_SETCURSOR,wp=0002003c,lp=02000001) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_SETCURSOR,wp=0002003c,lp=02000001) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_SETCURSOR,wp=0002003c,lp=02000001) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_SETCURSOR,wp=0002003c,lp=02000001) retval=00000000 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_SETCURSOR,wp=0002003c,lp=02000001) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_MOUSEMOVE,wp=00000000,lp=00190009) 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_MOUSEMOVE,wp=00000000,lp=00190009) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_NCHITTEST,wp=00000000,lp=01b9026a) 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_NCHITTEST,wp=00000000,lp=01b9026a) retval=00000001 0009:Call window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_SETCURSOR,wp=0002003c,lp=02000001) 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_SETCURSOR,wp=0002003c,lp=02000001) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_SETCURSOR,wp=0002003c,lp=02000001) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_SETCURSOR,wp=0002003c,lp=02000001) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_SETCURSOR,wp=0002003c,lp=02000001) retval=00000000 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_SETCURSOR,wp=0002003c,lp=02000001) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_MOUSEMOVE,wp=00000000,lp=00190008) 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_MOUSEMOVE,wp=00000000,lp=00190008) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_NCHITTEST,wp=00000000,lp=01b90269) 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_NCHITTEST,wp=00000000,lp=01b90269) retval=00000001 0009:Call window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_SETCURSOR,wp=0002003c,lp=02000001) 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_SETCURSOR,wp=0002003c,lp=02000001) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_SETCURSOR,wp=0002003c,lp=02000001) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_SETCURSOR,wp=0002003c,lp=02000001) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_SETCURSOR,wp=0002003c,lp=02000001) retval=00000000 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_SETCURSOR,wp=0002003c,lp=02000001) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_MOUSEMOVE,wp=00000000,lp=00190007) 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_MOUSEMOVE,wp=00000000,lp=00190007) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_NCHITTEST,wp=00000000,lp=01b90268) 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_NCHITTEST,wp=00000000,lp=01b90268) retval=00000001 0009:Call window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_SETCURSOR,wp=0002003c,lp=02000001) 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_SETCURSOR,wp=0002003c,lp=02000001) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_SETCURSOR,wp=0002003c,lp=02000001) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_SETCURSOR,wp=0002003c,lp=02000001) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_SETCURSOR,wp=0002003c,lp=02000001) retval=00000000 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_SETCURSOR,wp=0002003c,lp=02000001) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_MOUSEMOVE,wp=00000000,lp=00190006) 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_MOUSEMOVE,wp=00000000,lp=00190006) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_NCHITTEST,wp=00000000,lp=01b90266) 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_NCHITTEST,wp=00000000,lp=01b90266) retval=00000001 0009:Call window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_SETCURSOR,wp=0002003c,lp=02000001) 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_SETCURSOR,wp=0002003c,lp=02000001) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_SETCURSOR,wp=0002003c,lp=02000001) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_SETCURSOR,wp=0002003c,lp=02000001) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_SETCURSOR,wp=0002003c,lp=02000001) retval=00000000 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_SETCURSOR,wp=0002003c,lp=02000001) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_MOUSEMOVE,wp=00000000,lp=00190004) 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_MOUSEMOVE,wp=00000000,lp=00190004) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_NCHITTEST,wp=00000000,lp=01b90264) 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_NCHITTEST,wp=00000000,lp=01b90264) retval=00000001 0009:Call window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_SETCURSOR,wp=0002003c,lp=02000001) 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_SETCURSOR,wp=0002003c,lp=02000001) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_SETCURSOR,wp=0002003c,lp=02000001) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_SETCURSOR,wp=0002003c,lp=02000001) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_SETCURSOR,wp=0002003c,lp=02000001) retval=00000000 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_SETCURSOR,wp=0002003c,lp=02000001) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_MOUSEMOVE,wp=00000000,lp=00190002) 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_MOUSEMOVE,wp=00000000,lp=00190002) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_NCHITTEST,wp=00000000,lp=01b90262) 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_NCHITTEST,wp=00000000,lp=01b90262) retval=00000001 0009:Call window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_SETCURSOR,wp=0002003c,lp=02000001) 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_SETCURSOR,wp=0002003c,lp=02000001) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_SETCURSOR,wp=0002003c,lp=02000001) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_SETCURSOR,wp=0002003c,lp=02000001) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_SETCURSOR,wp=0002003c,lp=02000001) retval=00000000 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_SETCURSOR,wp=0002003c,lp=02000001) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_MOUSEMOVE,wp=00000000,lp=00190000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_MOUSEMOVE,wp=00000000,lp=00190000) retval=00000000 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_NCHITTEST,wp=00000000,lp=01b90260) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_NCHITTEST,wp=00000000,lp=01b90260) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_NCHITTEST,wp=00000000,lp=01b90260) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_NCHITTEST,wp=00000000,lp=01b90260) retval=00000001 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_SETCURSOR,wp=00020032,lp=02000001) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_SETCURSOR,wp=00020032,lp=02000001) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_SETCURSOR,wp=00020032,lp=02000001) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_SETCURSOR,wp=00020032,lp=02000001) retval=00000000 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_MOUSEMOVE,wp=00000000,lp=0049007d) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_MOUSEMOVE,wp=00000000,lp=0049007d) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_MOUSEMOVE,wp=00000000,lp=0049007d) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_MOUSEMOVE,wp=00000000,lp=0049007d) retval=00000000 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_NCHITTEST,wp=00000000,lp=01b8025e) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_NCHITTEST,wp=00000000,lp=01b8025e) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_NCHITTEST,wp=00000000,lp=01b8025e) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_NCHITTEST,wp=00000000,lp=01b8025e) retval=00000001 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_SETCURSOR,wp=00020032,lp=02000001) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_SETCURSOR,wp=00020032,lp=02000001) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_SETCURSOR,wp=00020032,lp=02000001) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_SETCURSOR,wp=00020032,lp=02000001) retval=00000000 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_MOUSEMOVE,wp=00000000,lp=0048007b) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_MOUSEMOVE,wp=00000000,lp=0048007b) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_MOUSEMOVE,wp=00000000,lp=0048007b) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_MOUSEMOVE,wp=00000000,lp=0048007b) retval=00000000 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_NCHITTEST,wp=00000000,lp=01b7025e) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_NCHITTEST,wp=00000000,lp=01b7025e) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_NCHITTEST,wp=00000000,lp=01b7025e) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_NCHITTEST,wp=00000000,lp=01b7025e) retval=00000001 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_SETCURSOR,wp=00020032,lp=02000001) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_SETCURSOR,wp=00020032,lp=02000001) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_SETCURSOR,wp=00020032,lp=02000001) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_SETCURSOR,wp=00020032,lp=02000001) retval=00000000 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_MOUSEMOVE,wp=00000000,lp=0047007b) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_MOUSEMOVE,wp=00000000,lp=0047007b) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_MOUSEMOVE,wp=00000000,lp=0047007b) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_MOUSEMOVE,wp=00000000,lp=0047007b) retval=00000000 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_NCHITTEST,wp=00000000,lp=01b6025d) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_NCHITTEST,wp=00000000,lp=01b6025d) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_NCHITTEST,wp=00000000,lp=01b6025d) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_NCHITTEST,wp=00000000,lp=01b6025d) retval=00000001 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_SETCURSOR,wp=00020032,lp=02000001) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_SETCURSOR,wp=00020032,lp=02000001) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_SETCURSOR,wp=00020032,lp=02000001) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_SETCURSOR,wp=00020032,lp=02000001) retval=00000000 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_MOUSEMOVE,wp=00000000,lp=0046007a) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_MOUSEMOVE,wp=00000000,lp=0046007a) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_MOUSEMOVE,wp=00000000,lp=0046007a) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_MOUSEMOVE,wp=00000000,lp=0046007a) retval=00000000 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_NCHITTEST,wp=00000000,lp=01b5025d) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_NCHITTEST,wp=00000000,lp=01b5025d) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_NCHITTEST,wp=00000000,lp=01b5025d) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_NCHITTEST,wp=00000000,lp=01b5025d) retval=00000001 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_SETCURSOR,wp=00020032,lp=02000001) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_SETCURSOR,wp=00020032,lp=02000001) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_SETCURSOR,wp=00020032,lp=02000001) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_SETCURSOR,wp=00020032,lp=02000001) retval=00000000 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_MOUSEMOVE,wp=00000000,lp=0045007a) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_MOUSEMOVE,wp=00000000,lp=0045007a) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_MOUSEMOVE,wp=00000000,lp=0045007a) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_MOUSEMOVE,wp=00000000,lp=0045007a) retval=00000000 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_NCHITTEST,wp=00000000,lp=01b4025d) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_NCHITTEST,wp=00000000,lp=01b4025d) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_NCHITTEST,wp=00000000,lp=01b4025d) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_NCHITTEST,wp=00000000,lp=01b4025d) retval=00000001 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_SETCURSOR,wp=00020032,lp=02000001) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_SETCURSOR,wp=00020032,lp=02000001) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_SETCURSOR,wp=00020032,lp=02000001) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_SETCURSOR,wp=00020032,lp=02000001) retval=00000000 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_MOUSEMOVE,wp=00000000,lp=0044007a) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_MOUSEMOVE,wp=00000000,lp=0044007a) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_MOUSEMOVE,wp=00000000,lp=0044007a) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_MOUSEMOVE,wp=00000000,lp=0044007a) retval=00000000 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_NCHITTEST,wp=00000000,lp=01b40260) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_NCHITTEST,wp=00000000,lp=01b40260) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_NCHITTEST,wp=00000000,lp=01b40260) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_NCHITTEST,wp=00000000,lp=01b40260) retval=00000001 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_SETCURSOR,wp=00020032,lp=02000001) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_SETCURSOR,wp=00020032,lp=02000001) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_SETCURSOR,wp=00020032,lp=02000001) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_SETCURSOR,wp=00020032,lp=02000001) retval=00000000 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_MOUSEMOVE,wp=00000000,lp=0044007d) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_MOUSEMOVE,wp=00000000,lp=0044007d) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_MOUSEMOVE,wp=00000000,lp=0044007d) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_MOUSEMOVE,wp=00000000,lp=0044007d) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_NCHITTEST,wp=00000000,lp=01b2026c) 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_NCHITTEST,wp=00000000,lp=01b2026c) retval=00000001 0009:Call window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_SETCURSOR,wp=0002003c,lp=02000001) 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_SETCURSOR,wp=0002003c,lp=02000001) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_SETCURSOR,wp=0002003c,lp=02000001) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_SETCURSOR,wp=0002003c,lp=02000001) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_SETCURSOR,wp=0002003c,lp=02000001) retval=00000000 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_SETCURSOR,wp=0002003c,lp=02000001) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_MOUSEMOVE,wp=00000000,lp=0012000a) 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_MOUSEMOVE,wp=00000000,lp=0012000a) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_NCHITTEST,wp=00000000,lp=01b20276) 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_NCHITTEST,wp=00000000,lp=01b20276) retval=00000001 0009:Call window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_SETCURSOR,wp=0002003c,lp=02000001) 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_SETCURSOR,wp=0002003c,lp=02000001) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_SETCURSOR,wp=0002003c,lp=02000001) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_SETCURSOR,wp=0002003c,lp=02000001) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_SETCURSOR,wp=0002003c,lp=02000001) retval=00000000 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_SETCURSOR,wp=0002003c,lp=02000001) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_MOUSEMOVE,wp=00000000,lp=00120014) 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_MOUSEMOVE,wp=00000000,lp=00120014) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_NCHITTEST,wp=00000000,lp=01b0027e) 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_NCHITTEST,wp=00000000,lp=01b0027e) retval=00000001 0009:Call window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_SETCURSOR,wp=0002003c,lp=02000001) 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_SETCURSOR,wp=0002003c,lp=02000001) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_SETCURSOR,wp=0002003c,lp=02000001) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_SETCURSOR,wp=0002003c,lp=02000001) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_SETCURSOR,wp=0002003c,lp=02000001) retval=00000000 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_SETCURSOR,wp=0002003c,lp=02000001) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_MOUSEMOVE,wp=00000000,lp=0010001c) 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_MOUSEMOVE,wp=00000000,lp=0010001c) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_NCHITTEST,wp=00000000,lp=01ae0284) 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_NCHITTEST,wp=00000000,lp=01ae0284) retval=00000001 0009:Call window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_SETCURSOR,wp=0002003c,lp=02000001) 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_SETCURSOR,wp=0002003c,lp=02000001) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_SETCURSOR,wp=0002003c,lp=02000001) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_SETCURSOR,wp=0002003c,lp=02000001) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_SETCURSOR,wp=0002003c,lp=02000001) retval=00000000 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_SETCURSOR,wp=0002003c,lp=02000001) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_MOUSEMOVE,wp=00000000,lp=000e0022) 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_MOUSEMOVE,wp=00000000,lp=000e0022) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_NCHITTEST,wp=00000000,lp=01ae0286) 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_NCHITTEST,wp=00000000,lp=01ae0286) retval=00000001 0009:Call window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_SETCURSOR,wp=0002003c,lp=02000001) 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_SETCURSOR,wp=0002003c,lp=02000001) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_SETCURSOR,wp=0002003c,lp=02000001) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_SETCURSOR,wp=0002003c,lp=02000001) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_SETCURSOR,wp=0002003c,lp=02000001) retval=00000000 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_SETCURSOR,wp=0002003c,lp=02000001) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_MOUSEMOVE,wp=00000000,lp=000e0024) 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_MOUSEMOVE,wp=00000000,lp=000e0024) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_NCHITTEST,wp=00000000,lp=01ae0287) 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_NCHITTEST,wp=00000000,lp=01ae0287) retval=00000001 0009:Call window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_SETCURSOR,wp=0002003c,lp=02000001) 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_SETCURSOR,wp=0002003c,lp=02000001) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_SETCURSOR,wp=0002003c,lp=02000001) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_SETCURSOR,wp=0002003c,lp=02000001) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_SETCURSOR,wp=0002003c,lp=02000001) retval=00000000 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_SETCURSOR,wp=0002003c,lp=02000001) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_MOUSEMOVE,wp=00000000,lp=000e0025) 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_MOUSEMOVE,wp=00000000,lp=000e0025) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_NCHITTEST,wp=00000000,lp=01ae0288) 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_NCHITTEST,wp=00000000,lp=01ae0288) retval=00000001 0009:Call window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_SETCURSOR,wp=0002003c,lp=02000001) 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_SETCURSOR,wp=0002003c,lp=02000001) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_SETCURSOR,wp=0002003c,lp=02000001) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_SETCURSOR,wp=0002003c,lp=02000001) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_SETCURSOR,wp=0002003c,lp=02000001) retval=00000000 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_SETCURSOR,wp=0002003c,lp=02000001) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_MOUSEMOVE,wp=00000000,lp=000e0026) 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_MOUSEMOVE,wp=00000000,lp=000e0026) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_NCHITTEST,wp=00000000,lp=01ad0288) 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_NCHITTEST,wp=00000000,lp=01ad0288) retval=00000001 0009:Call window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_SETCURSOR,wp=0002003c,lp=02000001) 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_SETCURSOR,wp=0002003c,lp=02000001) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_SETCURSOR,wp=0002003c,lp=02000001) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_SETCURSOR,wp=0002003c,lp=02000001) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_SETCURSOR,wp=0002003c,lp=02000001) retval=00000000 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_SETCURSOR,wp=0002003c,lp=02000001) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_MOUSEMOVE,wp=00000000,lp=000d0026) 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_MOUSEMOVE,wp=00000000,lp=000d0026) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_NCHITTEST,wp=00000000,lp=01ad0288) 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_NCHITTEST,wp=00000000,lp=01ad0288) retval=00000001 0009:Call window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_MOUSEACTIVATE,wp=00020032,lp=02010001) 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_MOUSEACTIVATE,wp=00020032,lp=02010001) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_MOUSEACTIVATE,wp=00020032,lp=02010001) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_MOUSEACTIVATE,wp=00020032,lp=02010001) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_MOUSEACTIVATE,wp=00020032,lp=02010001) retval=00000001 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_MOUSEACTIVATE,wp=00020032,lp=02010001) retval=00000001 0009:Call window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_SETCURSOR,wp=0002003c,lp=02010001) 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_SETCURSOR,wp=0002003c,lp=02010001) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_SETCURSOR,wp=0002003c,lp=02010001) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_SETCURSOR,wp=0002003c,lp=02010001) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_SETCURSOR,wp=0002003c,lp=02010001) retval=00000000 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_SETCURSOR,wp=0002003c,lp=02010001) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_LBUTTONDOWN,wp=00000001,lp=000d0026) 0009:Call window proc 0x7ea833d0 (hwnd=0x20046,msg=WM_KILLFOCUS,wp=0002003c,lp=00000000) 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_CTLCOLORBTN,wp=00000314,lp=00020046) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_CTLCOLORBTN,wp=00000314,lp=00020046) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_CTLCOLORBTN,wp=00000314,lp=00020046) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_CTLCOLORBTN,wp=00000314,lp=00020046) retval=0000010c 0009:Ret window proc 0x7ea833d0 (hwnd=0x20046,msg=WM_KILLFOCUS,wp=0002003c,lp=00000000) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_SETFOCUS,wp=00020046,lp=00000000) 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_CTLCOLORBTN,wp=00000314,lp=0002003c) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_CTLCOLORBTN,wp=00000314,lp=0002003c) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_CTLCOLORBTN,wp=00000314,lp=0002003c) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_CTLCOLORBTN,wp=00000314,lp=0002003c) retval=0000010c 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_SETFOCUS,wp=00020046,lp=00000000) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x2003c,msg=BM_SETSTATE,wp=00000001,lp=00000000) 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_CTLCOLORBTN,wp=00000314,lp=0002003c) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_CTLCOLORBTN,wp=00000314,lp=0002003c) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_CTLCOLORBTN,wp=00000314,lp=0002003c) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_CTLCOLORBTN,wp=00000314,lp=0002003c) retval=0000010c 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003c,msg=BM_SETSTATE,wp=00000001,lp=00000000) retval=00000000 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_LBUTTONDOWN,wp=00000001,lp=000d0026) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x20046,msg=WM_PAINT,wp=00000000,lp=00000000) 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_CTLCOLORBTN,wp=00000314,lp=00020046) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_CTLCOLORBTN,wp=00000314,lp=00020046) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_CTLCOLORBTN,wp=00000314,lp=00020046) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_CTLCOLORBTN,wp=00000314,lp=00020046) retval=0000010c 0009:Ret window proc 0x7ea833d0 (hwnd=0x20046,msg=WM_PAINT,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_LBUTTONUP,wp=00000000,lp=000d0026) 0009:Call window proc 0x7ea833d0 (hwnd=0x2003c,msg=BM_SETSTATE,wp=00000000,lp=00000000) 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_CTLCOLORBTN,wp=00000314,lp=0002003c) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_CTLCOLORBTN,wp=00000314,lp=0002003c) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_CTLCOLORBTN,wp=00000314,lp=0002003c) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_CTLCOLORBTN,wp=00000314,lp=0002003c) retval=0000010c 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003c,msg=BM_SETSTATE,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_CAPTURECHANGED,wp=00000000,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_CAPTURECHANGED,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_COMMAND,wp=00000007,lp=0002003c) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_COMMAND,wp=00000007,lp=0002003c) 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_ENABLE,wp=00000001,lp=00000000) 0009:Call user32.DefWindowProcW(00010030,0000000a,00000001,00000000) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_ENABLE,wp=00000001,lp=00000000) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_KILLFOCUS,wp=00020032,lp=00000000) 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_CTLCOLORBTN,wp=00000314,lp=0002003c) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_CTLCOLORBTN,wp=00000314,lp=0002003c) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_CTLCOLORBTN,wp=00000314,lp=0002003c) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_CTLCOLORBTN,wp=00000314,lp=0002003c) retval=0000010c 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_KILLFOCUS,wp=00020032,lp=00000000) retval=00000000 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_SETFOCUS,wp=0002003c,lp=00000000) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_SETFOCUS,wp=0002003c,lp=00000000) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_SETFOCUS,wp=0002003c,lp=00000000) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_SETFOCUS,wp=0002003c,lp=00000000) retval=00000000 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_WINDOWPOSCHANGING,wp=00000000,lp=0033d4e0) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_WINDOWPOSCHANGING,wp=00000000,lp=0033d4e0) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_WINDOWPOSCHANGING,wp=00000000,lp=0033d4e0) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_WINDOWPOSCHANGING,wp=00000000,lp=0033d4e0) retval=00000000 0019:Ret user32.GetMessageW() retval=00000001 ret=7ec5ec4b 0019:Call user32.DispatchMessageW(0033f93c) ret=7ec5ec28 0019:Call window proc 0x7ec5f470 (hwnd=0x10020,msg=WM_PAINT,wp=00000000,lp=00000000) 0019:Call user32.BeginPaint(00010020,0033f5b8) ret=7ec5f68f 0019:Ret user32.BeginPaint() retval=000001e4 ret=7ec5f68f 0019:Call user32.EndPaint(00010020,0033f5b8) ret=7ec5f6af 0019:Ret user32.EndPaint() retval=00000001 ret=7ec5f6af 0019:Ret window proc 0x7ec5f470 (hwnd=0x10020,msg=WM_PAINT,wp=00000000,lp=00000000) retval=00000000 0019:Ret user32.DispatchMessageW() retval=00000000 ret=7ec5ec28 0019:Call user32.GetMessageW(0033f93c,00000000,00000000,00000000) ret=7ec5ec4b 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_WINDOWPOSCHANGED,wp=00000000,lp=0033d4e0) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_WINDOWPOSCHANGED,wp=00000000,lp=0033d4e0) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_WINDOWPOSCHANGED,wp=00000000,lp=0033d4e0) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_WINDOWPOSCHANGED,wp=00000000,lp=0033d4e0) retval=00000000 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_NCACTIVATE,wp=00000000,lp=00010030) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_NCACTIVATE,wp=00000000,lp=00010030) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_NCACTIVATE,wp=00000000,lp=00010030) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_NCACTIVATE,wp=00000000,lp=00010030) retval=00000001 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_ACTIVATE,wp=00000000,lp=00010030) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_ACTIVATE,wp=00000000,lp=00010030) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_ACTIVATE,wp=00000000,lp=00010030) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_ACTIVATE,wp=00000000,lp=00010030) retval=00000000 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_QUERYNEWPALETTE,wp=00000000,lp=00000000) 0009:Call user32.DefWindowProcW(00010030,0000030f,00000000,00000000) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_QUERYNEWPALETTE,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCACTIVATE,wp=00000001,lp=00020032) 0009:Call user32.DefWindowProcW(00010030,00000086,00000001,00020032) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCACTIVATE,wp=00000001,lp=00020032) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_ACTIVATE,wp=00000001,lp=00020032) 0009:Call user32.DefWindowProcW(00010030,00000006,00000001,00020032) ret=01006e3b 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_KILLFOCUS,wp=00010030,lp=00000000) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_KILLFOCUS,wp=00010030,lp=00000000) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_KILLFOCUS,wp=00010030,lp=00000000) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_KILLFOCUS,wp=00010030,lp=00000000) retval=00000000 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_SETFOCUS,wp=00020032,lp=00000000) 0009:Call user32.DefWindowProcW(00010030,00000007,00020032,00000000) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SETFOCUS,wp=00020032,lp=00000000) retval=00000000 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_ACTIVATE,wp=00000001,lp=00020032) retval=00000000 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_COMMAND,wp=00000007,lp=0002003c) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_COMMAND,wp=00000007,lp=0002003c) retval=00000000 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_LBUTTONUP,wp=00000000,lp=000d0026) retval=00000000 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_DESTROY,wp=00000000,lp=00000000) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_DESTROY,wp=00000000,lp=00000000) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_DESTROY,wp=00000000,lp=00000000) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_DESTROY,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x2004c,msg=WM_DESTROY,wp=00000000,lp=00000000) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x2004c,msg=WM_DESTROY,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x2004a,msg=WM_DESTROY,wp=00000000,lp=00000000) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x2004a,msg=WM_DESTROY,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x20048,msg=WM_DESTROY,wp=00000000,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x20048,msg=WM_DESTROY,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x20046,msg=WM_DESTROY,wp=00000000,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x20046,msg=WM_DESTROY,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x20044,msg=WM_DESTROY,wp=00000000,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x20044,msg=WM_DESTROY,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x20042,msg=WM_DESTROY,wp=00000000,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x20042,msg=WM_DESTROY,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x20040,msg=WM_DESTROY,wp=00000000,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x20040,msg=WM_DESTROY,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x2003e,msg=WM_DESTROY,wp=00000000,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003e,msg=WM_DESTROY,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_DESTROY,wp=00000000,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_DESTROY,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x2003a,msg=WM_DESTROY,wp=00000000,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003a,msg=WM_DESTROY,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x20038,msg=WM_DESTROY,wp=00000000,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x20038,msg=WM_DESTROY,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x20036,msg=WM_DESTROY,wp=00000000,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x20036,msg=WM_DESTROY,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x2004c,msg=WM_NCDESTROY,wp=00000000,lp=00000000) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x2004c,msg=WM_NCDESTROY,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x7eaf1c70 (hwnd=0x2004a,msg=WM_NCDESTROY,wp=00000000,lp=00000000) 0009:Ret window proc 0x7eaf1c70 (hwnd=0x2004a,msg=WM_NCDESTROY,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x20048,msg=WM_NCDESTROY,wp=00000000,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x20048,msg=WM_NCDESTROY,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x20046,msg=WM_NCDESTROY,wp=00000000,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x20046,msg=WM_NCDESTROY,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x20044,msg=WM_NCDESTROY,wp=00000000,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x20044,msg=WM_NCDESTROY,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x20042,msg=WM_NCDESTROY,wp=00000000,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x20042,msg=WM_NCDESTROY,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x20040,msg=WM_NCDESTROY,wp=00000000,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x20040,msg=WM_NCDESTROY,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x2003e,msg=WM_NCDESTROY,wp=00000000,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003e,msg=WM_NCDESTROY,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_NCDESTROY,wp=00000000,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003c,msg=WM_NCDESTROY,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x2003a,msg=WM_NCDESTROY,wp=00000000,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x2003a,msg=WM_NCDESTROY,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x20038,msg=WM_NCDESTROY,wp=00000000,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x20038,msg=WM_NCDESTROY,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x7ea833d0 (hwnd=0x20036,msg=WM_NCDESTROY,wp=00000000,lp=00000000) 0009:Ret window proc 0x7ea833d0 (hwnd=0x20036,msg=WM_NCDESTROY,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_NCDESTROY,wp=00000000,lp=00000000) 0009:Call dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_NCDESTROY,wp=00000000,lp=00000000) 0009:Ret dialog proc 0x7eadfa00 (hwnd=0x20032,msg=WM_NCDESTROY,wp=00000000,lp=00000000) retval=00000000 result=00000000 0009:Ret window proc 0x7ea9c250 (hwnd=0x20032,msg=WM_NCDESTROY,wp=00000000,lp=00000000) retval=00000000 0009:Ret user32.MessageBoxW() retval=00000007 ret=0100366e 0009:Call user32.LoadStringW(01000000,00000009,01011800,00000400) ret=0100361b 0009:Ret user32.LoadStringW() retval=00000019 ret=0100361b 0009:Call advapi32.RegCreateKeyExW(80000001,01011800 L"Software\\Microsoft\\Spider",00000000,00000000,00000000,00020006,00000000,0033efe0,0033efd8) ret=01004151 0009:Ret advapi32.RegCreateKeyExW() retval=00000000 ret=01004151 0009:Call user32.IsZoomed(00010030) ret=01004164 0009:Ret user32.IsZoomed() retval=00000001 ret=01004164 0009:Call user32.IsZoomed(00010030) ret=01004173 0009:Ret user32.IsZoomed() retval=00000001 ret=01004173 0009:Call user32.GetWindowPlacement(00010030,0033ef98) ret=010041a4 0009:Ret user32.GetWindowPlacement() retval=00000001 ret=010041a4 0009:Call user32.LoadStringW(01000000,0000000a,01011800,00000400) ret=0100361b 0009:Ret user32.LoadStringW() retval=00000008 ret=0100361b 0009:Call advapi32.RegSetValueExW(00000064,01011800 L"WndState",00000000,00000004,0033efd4,00000004) ret=010041cd 0009:Ret advapi32.RegSetValueExW() retval=00000000 ret=010041cd 0009:Call user32.LoadStringW(01000000,0000000b,01011800,00000400) ret=0100361b 0009:Ret user32.LoadStringW() retval=00000004 ret=0100361b 0009:Call advapi32.RegSetValueExW(00000064,01011800 L"WndX",00000000,00000004,0033efc4,00000004) ret=010041e2 0009:Ret advapi32.RegSetValueExW() retval=00000000 ret=010041e2 0009:Call user32.LoadStringW(01000000,0000000c,01011800,00000400) ret=0100361b 0009:Ret user32.LoadStringW() retval=00000004 ret=0100361b 0009:Call advapi32.RegSetValueExW(00000064,01011800 L"WndY",00000000,00000004,0033efc8,00000004) ret=010041f7 0009:Ret advapi32.RegSetValueExW() retval=00000000 ret=010041f7 0009:Call user32.LoadStringW(01000000,0000000d,01011800,00000400) ret=0100361b 0009:Ret user32.LoadStringW() retval=00000008 ret=0100361b 0009:Call advapi32.RegSetValueExW(00000064,01011800 L"WndWidth",00000000,00000004,0033efd8,00000004) ret=01004215 0009:Ret advapi32.RegSetValueExW() retval=00000000 ret=01004215 0009:Call user32.LoadStringW(01000000,0000000e,01011800,00000400) ret=0100361b 0009:Ret user32.LoadStringW() retval=00000009 ret=0100361b 0009:Call advapi32.RegSetValueExW(00000064,01011800 L"WndHeight",00000000,00000004,0033efd8,00000004) ret=01004233 0009:Ret advapi32.RegSetValueExW() retval=00000000 ret=01004233 0009:Call user32.LoadStringW(01000000,00000015,01011800,00000400) ret=0100361b 0009:Ret user32.LoadStringW() retval=00000008 ret=0100361b 0009:Call advapi32.RegSetValueExW(00000064,01011800 L"AnimDeal",00000000,00000004,0033efdc,00000004) ret=01004251 0009:Ret advapi32.RegSetValueExW() retval=00000000 ret=01004251 0009:Call user32.LoadStringW(01000000,00000016,01011800,00000400) ret=0100361b 0009:Ret user32.LoadStringW() retval=0000000a ret=0100361b 0009:Call advapi32.RegSetValueExW(00000064,01011800 L"SaveOnExit",00000000,00000004,0033efdc,00000004) ret=0100426f 0009:Ret advapi32.RegSetValueExW() retval=00000000 ret=0100426f 0009:Call user32.LoadStringW(01000000,00000017,01011800,00000400) ret=0100361b 0009:Ret user32.LoadStringW() retval=0000000b ret=0100361b 0009:Call advapi32.RegSetValueExW(00000064,01011800 L"LoadAtStart",00000000,00000004,0033efdc,00000004) ret=0100428d 0009:Ret advapi32.RegSetValueExW() retval=00000000 ret=0100428d 0009:Call user32.LoadStringW(01000000,00000018,01011800,00000400) ret=0100361b 0009:Ret user32.LoadStringW() retval=0000000a ret=0100361b 0009:Call advapi32.RegSetValueExW(00000064,01011800 L"PromptSave",00000000,00000004,0033efdc,00000004) ret=010042ab 0009:Ret advapi32.RegSetValueExW() retval=00000000 ret=010042ab 0009:Call user32.LoadStringW(01000000,00000019,01011800,00000400) ret=0100361b 0009:Ret user32.LoadStringW() retval=0000000a ret=0100361b 0009:Call advapi32.RegSetValueExW(00000064,01011800 L"PromptLoad",00000000,00000004,0033efdc,00000004) ret=010042c9 0009:Ret advapi32.RegSetValueExW() retval=00000000 ret=010042c9 0009:Call user32.LoadStringW(01000000,00000033,01011800,00000400) ret=0100361b 0009:Ret user32.LoadStringW() retval=00000005 ret=0100361b 0009:Call advapi32.RegSetValueExW(00000064,01011800 L"Sound",00000000,00000004,0033efdc,00000004) ret=010042e7 0009:Ret advapi32.RegSetValueExW() retval=00000000 ret=010042e7 0009:Call user32.LoadStringW(01000000,00000031,01011800,00000400) ret=0100361b 0009:Ret user32.LoadStringW() retval=00000008 ret=0100361b 0009:Call advapi32.RegSetValueExW(00000064,01011800 L"NumSuits",00000000,00000004,0033efd8,00000004) ret=01004304 0009:Ret advapi32.RegSetValueExW() retval=00000000 ret=01004304 0009:Call advapi32.RegSetValueExW(00000064,010015bc L"HighScore_Easy",00000000,00000004,01012f88,00000004) ret=01004319 0009:Ret advapi32.RegSetValueExW() retval=00000000 ret=01004319 0009:Call advapi32.RegSetValueExW(00000064,010015a8 L"Wins_Easy",00000000,00000004,01012f8c,00000004) ret=0100432e 0009:Ret advapi32.RegSetValueExW() retval=00000000 ret=0100432e 0009:Call advapi32.RegSetValueExW(00000064,01001590 L"Losses_Easy",00000000,00000004,01012f90,00000004) ret=01004343 0009:Ret advapi32.RegSetValueExW() retval=00000000 ret=01004343 0009:Call advapi32.RegSetValueExW(00000064,01001570 L"StreakWins_Easy",00000000,00000004,01012f94,00000004) ret=01004358 0009:Ret advapi32.RegSetValueExW() retval=00000000 ret=01004358 0009:Call advapi32.RegSetValueExW(00000064,0100154c L"StreakLosses_Easy",00000000,00000004,01012f98,00000004) ret=0100436d 0009:Ret advapi32.RegSetValueExW() retval=00000000 ret=0100436d 0009:Call advapi32.RegSetValueExW(00000064,01001524 L"StreakCurrent_Easy",00000000,00000004,01012f9c,00000004) ret=01004382 0009:Ret advapi32.RegSetValueExW() retval=00000000 ret=01004382 0009:Call advapi32.RegSetValueExW(00000064,01001504 L"FWinStreak_Easy",00000000,00000004,01012fa0,00000004) ret=01004397 0009:Ret advapi32.RegSetValueExW() retval=00000000 ret=01004397 0009:Call advapi32.RegSetValueExW(00000064,010014e0 L"HighScore_Medium",00000000,00000004,01012fa4,00000004) ret=010043ac 0009:Ret advapi32.RegSetValueExW() retval=00000000 ret=010043ac 0009:Call advapi32.RegSetValueExW(00000064,010014c8 L"Wins_Medium",00000000,00000004,01012fa8,00000004) ret=010043c1 0009:Ret advapi32.RegSetValueExW() retval=00000000 ret=010043c1 0009:Call advapi32.RegSetValueExW(00000064,010014ac L"Losses_Medium",00000000,00000004,01012fac,00000004) ret=010043d6 0009:Ret advapi32.RegSetValueExW() retval=00000000 ret=010043d6 0009:Call advapi32.RegSetValueExW(00000064,01001488 L"StreakWins_Medium",00000000,00000004,01012fb0,00000004) ret=010043eb 0009:Ret advapi32.RegSetValueExW() retval=00000000 ret=010043eb 0009:Call advapi32.RegSetValueExW(00000064,01001460 L"StreakLosses_Medium",00000000,00000004,01012fb4,00000004) ret=01004400 0009:Ret advapi32.RegSetValueExW() retval=00000000 ret=01004400 0009:Call advapi32.RegSetValueExW(00000064,01001434 L"StreakCurrent_Medium",00000000,00000004,01012fb8,00000004) ret=01004415 0009:Ret advapi32.RegSetValueExW() retval=00000000 ret=01004415 0009:Call advapi32.RegSetValueExW(00000064,01001410 L"FWinStreak_Medium",00000000,00000004,01012fbc,00000004) ret=0100442a 0009:Ret advapi32.RegSetValueExW() retval=00000000 ret=0100442a 0009:Call advapi32.RegSetValueExW(00000064,010013e8 L"HighScore_Difficult",00000000,00000004,01012fc0,00000004) ret=0100443f 0009:Ret advapi32.RegSetValueExW() retval=00000000 ret=0100443f 0009:Call advapi32.RegSetValueExW(00000064,010013c8 L"Wins_Difficult",00000000,00000004,01012fc4,00000004) ret=01004454 0009:Ret advapi32.RegSetValueExW() retval=00000000 ret=01004454 0009:Call advapi32.RegSetValueExW(00000064,010013a4 L"Losses_Difficult",00000000,00000004,01012fc8,00000004) ret=01004469 0009:Ret advapi32.RegSetValueExW() retval=00000000 ret=01004469 0009:Call advapi32.RegSetValueExW(00000064,01001378 L"StreakWins_Difficult",00000000,00000004,01012fcc,00000004) ret=0100447e 0009:Ret advapi32.RegSetValueExW() retval=00000000 ret=0100447e 0009:Call advapi32.RegSetValueExW(00000064,01001348 L"StreakLosses_Difficult",00000000,00000004,01012fd0,00000004) ret=01004493 0009:Ret advapi32.RegSetValueExW() retval=00000000 ret=01004493 0009:Call advapi32.RegSetValueExW(00000064,01001318 L"StreakCurrent_Difficult",00000000,00000004,01012fd4,00000004) ret=010044a8 0009:Ret advapi32.RegSetValueExW() retval=00000000 ret=010044a8 0009:Call advapi32.RegSetValueExW(00000064,010012ec L"FWinStreak_Difficult",00000000,00000004,01012fd8,00000004) ret=010044bd 0009:Ret advapi32.RegSetValueExW() retval=00000000 ret=010044bd 0009:Call advapi32.RegCloseKey(00000064) ret=010044c6 0009:Ret advapi32.RegCloseKey() retval=00000000 ret=010044c6 0009:Call user32.DestroyWindow(00010030) ret=01006e7f 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_WINDOWPOSCHANGING,wp=00000000,lp=0033ef10) 0009:Call user32.DefWindowProcW(00010030,00000046,00000000,0033ef10) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_WINDOWPOSCHANGING,wp=00000000,lp=0033ef10) retval=00000000 0019:Ret user32.GetMessageW() retval=00000001 ret=7ec5ec4b 0019:Call user32.DispatchMessageW(0033f93c) ret=7ec5ec28 0019:Call window proc 0x7ec5f470 (hwnd=0x10020,msg=WM_PAINT,wp=00000000,lp=00000000) 0019:Call user32.BeginPaint(00010020,0033f5b8) ret=7ec5f68f 0019:Call window proc 0x7ec5f470 (hwnd=0x10020,msg=WM_ERASEBKGND,wp=000001e4,lp=00000000) 0019:Ret window proc 0x7ec5f470 (hwnd=0x10020,msg=WM_ERASEBKGND,wp=000001e4,lp=00000000) retval=00000001 0019:Ret user32.BeginPaint() retval=000001e4 ret=7ec5f68f 0019:Call user32.EndPaint(00010020,0033f5b8) ret=7ec5f6af 0019:Ret user32.EndPaint() retval=00000001 ret=7ec5f6af 0019:Ret window proc 0x7ec5f470 (hwnd=0x10020,msg=WM_PAINT,wp=00000000,lp=00000000) retval=00000000 0019:Ret user32.DispatchMessageW() retval=00000000 ret=7ec5ec28 0019:Call user32.GetMessageW(0033f93c,00000000,00000000,00000000) ret=7ec5ec4b 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_WINDOWPOSCHANGED,wp=00000000,lp=0033ef10) 0009:Call user32.DefWindowProcW(00010030,00000047,00000000,0033ef10) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_WINDOWPOSCHANGED,wp=00000000,lp=0033ef10) retval=00000000 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCACTIVATE,wp=00000000,lp=00000000) 0009:Call user32.DefWindowProcW(00010030,00000086,00000000,00000000) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000001 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCACTIVATE,wp=00000000,lp=00000000) retval=00000001 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_ACTIVATE,wp=00000000,lp=00000000) 0009:Call user32.DefWindowProcW(00010030,00000006,00000000,00000000) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_ACTIVATE,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_ACTIVATEAPP,wp=00000000,lp=00000000) 0009:Call user32.DefWindowProcW(00010030,0000001c,00000000,00000000) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_ACTIVATEAPP,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_KILLFOCUS,wp=00000000,lp=00000000) 0009:Call user32.DefWindowProcW(00010030,00000008,00000000,00000000) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_KILLFOCUS,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_DESTROY,wp=00000000,lp=00000000) 0009:Call ntdll.RtlFreeHeap(005c0000,00000000,005c1c18) ret=0100a34c 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=0100a34c 0009:Call user32.PostQuitMessage(00000000) ret=01006f7b 0009:Ret user32.PostQuitMessage() retval=00000000 ret=01006f7b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_DESTROY,wp=00000000,lp=00000000) retval=00000000 0009:Call window proc 0x10070ab (hwnd=0x10030,msg=WM_NCDESTROY,wp=00000000,lp=00000000) 0009:Call user32.DefWindowProcW(00010030,00000082,00000000,00000000) ret=01006e3b 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_NCDESTROY,wp=00000000,lp=00000000) retval=00000000 0009:Ret user32.DestroyWindow() retval=00000001 ret=01006e7f 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_CLOSE,wp=00000000,lp=00000000) retval=00000000 0009:Ret user32.DefWindowProcW() retval=00000000 ret=01006e3b 0009:Ret window proc 0x10070ab (hwnd=0x10030,msg=WM_SYSCOMMAND,wp=0000f060,lp=00000000) retval=00000000 0009:Ret user32.GetMessageW() retval=00000000 ret=01007303 0009:Call ntdll.RtlFreeHeap(005c0000,00000000,005c02e0) ret=0100a34c 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=0100a34c 0009:Call ntdll.RtlFreeHeap(005c0000,00000000,005c02c0) ret=0100a34c 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=0100a34c 0009:Call ntdll.RtlFreeHeap(005c0000,00000000,005c0938) ret=0100a34c 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=0100a34c 0009:Call ntdll.RtlFreeHeap(005c0000,00000000,005c0a28) ret=0100a34c 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=0100a34c 0009:Call ntdll.RtlFreeHeap(005c0000,00000000,005c0b18) ret=0100a34c 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=0100a34c 0009:Call ntdll.RtlFreeHeap(005c0000,00000000,005c0c08) ret=0100a34c 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=0100a34c 0009:Call ntdll.RtlFreeHeap(005c0000,00000000,005c5670) ret=0100a34c 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=0100a34c 0009:Call ntdll.RtlFreeHeap(005c0000,00000000,005c56d0) ret=0100a34c 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=0100a34c 0009:Call ntdll.RtlFreeHeap(005c0000,00000000,005c57c0) ret=0100a34c 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=0100a34c 0009:Call ntdll.RtlFreeHeap(005c0000,00000000,005c58b0) ret=0100a34c 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=0100a34c 0009:Call ntdll.RtlFreeHeap(005c0000,00000000,005c0848) ret=0100a34c 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=0100a34c 0009:Call ntdll.RtlFreeHeap(005c0000,00000000,005c0950) ret=0100a34c 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=0100a34c 0009:Call ntdll.RtlFreeHeap(005c0000,00000000,005c0a40) ret=0100a34c 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=0100a34c 0009:Call ntdll.RtlFreeHeap(005c0000,00000000,005c0b30) ret=0100a34c 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=0100a34c 0009:Call ntdll.RtlFreeHeap(005c0000,00000000,005c0c20) ret=0100a34c 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=0100a34c 0009:Call ntdll.RtlFreeHeap(005c0000,00000000,005c5688) ret=0100a34c 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=0100a34c 0009:Call ntdll.RtlFreeHeap(005c0000,00000000,005c56e8) ret=0100a34c 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=0100a34c 0009:Call ntdll.RtlFreeHeap(005c0000,00000000,005c57d8) ret=0100a34c 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=0100a34c 0009:Call ntdll.RtlFreeHeap(005c0000,00000000,005c58c8) ret=0100a34c 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=0100a34c 0009:Call ntdll.RtlFreeHeap(005c0000,00000000,005c0860) ret=0100a34c 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=0100a34c 0009:Call ntdll.RtlFreeHeap(005c0000,00000000,005c0968) ret=0100a34c 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=0100a34c 0009:Call ntdll.RtlFreeHeap(005c0000,00000000,005c0a58) ret=0100a34c 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=0100a34c 0009:Call ntdll.RtlFreeHeap(005c0000,00000000,005c0b48) ret=0100a34c 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=0100a34c 0009:Call ntdll.RtlFreeHeap(005c0000,00000000,005c55b0) ret=0100a34c 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=0100a34c 0009:Call ntdll.RtlFreeHeap(005c0000,00000000,005c56a0) ret=0100a34c 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=0100a34c 0009:Call ntdll.RtlFreeHeap(005c0000,00000000,005c5700) ret=0100a34c 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=0100a34c 0009:Call ntdll.RtlFreeHeap(005c0000,00000000,005c57f0) ret=0100a34c 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=0100a34c 0009:Call ntdll.RtlFreeHeap(005c0000,00000000,005c58e0) ret=0100a34c 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=0100a34c 0009:Call ntdll.RtlFreeHeap(005c0000,00000000,005c0878) ret=0100a34c 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=0100a34c 0009:Call ntdll.RtlFreeHeap(005c0000,00000000,005c0980) ret=0100a34c 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=0100a34c 0009:Call ntdll.RtlFreeHeap(005c0000,00000000,005c0a70) ret=0100a34c 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=0100a34c 0009:Call ntdll.RtlFreeHeap(005c0000,00000000,005c0b60) ret=0100a34c 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=0100a34c 0009:Call ntdll.RtlFreeHeap(005c0000,00000000,005c55c8) ret=0100a34c 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=0100a34c 0009:Call ntdll.RtlFreeHeap(005c0000,00000000,005c56b8) ret=0100a34c 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=0100a34c 0009:Call ntdll.RtlFreeHeap(005c0000,00000000,005c5718) ret=0100a34c 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=0100a34c 0009:Call ntdll.RtlFreeHeap(005c0000,00000000,005c5808) ret=0100a34c 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=0100a34c 0009:Call ntdll.RtlFreeHeap(005c0000,00000000,005c58f8) ret=0100a34c 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=0100a34c 0009:Call ntdll.RtlFreeHeap(005c0000,00000000,005c0890) ret=0100a34c 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=0100a34c 0009:Call ntdll.RtlFreeHeap(005c0000,00000000,005c0998) ret=0100a34c 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=0100a34c 0009:Call ntdll.RtlFreeHeap(005c0000,00000000,005c0a88) ret=0100a34c 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=0100a34c 0009:Call ntdll.RtlFreeHeap(005c0000,00000000,005c0b78) ret=0100a34c 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=0100a34c 0009:Call ntdll.RtlFreeHeap(005c0000,00000000,005c55e0) ret=0100a34c 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=0100a34c 0009:Call ntdll.RtlFreeHeap(005c0000,00000000,005c5730) ret=0100a34c 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=0100a34c 0009:Call ntdll.RtlFreeHeap(005c0000,00000000,005c5820) ret=0100a34c 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=0100a34c 0009:Call ntdll.RtlFreeHeap(005c0000,00000000,005c5910) ret=0100a34c 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=0100a34c 0009:Call ntdll.RtlFreeHeap(005c0000,00000000,005c08a8) ret=0100a34c 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=0100a34c 0009:Call ntdll.RtlFreeHeap(005c0000,00000000,005c09b0) ret=0100a34c 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=0100a34c 0009:Call ntdll.RtlFreeHeap(005c0000,00000000,005c0aa0) ret=0100a34c 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=0100a34c 0009:Call ntdll.RtlFreeHeap(005c0000,00000000,005c0b90) ret=0100a34c 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=0100a34c 0009:Call ntdll.RtlFreeHeap(005c0000,00000000,005c55f8) ret=0100a34c 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=0100a34c 0009:Call ntdll.RtlFreeHeap(005c0000,00000000,005c5748) ret=0100a34c 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=0100a34c 0009:Call ntdll.RtlFreeHeap(005c0000,00000000,005c5838) ret=0100a34c 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=0100a34c 0009:Call ntdll.RtlFreeHeap(005c0000,00000000,005c5928) ret=0100a34c 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=0100a34c 0009:Call ntdll.RtlFreeHeap(005c0000,00000000,005c08c0) ret=0100a34c 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=0100a34c 0009:Call ntdll.RtlFreeHeap(005c0000,00000000,005c09c8) ret=0100a34c 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=0100a34c 0009:Call ntdll.RtlFreeHeap(005c0000,00000000,005c0ab8) ret=0100a34c 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=0100a34c 0009:Call ntdll.RtlFreeHeap(005c0000,00000000,005c0ba8) ret=0100a34c 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=0100a34c 0009:Call ntdll.RtlFreeHeap(005c0000,00000000,005c5610) ret=0100a34c 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=0100a34c 0009:Call ntdll.RtlFreeHeap(005c0000,00000000,005c5760) ret=0100a34c 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=0100a34c 0009:Call ntdll.RtlFreeHeap(005c0000,00000000,005c5850) ret=0100a34c 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=0100a34c 0009:Call ntdll.RtlFreeHeap(005c0000,00000000,005c5940) ret=0100a34c 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=0100a34c 0009:Call ntdll.RtlFreeHeap(005c0000,00000000,005c08d8) ret=0100a34c 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=0100a34c 0009:Call ntdll.RtlFreeHeap(005c0000,00000000,005c09e0) ret=0100a34c 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=0100a34c 0009:Call ntdll.RtlFreeHeap(005c0000,00000000,005c0ad0) ret=0100a34c 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=0100a34c 0009:Call ntdll.RtlFreeHeap(005c0000,00000000,005c0bc0) ret=0100a34c 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=0100a34c 0009:Call ntdll.RtlFreeHeap(005c0000,00000000,005c5628) ret=0100a34c 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=0100a34c 0009:Call ntdll.RtlFreeHeap(005c0000,00000000,005c5778) ret=0100a34c 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=0100a34c 0009:Call ntdll.RtlFreeHeap(005c0000,00000000,005c5868) ret=0100a34c 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=0100a34c 0009:Call ntdll.RtlFreeHeap(005c0000,00000000,005c5958) ret=0100a34c 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=0100a34c 0009:Call ntdll.RtlFreeHeap(005c0000,00000000,005c08f0) ret=0100a34c 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=0100a34c 0009:Call ntdll.RtlFreeHeap(005c0000,00000000,005c09f8) ret=0100a34c 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=0100a34c 0009:Call ntdll.RtlFreeHeap(005c0000,00000000,005c0ae8) ret=0100a34c 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=0100a34c 0009:Call ntdll.RtlFreeHeap(005c0000,00000000,005c0bd8) ret=0100a34c 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=0100a34c 0009:Call ntdll.RtlFreeHeap(005c0000,00000000,005c5640) ret=0100a34c 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=0100a34c 0009:Call ntdll.RtlFreeHeap(005c0000,00000000,005c5790) ret=0100a34c 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=0100a34c 0009:Call ntdll.RtlFreeHeap(005c0000,00000000,005c5880) ret=0100a34c 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=0100a34c 0009:Call ntdll.RtlFreeHeap(005c0000,00000000,005c5970) ret=0100a34c 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=0100a34c 0009:Call ntdll.RtlFreeHeap(005c0000,00000000,005c0908) ret=0100a34c 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=0100a34c 0009:Call ntdll.RtlFreeHeap(005c0000,00000000,005c0a10) ret=0100a34c 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=0100a34c 0009:Call ntdll.RtlFreeHeap(005c0000,00000000,005c0b00) ret=0100a34c 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=0100a34c 0009:Call ntdll.RtlFreeHeap(005c0000,00000000,005c0bf0) ret=0100a34c 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=0100a34c 0009:Call ntdll.RtlFreeHeap(005c0000,00000000,005c5658) ret=0100a34c 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=0100a34c 0009:Call ntdll.RtlFreeHeap(005c0000,00000000,005c57a8) ret=0100a34c 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=0100a34c 0009:Call ntdll.RtlFreeHeap(005c0000,00000000,005c5898) ret=0100a34c 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=0100a34c 0009:Call ntdll.RtlFreeHeap(005c0000,00000000,005c5988) ret=0100a34c 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=0100a34c 0009:Call ntdll.RtlFreeHeap(005c0000,00000000,005c0920) ret=0100a34c 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=0100a34c 0009:Call ntdll.RtlFreeHeap(005c0000,00000000,005c07c8) ret=0100a34c 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=0100a34c 0009:Call KERNEL32.GetModuleHandleA(010016c0 "mscoree.dll") ret=01009570 0009:Ret KERNEL32.GetModuleHandleA() retval=00000000 ret=01009570 0009:Call KERNEL32.ExitProcess(00000000) ret=01009592 0009:Call PE DLL (proc=0x7e07d0b0,module=0x7e070000 L"hhctrl.ocx",reason=PROCESS_DETACH,res=0x1) 0009:Ret PE DLL (proc=0x7e07d0b0,module=0x7e070000 L"hhctrl.ocx",reason=PROCESS_DETACH,res=0x1) retval=1 0009:Call PE DLL (proc=0x7e045720,module=0x7dfa0000 L"oleaut32.dll",reason=PROCESS_DETACH,res=0x1) 0009:Ret PE DLL (proc=0x7e045720,module=0x7dfa0000 L"oleaut32.dll",reason=PROCESS_DETACH,res=0x1) retval=1 0009:Call PE DLL (proc=0x7e73d5a0,module=0x7e710000 L"winmm.dll",reason=PROCESS_DETACH,res=0x1) 0009:Call midimap.modMessage(00000000,00000065,00000000,00000000,00000000) ret=7e728b59 0009:Ret midimap.modMessage() retval=00000000 ret=7e728b59 0009:Call midimap.DriverProc(00000001,0013a3f8,00000004,00000000,00000000) ret=7e7272f0 0009:Call ntdll.RtlFreeHeap(00110000,00000000,001441c0) ret=7e198804 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e198804 0009:Ret midimap.DriverProc() retval=00000001 ret=7e7272f0 0009:Call midimap.DriverProc(00000001,0013a3f8,00000005,00000000,00000000) ret=7e727033 0009:Ret midimap.DriverProc() retval=00000001 ret=7e727033 0009:Call midimap.DriverProc(00000001,0013a3f8,00000006,00000000,00000000) ret=7e7270f6 0009:Ret midimap.DriverProc() retval=00000001 ret=7e7270f6 0009:Call KERNEL32.FreeLibrary(7e190000) ret=7e727341 0009:Ret KERNEL32.FreeLibrary() retval=00000001 ret=7e727341 0009:Call ntdll.RtlFreeHeap(00110000,00000000,0013a3f8) ret=7e727361 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e727361 0009:Call msacm32.drv.widMessage(00000000,00000065,00000000,00000000,00000000) ret=7e728b59 0009:Ret msacm32.drv.widMessage() retval=00000000 ret=7e728b59 0009:Call msacm32.drv.wodMessage(00000000,00000065,00000000,00000000,00000000) ret=7e728b59 0009:Ret msacm32.drv.wodMessage() retval=00000000 ret=7e728b59 0009:Call msacm32.drv.DriverProc(00000001,0013a750,00000004,00000000,00000000) ret=7e7272f0 0009:Ret msacm32.drv.DriverProc() retval=00000001 ret=7e7272f0 0009:Call msacm32.drv.DriverProc(00000001,0013a750,00000005,00000000,00000000) ret=7e727033 0009:Ret msacm32.drv.DriverProc() retval=00000001 ret=7e727033 0009:Call msacm32.drv.DriverProc(00000001,0013a750,00000006,00000000,00000000) ret=7e7270f6 0009:Ret msacm32.drv.DriverProc() retval=00000001 ret=7e7270f6 0009:Call KERNEL32.FreeLibrary(7e0b0000) ret=7e727341 0009:Ret KERNEL32.FreeLibrary() retval=00000001 ret=7e727341 0009:Call ntdll.RtlFreeHeap(00110000,00000000,0013a750) ret=7e727361 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e727361 0009:Call winealsa.drv.mxdMessage(00000000,00000065,00000000,00000000,00000000) ret=7e728b59 0009:Call ntdll.RtlDeleteCriticalSection(7e1d0d24) ret=7e1bc382 0009:Ret ntdll.RtlDeleteCriticalSection() retval=00000000 ret=7e1bc382 0009:Call ntdll.RtlFreeHeap(00110000,00000000,001421a0) ret=7e1bc3c2 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e1bc3c2 0009:Call ntdll.RtlFreeHeap(00110000,00000000,001424f0) ret=7e1bc3ec 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e1bc3ec 0009:Ret winealsa.drv.mxdMessage() retval=00000000 ret=7e728b59 0009:Call winealsa.drv.midMessage(00000000,00000065,00000000,00000000,00000000) ret=7e728b59 0009:Ret winealsa.drv.midMessage() retval=00000000 ret=7e728b59 0009:Call winealsa.drv.modMessage(00000000,00000065,00000000,00000000,00000000) ret=7e728b59 0009:Ret winealsa.drv.modMessage() retval=00000000 ret=7e728b59 0009:Call winealsa.drv.widMessage(00000000,00000065,00000000,00000000,00000000) ret=7e728b59 0009:Ret winealsa.drv.widMessage() retval=00000000 ret=7e728b59 0009:Call winealsa.drv.wodMessage(00000000,00000065,00000000,00000000,00000000) ret=7e728b59 0009:Ret winealsa.drv.wodMessage() retval=00000000 ret=7e728b59 0009:Call winealsa.drv.DriverProc(00000001,00139a30,00000004,00000000,00000000) ret=7e7272f0 0009:Ret winealsa.drv.DriverProc() retval=00000001 ret=7e7272f0 0009:Call winealsa.drv.DriverProc(00000001,00139a30,00000005,00000000,00000000) ret=7e727033 0009:Ret winealsa.drv.DriverProc() retval=00000001 ret=7e727033 0009:Call winealsa.drv.DriverProc(00000001,00139a30,00000006,00000000,00000000) ret=7e7270f6 0009:Ret winealsa.drv.DriverProc() retval=00000001 ret=7e7270f6 0009:Call KERNEL32.FreeLibrary(7e1a0000) ret=7e727341 0009:Ret KERNEL32.FreeLibrary() retval=00000001 ret=7e727341 0009:Call ntdll.RtlFreeHeap(00110000,00000000,00139a30) ret=7e727361 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e727361 0009:Call ntdll.RtlFreeHeap(00110000,00000000,0013a6d0) ret=7e72af70 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e72af70 0009:Call ntdll.RtlFreeHeap(00110000,00000000,0013a710) ret=7e72af9d 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e72af9d 0009:Call ntdll.RtlFreeHeap(00110000,00000000,0013c660) ret=7e72afca 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e72afca 0009:Call ntdll.RtlFreeHeap(00110000,00000000,0013c6a0) ret=7e72aff7 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e72aff7 0009:Call ntdll.RtlFreeHeap(00110000,00000000,0013c700) ret=7e72b024 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e72b024 0009:Call KERNEL32.CloseHandle(00000038) ret=7e73bf57 0009:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e73bf57 0009:Call KERNEL32.CloseHandle(00000040) ret=7e73bf6a 0009:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e73bf6a 0009:Call ntdll.RtlDeleteCriticalSection(7e799470) ret=7e73bf7b 0009:Ret ntdll.RtlDeleteCriticalSection() retval=00000000 ret=7e73bf7b 0009:Call KERNEL32.__wine_dll_unregister_16(7e797750) ret=7e719218 0009:Ret KERNEL32.__wine_dll_unregister_16() retval=00000006 ret=7e719218 0009:Ret PE DLL (proc=0x7e73d5a0,module=0x7e710000 L"winmm.dll",reason=PROCESS_DETACH,res=0x1) retval=1 0009:Call PE DLL (proc=0x7e1997d0,module=0x7e190000 L"midimap.dll",reason=PROCESS_DETACH,res=0x1) 0009:Ret PE DLL (proc=0x7e1997d0,module=0x7e190000 L"midimap.dll",reason=PROCESS_DETACH,res=0x1) retval=1 0009:Call PE DLL (proc=0x7e0c14f0,module=0x7e0b0000 L"msacm32.drv",reason=PROCESS_DETACH,res=0x1) 0009:Ret PE DLL (proc=0x7e0c14f0,module=0x7e0b0000 L"msacm32.drv",reason=PROCESS_DETACH,res=0x1) retval=1 0009:Call PE DLL (proc=0x7e0a5400,module=0x7e090000 L"msacm32.dll",reason=PROCESS_DETACH,res=0x1) 0009:Call ntdll.RtlAllocateHeap(004b0000,00000000,0000008c) ret=7e09f861 0009:Ret ntdll.RtlAllocateHeap() retval=004b0478 ret=7e09f861 0009:Call user32.CharLowerW(004b04e6 L"msacm.imaadpcm") ret=7e09f8a9 0009:Ret user32.CharLowerW() retval=004b04e6 ret=7e09f8a9 0009:Call advapi32.RegCreateKeyW(80000002,004b0478 L"Software\\Microsoft\\AudioCompressionManager\\DriverCache\\msacm.imaadpcm",0033fb14) ret=7e09fb2c 0009:Ret advapi32.RegCreateKeyW() retval=00000000 ret=7e09fb2c 0009:Call advapi32.RegSetValueExA(00000038,7e0a61c6 "cFormatTags",00000000,00000004,004b0154,00000004) ret=7e09fb64 0009:Ret advapi32.RegSetValueExA() retval=00000000 ret=7e09fb64 0009:Call advapi32.RegSetValueExA(00000038,7e0a61d2 "cFilterTags",00000000,00000004,004b0150,00000004) ret=7e09fbee 0009:Ret advapi32.RegSetValueExA() retval=00000000 ret=7e09fbee 0009:Call advapi32.RegSetValueExA(00000038,7e0a61de "fdwSupport",00000000,00000004,004b0158,00000004) ret=7e09fc2d 0009:Ret advapi32.RegSetValueExA() retval=00000000 ret=7e09fc2d 0009:Call advapi32.RegSetValueExA(00000038,7e0a61e9 "aFormatTagCache",00000000,00000003,004b0250,00000010) ret=7e09fc6e 0009:Ret advapi32.RegSetValueExA() retval=00000000 ret=7e09fc6e 0009:Call ntdll.RtlFreeHeap(004b0000,00000000,004b0478) ret=7e09fc92 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e09fc92 0009:Call ntdll.RtlFreeHeap(004b0000,00000000,004b0168) ret=7e09f969 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e09f969 0009:Call ntdll.RtlFreeHeap(004b0000,00000000,004b0190) ret=7e09f985 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e09f985 0009:Call ntdll.RtlFreeHeap(004b0000,00000000,004b0250) ret=7e09f9a1 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e09f9a1 0009:Call ntdll.RtlFreeHeap(004b0000,00000000,004b0130) ret=7e09fa0f 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e09fa0f 0009:Call ntdll.RtlAllocateHeap(004b0000,00000000,0000008a) ret=7e09f861 0009:Ret ntdll.RtlAllocateHeap() retval=004b0478 ret=7e09f861 0009:Call user32.CharLowerW(004b04e6 L"msacm.msadpcm") ret=7e09f8a9 0009:Ret user32.CharLowerW() retval=004b04e6 ret=7e09f8a9 0009:Call advapi32.RegCreateKeyW(80000002,004b0478 L"Software\\Microsoft\\AudioCompressionManager\\DriverCache\\msacm.msadpcm",0033fb14) ret=7e09fb2c 0009:Ret advapi32.RegCreateKeyW() retval=00000000 ret=7e09fb2c 0009:Call advapi32.RegSetValueExA(00000040,7e0a61c6 "cFormatTags",00000000,00000004,004b01dc,00000004) ret=7e09fb64 0009:Ret advapi32.RegSetValueExA() retval=00000000 ret=7e09fb64 0009:Call advapi32.RegSetValueExA(00000040,7e0a61d2 "cFilterTags",00000000,00000004,004b01d8,00000004) ret=7e09fbee 0009:Ret advapi32.RegSetValueExA() retval=00000000 ret=7e09fbee 0009:Call advapi32.RegSetValueExA(00000040,7e0a61de "fdwSupport",00000000,00000004,004b01e0,00000004) ret=7e09fc2d 0009:Ret advapi32.RegSetValueExA() retval=00000000 ret=7e09fc2d 0009:Call advapi32.RegSetValueExA(00000040,7e0a61e9 "aFormatTagCache",00000000,00000003,004b0300,00000010) ret=7e09fc6e 0009:Ret advapi32.RegSetValueExA() retval=00000000 ret=7e09fc6e 0009:Call ntdll.RtlFreeHeap(004b0000,00000000,004b0478) ret=7e09fc92 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e09fc92 0009:Call ntdll.RtlFreeHeap(004b0000,00000000,004b01f0) ret=7e09f969 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e09f969 0009:Call ntdll.RtlFreeHeap(004b0000,00000000,004b0218) ret=7e09f985 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e09f985 0009:Call ntdll.RtlFreeHeap(004b0000,00000000,004b0300) ret=7e09f9a1 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e09f9a1 0009:Call ntdll.RtlFreeHeap(004b0000,00000000,004b01b8) ret=7e09fa0f 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e09fa0f 0009:Call ntdll.RtlAllocateHeap(004b0000,00000000,00000088) ret=7e09f861 0009:Ret ntdll.RtlAllocateHeap() retval=004b0130 ret=7e09f861 0009:Call user32.CharLowerW(004b019e L"msacm.msg711") ret=7e09f8a9 0009:Ret user32.CharLowerW() retval=004b019e ret=7e09f8a9 0009:Call advapi32.RegCreateKeyW(80000002,004b0130 L"Software\\Microsoft\\AudioCompressionManager\\DriverCache\\msacm.msg711",0033fb14) ret=7e09fb2c 0009:Ret advapi32.RegCreateKeyW() retval=00000000 ret=7e09fb2c 0009:Call advapi32.RegSetValueExA(00000064,7e0a61c6 "cFormatTags",00000000,00000004,004b028c,00000004) ret=7e09fb64 0009:Ret advapi32.RegSetValueExA() retval=00000000 ret=7e09fb64 0009:Call advapi32.RegSetValueExA(00000064,7e0a61d2 "cFilterTags",00000000,00000004,004b0288,00000004) ret=7e09fbee 0009:Ret advapi32.RegSetValueExA() retval=00000000 ret=7e09fbee 0009:Call advapi32.RegSetValueExA(00000064,7e0a61de "fdwSupport",00000000,00000004,004b0290,00000004) ret=7e09fc2d 0009:Ret advapi32.RegSetValueExA() retval=00000000 ret=7e09fc2d 0009:Call advapi32.RegSetValueExA(00000064,7e0a61e9 "aFormatTagCache",00000000,00000003,004b03a8,00000018) ret=7e09fc6e 0009:Ret advapi32.RegSetValueExA() retval=00000000 ret=7e09fc6e 0009:Call ntdll.RtlFreeHeap(004b0000,00000000,004b0130) ret=7e09fc92 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e09fc92 0009:Call ntdll.RtlFreeHeap(004b0000,00000000,004b02a0) ret=7e09f969 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e09f969 0009:Call ntdll.RtlFreeHeap(004b0000,00000000,004b02c8) ret=7e09f985 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e09f985 0009:Call ntdll.RtlFreeHeap(004b0000,00000000,004b03a8) ret=7e09f9a1 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e09f9a1 0009:Call ntdll.RtlFreeHeap(004b0000,00000000,004b0268) ret=7e09fa0f 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e09fa0f 0009:Call ntdll.RtlAllocateHeap(004b0000,00000000,0000008a) ret=7e09f861 0009:Ret ntdll.RtlAllocateHeap() retval=004b0130 ret=7e09f861 0009:Call user32.CharLowerW(004b019e L"msacm.winemp3") ret=7e09f8a9 0009:Ret user32.CharLowerW() retval=004b019e ret=7e09f8a9 0009:Call advapi32.RegCreateKeyW(80000002,004b0130 L"Software\\Microsoft\\AudioCompressionManager\\DriverCache\\msacm.winemp3",0033fb14) ret=7e09fb2c 0009:Ret advapi32.RegCreateKeyW() retval=00000000 ret=7e09fb2c 0009:Call advapi32.RegSetValueExA(00000068,7e0a61c6 "cFormatTags",00000000,00000004,004b033c,00000004) ret=7e09fb64 0009:Ret advapi32.RegSetValueExA() retval=00000000 ret=7e09fb64 0009:Call advapi32.RegSetValueExA(00000068,7e0a61d2 "cFilterTags",00000000,00000004,004b0338,00000004) ret=7e09fbee 0009:Ret advapi32.RegSetValueExA() retval=00000000 ret=7e09fbee 0009:Call advapi32.RegSetValueExA(00000068,7e0a61de "fdwSupport",00000000,00000004,004b0340,00000004) ret=7e09fc2d 0009:Ret advapi32.RegSetValueExA() retval=00000000 ret=7e09fc2d 0009:Call advapi32.RegSetValueExA(00000068,7e0a61e9 "aFormatTagCache",00000000,00000003,004b0460,00000010) ret=7e09fc6e 0009:Ret advapi32.RegSetValueExA() retval=00000000 ret=7e09fc6e 0009:Call ntdll.RtlFreeHeap(004b0000,00000000,004b0130) ret=7e09fc92 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e09fc92 0009:Call ntdll.RtlFreeHeap(004b0000,00000000,004b0350) ret=7e09f969 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e09f969 0009:Call ntdll.RtlFreeHeap(004b0000,00000000,004b0378) ret=7e09f985 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e09f985 0009:Call ntdll.RtlFreeHeap(004b0000,00000000,004b0460) ret=7e09f9a1 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e09f9a1 0009:Call ntdll.RtlFreeHeap(004b0000,00000000,004b0318) ret=7e09fa0f 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e09fa0f 0009:Call ntdll.RtlAllocateHeap(004b0000,00000000,00000086) ret=7e09f861 0009:Ret ntdll.RtlAllocateHeap() retval=004b0130 ret=7e09f861 0009:Call user32.CharLowerW(004b019e L"msacm32.dll") ret=7e09f8a9 0009:Ret user32.CharLowerW() retval=004b019e ret=7e09f8a9 0009:Call advapi32.RegCreateKeyW(80000002,004b0130 L"Software\\Microsoft\\AudioCompressionManager\\DriverCache\\msacm32.dll",0033fb14) ret=7e09fb2c 0009:Ret advapi32.RegCreateKeyW() retval=00000000 ret=7e09fb2c 0009:Call advapi32.RegSetValueExA(00000070,7e0a61c6 "cFormatTags",00000000,00000004,004b03ec,00000004) ret=7e09fb64 0009:Ret advapi32.RegSetValueExA() retval=00000000 ret=7e09fb64 0009:Call advapi32.RegSetValueExA(00000070,7e0a61d2 "cFilterTags",00000000,00000004,004b03e8,00000004) ret=7e09fbee 0009:Ret advapi32.RegSetValueExA() retval=00000000 ret=7e09fbee 0009:Call advapi32.RegSetValueExA(00000070,7e0a61de "fdwSupport",00000000,00000004,004b03f0,00000004) ret=7e09fc2d 0009:Ret advapi32.RegSetValueExA() retval=00000000 ret=7e09fc2d 0009:Call advapi32.RegSetValueExA(00000070,7e0a61e9 "aFormatTagCache",00000000,00000003,004b0440,00000008) ret=7e09fc6e 0009:Ret advapi32.RegSetValueExA() retval=00000000 ret=7e09fc6e 0009:Call ntdll.RtlFreeHeap(004b0000,00000000,004b0130) ret=7e09fc92 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e09fc92 0009:Call ntdll.RtlFreeHeap(004b0000,00000000,004b0400) ret=7e09f969 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e09f969 0009:Call ntdll.RtlFreeHeap(004b0000,00000000,004b0420) ret=7e09f985 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e09f985 0009:Call ntdll.RtlFreeHeap(004b0000,00000000,004b0440) ret=7e09f9a1 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e09f9a1 0009:Call ntdll.RtlFreeHeap(004b0000,00000000,004b03c8) ret=7e09fa0f 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e09fa0f 0009:Call KERNEL32.HeapDestroy(004b0000) ret=7e0a179c 0009:Ret KERNEL32.HeapDestroy() retval=00000001 ret=7e0a179c 0009:Ret PE DLL (proc=0x7e0a5400,module=0x7e090000 L"msacm32.dll",reason=PROCESS_DETACH,res=0x1) retval=1 0009:Call PE DLL (proc=0x7e1c78b0,module=0x7e1a0000 L"winealsa.drv",reason=PROCESS_DETACH,res=0x1) 0009:Ret PE DLL (proc=0x7e1c78b0,module=0x7e1a0000 L"winealsa.drv",reason=PROCESS_DETACH,res=0x1) retval=1 0009:Call PE DLL (proc=0x7e9349a0,module=0x7e8d0000 L"shell32.dll",reason=PROCESS_DETACH,res=0x1) 0009:Call comctl32.386(00139118,7e8ecf60,00000000) ret=7e8ecb3c 0009:Call ntdll.RtlFreeHeap(00110000,00000000,0013a8e8) ret=7e8ecf9a 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e8ecf9a 0009:Call KERNEL32.GetProcAddress(7e280000,7e956972 "CoTaskMemFree") ret=7e934935 0009:Ret KERNEL32.GetProcAddress() retval=7e285dc0 ret=7e934935 0009:Call ole32.CoTaskMemFree(0013a818) ret=7e900579 0009:Call ntdll.RtlFreeHeap(00110000,00000000,0013a818) ret=7e2b01e8 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e2b01e8 0009:Ret ole32.CoTaskMemFree() retval=00000001 ret=7e900579 0009:Call ntdll.RtlFreeHeap(00110000,00000000,0013a950) ret=7e8ecf9a 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e8ecf9a 0009:Call ole32.CoTaskMemFree(0013a930) ret=7e900579 0009:Call ntdll.RtlFreeHeap(00110000,00000000,0013a930) ret=7e2b01e8 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e2b01e8 0009:Ret ole32.CoTaskMemFree() retval=00000001 ret=7e900579 0009:Call ntdll.RtlFreeHeap(00110000,00000000,001392a8) ret=7e7c2191 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e7c2191 0009:Call ntdll.RtlFreeHeap(00110000,00000000,00139118) ret=7e7c21af 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e7c21af 0009:Ret comctl32.386() retval=00000001 ret=7e8ecb3c 0009:Call comctl32.ImageList_Destroy(00139330) ret=7e8ecb59 0009:Call gdi32.DeleteObject(000002c8) ret=7e7cafaf 0009:Ret gdi32.DeleteObject() retval=00000001 ret=7e7cafaf 0009:Call gdi32.DeleteObject(000002cc) ret=7e7cafc1 0009:Ret gdi32.DeleteObject() retval=00000001 ret=7e7cafc1 0009:Call gdi32.DeleteDC(000001f4) ret=7e7cafd3 0009:Ret gdi32.DeleteDC() retval=00000001 ret=7e7cafd3 0009:Call gdi32.DeleteDC(00000200) ret=7e7cafe5 0009:Ret gdi32.DeleteDC() retval=00000001 ret=7e7cafe5 0009:Call gdi32.DeleteObject(0000021c) ret=7e7caff7 0009:Ret gdi32.DeleteObject() retval=00000001 ret=7e7caff7 0009:Call gdi32.DeleteObject(00000228) ret=7e7cb009 0009:Ret gdi32.DeleteObject() retval=00000001 ret=7e7cb009 0009:Call KERNEL32.LocalFree(00139330) ret=7e7ba191 0009:Ret KERNEL32.LocalFree() retval=00000000 ret=7e7ba191 0009:Ret comctl32.ImageList_Destroy() retval=00000001 ret=7e8ecb59 0009:Call comctl32.ImageList_Destroy(00139cd8) ret=7e8ecb72 0009:Call gdi32.DeleteObject(000002f8) ret=7e7cafaf 0009:Ret gdi32.DeleteObject() retval=00000001 ret=7e7cafaf 0009:Call gdi32.DeleteObject(000002fc) ret=7e7cafc1 0009:Ret gdi32.DeleteObject() retval=00000001 ret=7e7cafc1 0009:Call gdi32.DeleteDC(0000022c) ret=7e7cafd3 0009:Ret gdi32.DeleteDC() retval=00000001 ret=7e7cafd3 0009:Call gdi32.DeleteDC(00000238) ret=7e7cafe5 0009:Ret gdi32.DeleteDC() retval=00000001 ret=7e7cafe5 0009:Call gdi32.DeleteObject(00000254) ret=7e7caff7 0009:Ret gdi32.DeleteObject() retval=00000001 ret=7e7caff7 0009:Call gdi32.DeleteObject(00000260) ret=7e7cb009 0009:Ret gdi32.DeleteObject() retval=00000001 ret=7e7cb009 0009:Call KERNEL32.LocalFree(00139cd8) ret=7e7ba191 0009:Ret KERNEL32.LocalFree() retval=00000000 ret=7e7ba191 0009:Ret comctl32.ImageList_Destroy() retval=00000001 ret=7e8ecb72 0009:Call ntdll.RtlDeleteCriticalSection(7ea45640) ret=7e8ecb8e 0009:Ret ntdll.RtlDeleteCriticalSection() retval=00000000 ret=7e8ecb8e 0009:Call ntdll.RtlDeleteCriticalSection(7ea45520) ret=7e8deaa9 0009:Ret ntdll.RtlDeleteCriticalSection() retval=00000000 ret=7e8deaa9 0009:Call KERNEL32.FreeLibrary(7e280000) ret=7e9348c4 0009:Ret KERNEL32.FreeLibrary() retval=00000001 ret=7e9348c4 0009:Ret PE DLL (proc=0x7e9349a0,module=0x7e8d0000 L"shell32.dll",reason=PROCESS_DETACH,res=0x1) retval=1 0009:Call PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=PROCESS_DETACH,res=0x1) 0009:Call user32.UnregisterClassW(7e33ce20 L"OleMainThreadWndClass 0x######## ",7e280000) ret=7e297707 0009:Ret user32.UnregisterClassW() retval=00000001 ret=7e297707 0009:Ret PE DLL (proc=0x7e339580,module=0x7e280000 L"ole32.dll",reason=PROCESS_DETACH,res=0x1) retval=1 0009:Call PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=PROCESS_DETACH,res=0x1) 0009:Ret PE DLL (proc=0x7e24ae70,module=0x7e200000 L"rpcrt4.dll",reason=PROCESS_DETACH,res=0x1) retval=1 0009:Call PE DLL (proc=0x7e839d20,module=0x7e7a0000 L"comctl32.dll",reason=PROCESS_DETACH,res=0x1) 0009:Call user32.UnregisterClassW(0033fb0a L"SysAnimate32",00000000) ret=7e7b10f7 0009:Ret user32.UnregisterClassW() retval=00000001 ret=7e7b10f7 0009:Call user32.UnregisterClassW(0033fb0a L"ComboBoxEx32",00000000) ret=7e7b3bd7 0009:Ret user32.UnregisterClassW() retval=00000001 ret=7e7b3bd7 0009:Call user32.UnregisterClassW(0033fb00 L"SysDateTimePick32",00000000) ret=7e7be3c5 0009:Ret user32.UnregisterClassW() retval=00000001 ret=7e7be3c5 0009:Call user32.UnregisterClassW(0033fb06 L"flatsb_class32",00000000) ret=7e7c4023 0009:Ret user32.UnregisterClassW() retval=00000001 ret=7e7c4023 0009:Call user32.UnregisterClassW(0033fb0c L"SysHeader32",00000000) ret=7e7c4531 0009:Ret user32.UnregisterClassW() retval=00000001 ret=7e7c4531 0009:Call user32.UnregisterClassW(0033fb04 L"msctls_hotkey32",00000000) ret=7e7c89f9 0009:Ret user32.UnregisterClassW() retval=00000001 ret=7e7c89f9 0009:Call user32.UnregisterClassW(0033fb06 L"SysIPAddress32",00000000) ret=7e7cf873 0009:Ret user32.UnregisterClassW() retval=00000001 ret=7e7cf873 0009:Call user32.UnregisterClassW(0033fb08 L"SysListView32",00000000) ret=7e7d132d 0009:Ret user32.UnregisterClassW() retval=00000001 ret=7e7d132d 0009:Call user32.UnregisterClassW(0033fb08 L"SysMonthCal32",00000000) ret=7e7e9b4d 0009:Ret user32.UnregisterClassW() retval=00000001 ret=7e7e9b4d 0009:Call user32.UnregisterClassW(0033fb08 L"NativeFontCtl",00000000) ret=7e7ef1bd 0009:Ret user32.UnregisterClassW() retval=00000001 ret=7e7ef1bd 0009:Call user32.UnregisterClassW(0033fb12 L"SysPager",00000000) ret=7e7ef52f 0009:Ret user32.UnregisterClassW() retval=00000001 ret=7e7ef52f 0009:Call user32.UnregisterClassW(0033fb00 L"msctls_progress32",00000000) ret=7e7f25e5 0009:Ret user32.UnregisterClassW() retval=00000001 ret=7e7f25e5 0009:Call user32.UnregisterClassW(0033fb08 L"ReBarWindow32",00000000) ret=7e7fb6dd 0009:Ret user32.UnregisterClassW() retval=00000001 ret=7e7fb6dd 0009:Call user32.UnregisterClassW(0033fafe L"msctls_statusbar32",00000000) ret=7e803aeb 0009:Ret user32.UnregisterClassW() retval=00000001 ret=7e803aeb 0009:Call user32.UnregisterClassW(0033fb14 L"SysLink",00000000) ret=7e808b89 0009:Ret user32.UnregisterClassW() retval=00000001 ret=7e808b89 0009:Call user32.UnregisterClassW(0033fb04 L"SysTabControl32",00000000) ret=7e80b3c9 0009:Ret user32.UnregisterClassW() retval=00000001 ret=7e80b3c9 0009:Call user32.UnregisterClassW(0033fb04 L"ToolbarWindow32",00000000) ret=7e814b79 0009:Ret user32.UnregisterClassW() retval=00000001 ret=7e814b79 0009:Call user32.DestroyIcon(000010ee) ret=7e823dce 0009:Ret user32.DestroyIcon() retval=00000001 ret=7e823dce 0009:Call user32.DestroyIcon(000010f6) ret=7e823dce 0009:Ret user32.DestroyIcon() retval=00000001 ret=7e823dce 0009:Call user32.DestroyIcon(000010fe) ret=7e823dce 0009:Ret user32.DestroyIcon() retval=00000001 ret=7e823dce 0009:Call user32.UnregisterClassW(0033faf6 L"tooltips_class32",00000000) ret=7e823e4e 0009:Ret user32.UnregisterClassW() retval=00000001 ret=7e823e4e 0009:Call user32.UnregisterClassW(0033fb00 L"msctls_trackbar32",00000000) ret=7e829515 0009:Ret user32.UnregisterClassW() retval=00000001 ret=7e829515 0009:Call user32.UnregisterClassW(0033fb08 L"SysTreeView32",00000000) ret=7e82d7ad 0009:Ret user32.UnregisterClassW() retval=00000001 ret=7e82d7ad 0009:Call user32.UnregisterClassW(0033fb04 L"msctls_updown32",00000000) ret=7e8377e9 0009:Ret user32.UnregisterClassW() retval=00000001 ret=7e8377e9 0009:Call gdi32.DeleteObject(000001bc) ret=7e7bdc0f 0009:Ret gdi32.DeleteObject() retval=00000001 ret=7e7bdc0f 0009:Call gdi32.DeleteObject(000001b4) ret=7e7bdc26 0009:Ret gdi32.DeleteObject() retval=00000001 ret=7e7bdc26 0009:Call KERNEL32.GlobalDeleteAtom(0000c015) ret=7e7bdc42 0009:Ret KERNEL32.GlobalDeleteAtom() retval=00000000 ret=7e7bdc42 0009:Call KERNEL32.FreeLibrary(7e390000) ret=7e839c44 0009:Ret KERNEL32.FreeLibrary() retval=00000001 ret=7e839c44 0009:Ret PE DLL (proc=0x7e839d20,module=0x7e7a0000 L"comctl32.dll",reason=PROCESS_DETACH,res=0x1) retval=1 0009:Call PE DLL (proc=0x7e3a3120,module=0x7e390000 L"uxtheme.dll",reason=PROCESS_DETACH,res=0x1) 0009:Ret PE DLL (proc=0x7e3a3120,module=0x7e390000 L"uxtheme.dll",reason=PROCESS_DETACH,res=0x1) retval=1 0009:Call PE DLL (proc=0x7e8a5350,module=0x7e870000 L"shlwapi.dll",reason=PROCESS_DETACH,res=0x1) 0009:Call KERNEL32.TlsFree(00000002) ret=7e8991bc 0009:Ret KERNEL32.TlsFree() retval=00000001 ret=7e8991bc 0009:Ret PE DLL (proc=0x7e8a5350,module=0x7e870000 L"shlwapi.dll",reason=PROCESS_DETACH,res=0x1) retval=1 0009:Call PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=PROCESS_DETACH,res=0x1) 0009:Ret PE DLL (proc=0x7eb18790,module=0x7ea60000 L"user32.dll",reason=PROCESS_DETACH,res=0x1) retval=1 0009:Call PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=PROCESS_DETACH,res=0x1) 0009:Ret PE DLL (proc=0x7e5b7f50,module=0x7e550000 L"winex11.drv",reason=PROCESS_DETACH,res=0x1) retval=1 0009:Call PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=PROCESS_DETACH,res=0x1) 0009:Call KERNEL32.TlsGetValue(00000000) ret=7e3f4071 0009:Ret KERNEL32.TlsGetValue() retval=00147218 ret=7e3f4071 0009:Call winex11.drv.ImeSelect(00147230,00000000) ret=7e3f3508 0009:Ret winex11.drv.ImeSelect() retval=00000001 ret=7e3f3508 0009:Call user32.GetKeyboardLayout(00000000) ret=7e3f3517 0009:Ret user32.GetKeyboardLayout() retval=00000000 ret=7e3f3517 0009:Call user32.SendMessageW(00010030,00000285,00000000,00000000) ret=7e3f3539 0009:Ret user32.SendMessageW() retval=00000000 ret=7e3f3539 0009:Call KERNEL32.TlsGetValue(00000000) ret=7e3f02b5 0009:Ret KERNEL32.TlsGetValue() retval=00147218 ret=7e3f02b5 0009:Call KERNEL32.TlsGetValue(00000000) ret=7e3f02b5 0009:Ret KERNEL32.TlsGetValue() retval=00147218 ret=7e3f02b5 0009:Call user32.DestroyWindow(00000000) ret=7e3f355e 0009:Ret user32.DestroyWindow() retval=00000000 ret=7e3f355e 0009:Call ntdll.RtlFreeHeap(00110000,00000000,00147690) ret=7e3f34b6 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e3f34b6 0009:Call ntdll.RtlFreeHeap(00110000,00000000,00147720) ret=7e3f34b6 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e3f34b6 0009:Call ntdll.RtlFreeHeap(00110000,00000000,001477c0) ret=7e3f34b6 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e3f34b6 0009:Call ntdll.RtlFreeHeap(00110000,00000000,001477f0) ret=7e3f34b6 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e3f34b6 0009:Call ntdll.RtlFreeHeap(00110000,00000000,00147708) ret=7e3f34b6 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e3f34b6 0009:Call ntdll.RtlFreeHeap(00110000,00000000,00147230) ret=7e3f35d3 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e3f35d3 0009:Call user32.DestroyWindow(00000000) ret=7e3f408c 0009:Ret user32.DestroyWindow() retval=00000000 ret=7e3f408c 0009:Call ntdll.RtlFreeHeap(00110000,00000000,00147218) ret=7e3f40ac 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e3f40ac 0009:Call winex11.drv.ImeDestroy(00000001) ret=7e3f4175 0009:Ret winex11.drv.ImeDestroy() retval=00000001 ret=7e3f4175 0009:Call KERNEL32.FreeLibrary(7e550000) ret=7e3f4183 0009:Ret KERNEL32.FreeLibrary() retval=00000001 ret=7e3f4183 0009:Call ntdll.RtlFreeHeap(00110000,00000000,00147388) ret=7e3f41a3 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e3f41a3 0009:Call KERNEL32.TlsFree(00000000) ret=7e3f41bd 0009:Ret KERNEL32.TlsFree() retval=00000001 ret=7e3f41bd 0009:Ret PE DLL (proc=0x7e3f6a50,module=0x7e3e0000 L"imm32.dll",reason=PROCESS_DETACH,res=0x1) retval=1 0009:Call PE DLL (proc=0x7ec042a0,module=0x7eba0000 L"gdi32.dll",reason=PROCESS_DETACH,res=0x1) 0009:Ret PE DLL (proc=0x7ec042a0,module=0x7eba0000 L"gdi32.dll",reason=PROCESS_DETACH,res=0x1) retval=1 0009:Call PE DLL (proc=0x7ec724e0,module=0x7ec40000 L"advapi32.dll",reason=PROCESS_DETACH,res=0x1) 0009:Ret PE DLL (proc=0x7ec724e0,module=0x7ec40000 L"advapi32.dll",reason=PROCESS_DETACH,res=0x1) retval=1 0009:Call PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=PROCESS_DETACH,res=0x1) 0009:Ret PE DLL (proc=0x7ee45a90,module=0x7edc0000 L"KERNEL32.dll",reason=PROCESS_DETACH,res=0x1) retval=1 0009:Call PE DLL (proc=0x7efd1850,module=0x7ef60000 L"ntdll.dll",reason=PROCESS_DETACH,res=0x1) 0009:Ret PE DLL (proc=0x7efd1850,module=0x7ef60000 L"ntdll.dll",reason=PROCESS_DETACH,res=0x1) retval=1 0019:Ret user32.GetMessageW() retval=00000001 ret=7ec5ec4b 0019:Call user32.DispatchMessageW(0033f93c) ret=7ec5ec28 0019:Call window proc 0x7ec60b80 (hwnd=0x10026,msg=WM_TIMER,wp=00000001,lp=00000000) 0019:Ret window proc 0x7ec60b80 (hwnd=0x10026,msg=WM_TIMER,wp=00000001,lp=00000000) retval=00000000 0019:Ret user32.DispatchMessageW() retval=00000000 ret=7ec5ec28 0019:Call user32.GetMessageW(0033f93c,00000000,00000000,00000000) ret=7ec5ec4b 0019:Ret user32.GetMessageW() retval=00000001 ret=7ec5ec4b 0019:Call user32.DispatchMessageW(0033f93c) ret=7ec5ec28 0019:Call window proc 0x7ec5f470 (hwnd=0x10020,msg=WM_CLOSE,wp=00000000,lp=00000000) 0019:Call user32.PostQuitMessage(00000000) ret=7ec5f50e 0019:Ret user32.PostQuitMessage() retval=00000000 ret=7ec5f50e 0019:Ret window proc 0x7ec5f470 (hwnd=0x10020,msg=WM_CLOSE,wp=00000000,lp=00000000) retval=00000000 0019:Ret user32.DispatchMessageW() retval=00000000 ret=7ec5ec28 0019:Call user32.GetMessageW(0033f93c,00000000,00000000,00000000) ret=7ec5ec4b 0019:Ret user32.GetMessageW() retval=00000000 ret=7ec5ec4b 0019:Call KERNEL32.ExitProcess(00000000) ret=7ec5ec6b 0019:Call PE DLL (proc=0x7e5399a0,module=0x7e4d0000 L"shell32.dll",reason=PROCESS_DETACH,res=0x1) 0019:Call comctl32.386(00139958,7e4f1f60,00000000) ret=7e4f1b3c 0019:Call ntdll.RtlFreeHeap(00110000,00000000,0013b1d8) ret=7e4f1f9a 0019:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e4f1f9a 0019:Call KERNEL32.GetProcAddress(7e290000,7e55b972 "CoTaskMemFree") ret=7e539935 0019:Ret KERNEL32.GetProcAddress() retval=7e29adc0 ret=7e539935 0019:Call ole32.CoTaskMemFree(0013b2d0) ret=7e505579 0019:Call ntdll.RtlFreeHeap(00110000,00000000,0013b2d0) ret=7e2c51e8 0019:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e2c51e8 0019:Ret ole32.CoTaskMemFree() retval=00000001 ret=7e505579 0019:Call ntdll.RtlFreeHeap(00110000,00000000,0013b240) ret=7e4f1f9a 0019:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e4f1f9a 0019:Call ole32.CoTaskMemFree(0013b220) ret=7e505579 0019:Call ntdll.RtlFreeHeap(00110000,00000000,0013b220) ret=7e2c51e8 0019:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e2c51e8 0019:Ret ole32.CoTaskMemFree() retval=00000001 ret=7e505579 0019:Call ntdll.RtlFreeHeap(00110000,00000000,00139978) ret=7e3c7191 0019:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e3c7191 0019:Call ntdll.RtlFreeHeap(00110000,00000000,00139958) ret=7e3c71af 0019:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e3c71af 0019:Ret comctl32.386() retval=00000001 ret=7e4f1b3c 0019:Call comctl32.ImageList_Destroy(00139e48) ret=7e4f1b59 0019:Call gdi32.DeleteObject(000002f4) ret=7e3cffaf 0019:Ret gdi32.DeleteObject() retval=00000001 ret=7e3cffaf 0019:Call gdi32.DeleteObject(000002f8) ret=7e3cffc1 0019:Ret gdi32.DeleteObject() retval=00000001 ret=7e3cffc1 0019:Call gdi32.DeleteDC(00000220) ret=7e3cffd3 0019:Ret gdi32.DeleteDC() retval=00000001 ret=7e3cffd3 0019:Call gdi32.DeleteDC(0000022c) ret=7e3cffe5 0019:Ret gdi32.DeleteDC() retval=00000001 ret=7e3cffe5 0019:Call gdi32.DeleteObject(00000248) ret=7e3cfff7 0019:Ret gdi32.DeleteObject() retval=00000001 ret=7e3cfff7 0019:Call gdi32.DeleteObject(00000254) ret=7e3d0009 0019:Ret gdi32.DeleteObject() retval=00000001 ret=7e3d0009 0019:Call KERNEL32.LocalFree(00139e48) ret=7e3bf191 0019:Ret KERNEL32.LocalFree() retval=00000000 ret=7e3bf191 0019:Ret comctl32.ImageList_Destroy() retval=00000001 ret=7e4f1b59 0019:Call comctl32.ImageList_Destroy(0013a820) ret=7e4f1b72 0019:Call gdi32.DeleteObject(00000324) ret=7e3cffaf 0019:Ret gdi32.DeleteObject() retval=00000001 ret=7e3cffaf 0019:Call gdi32.DeleteObject(00000328) ret=7e3cffc1 0019:Ret gdi32.DeleteObject() retval=00000001 ret=7e3cffc1 0019:Call gdi32.DeleteDC(00000258) ret=7e3cffd3 0019:Ret gdi32.DeleteDC() retval=00000001 ret=7e3cffd3 0019:Call gdi32.DeleteDC(00000264) ret=7e3cffe5 0019:Ret gdi32.DeleteDC() retval=00000001 ret=7e3cffe5 0019:Call gdi32.DeleteObject(00000280) ret=7e3cfff7 0019:Ret gdi32.DeleteObject() retval=00000001 ret=7e3cfff7 0019:Call gdi32.DeleteObject(0000028c) ret=7e3d0009 0019:Ret gdi32.DeleteObject() retval=00000001 ret=7e3d0009 0019:Call KERNEL32.LocalFree(0013a820) ret=7e3bf191 0019:Ret KERNEL32.LocalFree() retval=00000000 ret=7e3bf191 0019:Ret comctl32.ImageList_Destroy() retval=00000001 ret=7e4f1b72 0019:Call ntdll.RtlDeleteCriticalSection(7e64a640) ret=7e4f1b8e 0019:Ret ntdll.RtlDeleteCriticalSection() retval=00000000 ret=7e4f1b8e 0019:Call ntdll.RtlDeleteCriticalSection(7e64a520) ret=7e4e3aa9 0019:Ret ntdll.RtlDeleteCriticalSection() retval=00000000 ret=7e4e3aa9 0019:Call KERNEL32.FreeLibrary(7e290000) ret=7e5398c4 0019:Ret KERNEL32.FreeLibrary() retval=00000001 ret=7e5398c4 0019:Ret PE DLL (proc=0x7e5399a0,module=0x7e4d0000 L"shell32.dll",reason=PROCESS_DETACH,res=0x1) retval=1 0019:Call PE DLL (proc=0x7e34e580,module=0x7e290000 L"ole32.dll",reason=PROCESS_DETACH,res=0x1) 0019:Call user32.UnregisterClassW(7e351e20 L"OleMainThreadWndClass 0x######## ",7e290000) ret=7e2ac707 0019:Ret user32.UnregisterClassW() retval=00000001 ret=7e2ac707 0019:Ret PE DLL (proc=0x7e34e580,module=0x7e290000 L"ole32.dll",reason=PROCESS_DETACH,res=0x1) retval=1 0019:Call PE DLL (proc=0x7e43ed20,module=0x7e3b0000 L"comctl32.dll",reason=PROCESS_DETACH,res=0x1) 0019:Call user32.UnregisterClassW(0033f4ba L"SysAnimate32",00000000) ret=7e3b60f7 0019:Ret user32.UnregisterClassW() retval=00000001 ret=7e3b60f7 0019:Call user32.UnregisterClassW(0033f4ba L"ComboBoxEx32",00000000) ret=7e3b8bd7 0019:Ret user32.UnregisterClassW() retval=00000001 ret=7e3b8bd7 0019:Call user32.UnregisterClassW(0033f4b0 L"SysDateTimePick32",00000000) ret=7e3c33c5 0019:Ret user32.UnregisterClassW() retval=00000001 ret=7e3c33c5 0019:Call user32.UnregisterClassW(0033f4b6 L"flatsb_class32",00000000) ret=7e3c9023 0019:Ret user32.UnregisterClassW() retval=00000001 ret=7e3c9023 0019:Call user32.UnregisterClassW(0033f4bc L"SysHeader32",00000000) ret=7e3c9531 0019:Ret user32.UnregisterClassW() retval=00000001 ret=7e3c9531 0019:Call user32.UnregisterClassW(0033f4b4 L"msctls_hotkey32",00000000) ret=7e3cd9f9 0019:Ret user32.UnregisterClassW() retval=00000001 ret=7e3cd9f9 0019:Call user32.UnregisterClassW(0033f4b6 L"SysIPAddress32",00000000) ret=7e3d4873 0019:Ret user32.UnregisterClassW() retval=00000001 ret=7e3d4873 0019:Call user32.UnregisterClassW(0033f4b8 L"SysListView32",00000000) ret=7e3d632d 0019:Ret user32.UnregisterClassW() retval=00000001 ret=7e3d632d 0019:Call user32.UnregisterClassW(0033f4b8 L"SysMonthCal32",00000000) ret=7e3eeb4d 0019:Ret user32.UnregisterClassW() retval=00000001 ret=7e3eeb4d 0019:Call user32.UnregisterClassW(0033f4b8 L"NativeFontCtl",00000000) ret=7e3f41bd 0019:Ret user32.UnregisterClassW() retval=00000001 ret=7e3f41bd 0019:Call user32.UnregisterClassW(0033f4c2 L"SysPager",00000000) ret=7e3f452f 0019:Ret user32.UnregisterClassW() retval=00000001 ret=7e3f452f 0019:Call user32.UnregisterClassW(0033f4b0 L"msctls_progress32",00000000) ret=7e3f75e5 0019:Ret user32.UnregisterClassW() retval=00000001 ret=7e3f75e5 0019:Call user32.UnregisterClassW(0033f4b8 L"ReBarWindow32",00000000) ret=7e4006dd 0019:Ret user32.UnregisterClassW() retval=00000001 ret=7e4006dd 0019:Call user32.UnregisterClassW(0033f4ae L"msctls_statusbar32",00000000) ret=7e408aeb 0019:Ret user32.UnregisterClassW() retval=00000001 ret=7e408aeb 0019:Call user32.UnregisterClassW(0033f4c4 L"SysLink",00000000) ret=7e40db89 0019:Ret user32.UnregisterClassW() retval=00000001 ret=7e40db89 0019:Call user32.UnregisterClassW(0033f4b4 L"SysTabControl32",00000000) ret=7e4103c9 0019:Ret user32.UnregisterClassW() retval=00000001 ret=7e4103c9 0019:Call user32.UnregisterClassW(0033f4b4 L"ToolbarWindow32",00000000) ret=7e419b79 0019:Ret user32.UnregisterClassW() retval=00000001 ret=7e419b79 0019:Call user32.DestroyIcon(000010f6) ret=7e428dce 0019:Ret user32.DestroyIcon() retval=00000001 ret=7e428dce 0019:Call user32.DestroyIcon(000010fe) ret=7e428dce 0019:Ret user32.DestroyIcon() retval=00000001 ret=7e428dce 0019:Call user32.DestroyIcon(00001106) ret=7e428dce 0019:Ret user32.DestroyIcon() retval=00000001 ret=7e428dce 0019:Call user32.UnregisterClassW(0033f4a6 L"tooltips_class32",00000000) ret=7e428e4e 0019:Ret user32.UnregisterClassW() retval=00000001 ret=7e428e4e 0019:Call user32.UnregisterClassW(0033f4b0 L"msctls_trackbar32",00000000) ret=7e42e515 0019:Ret user32.UnregisterClassW() retval=00000001 ret=7e42e515 0019:Call user32.UnregisterClassW(0033f4b8 L"SysTreeView32",00000000) ret=7e4327ad 0019:Ret user32.UnregisterClassW() retval=00000001 ret=7e4327ad 0019:Call user32.UnregisterClassW(0033f4b4 L"msctls_updown32",00000000) ret=7e43c7e9 0019:Ret user32.UnregisterClassW() retval=00000001 ret=7e43c7e9 0019:Call gdi32.DeleteObject(00000204) ret=7e3c2c0f 0019:Ret gdi32.DeleteObject() retval=00000001 ret=7e3c2c0f 0019:Call gdi32.DeleteObject(000001fc) ret=7e3c2c26 0019:Ret gdi32.DeleteObject() retval=00000001 ret=7e3c2c26 0019:Call KERNEL32.GlobalDeleteAtom(0000c015) ret=7e3c2c42 0019:Ret KERNEL32.GlobalDeleteAtom() retval=00000000 ret=7e3c2c42 0019:Call KERNEL32.FreeLibrary(7e370000) ret=7e43ec44 0019:Ret KERNEL32.FreeLibrary() retval=00000001 ret=7e43ec44 0019:Ret PE DLL (proc=0x7e43ed20,module=0x7e3b0000 L"comctl32.dll",reason=PROCESS_DETACH,res=0x1) retval=1 0019:Call PE DLL (proc=0x7e38e120,module=0x7e370000 L"uxtheme.dll",reason=PROCESS_DETACH,res=0x1) 0019:Ret PE DLL (proc=0x7e38e120,module=0x7e370000 L"uxtheme.dll",reason=PROCESS_DETACH,res=0x1) retval=1 0019:Call PE DLL (proc=0x7e4aa350,module=0x7e470000 L"shlwapi.dll",reason=PROCESS_DETACH,res=0x1) 0019:Call KERNEL32.TlsFree(00000002) ret=7e49e1bc 0019:Ret KERNEL32.TlsFree() retval=00000001 ret=7e49e1bc 0019:Ret PE DLL (proc=0x7e4aa350,module=0x7e470000 L"shlwapi.dll",reason=PROCESS_DETACH,res=0x1) retval=1 0019:Call PE DLL (proc=0x7eb17790,module=0x7ea60000 L"user32.dll",reason=PROCESS_DETACH,res=0x1) 0019:Ret PE DLL (proc=0x7eb17790,module=0x7ea60000 L"user32.dll",reason=PROCESS_DETACH,res=0x1) retval=1 0019:Call PE DLL (proc=0x7e873f50,module=0x7e810000 L"winex11.drv",reason=PROCESS_DETACH,res=0x1) 0019:Ret PE DLL (proc=0x7e873f50,module=0x7e810000 L"winex11.drv",reason=PROCESS_DETACH,res=0x1) retval=1 0019:Call PE DLL (proc=0x7e6b2a50,module=0x7e6a0000 L"imm32.dll",reason=PROCESS_DETACH,res=0x1) 0019:Call KERNEL32.TlsGetValue(00000000) ret=7e6b0071 0019:Ret KERNEL32.TlsGetValue() retval=00000000 ret=7e6b0071 0019:Call KERNEL32.TlsFree(00000000) ret=7e6b01bd 0019:Ret KERNEL32.TlsFree() retval=00000001 ret=7e6b01bd 0019:Ret PE DLL (proc=0x7e6b2a50,module=0x7e6a0000 L"imm32.dll",reason=PROCESS_DETACH,res=0x1) retval=1 0019:Call PE DLL (proc=0x7ea1e2a0,module=0x7e9c0000 L"gdi32.dll",reason=PROCESS_DETACH,res=0x1) 0019:Ret PE DLL (proc=0x7ea1e2a0,module=0x7e9c0000 L"gdi32.dll",reason=PROCESS_DETACH,res=0x1) retval=1 0019:Call PE DLL (proc=0x7ec36e70,module=0x7ebf0000 L"rpcrt4.dll",reason=PROCESS_DETACH,res=0x1) 0019:Ret PE DLL (proc=0x7ec36e70,module=0x7ebf0000 L"rpcrt4.dll",reason=PROCESS_DETACH,res=0x1) retval=1 0019:Call PE DLL (proc=0x7ebd24e0,module=0x7eba0000 L"advapi32.dll",reason=PROCESS_DETACH,res=0x1) 0019:Ret PE DLL (proc=0x7ebd24e0,module=0x7eba0000 L"advapi32.dll",reason=PROCESS_DETACH,res=0x1) retval=1 0019:Call PE DLL (proc=0x7ee72a90,module=0x7edf0000 L"KERNEL32.dll",reason=PROCESS_DETACH,res=0x1) 0019:Ret PE DLL (proc=0x7ee72a90,module=0x7edf0000 L"KERNEL32.dll",reason=PROCESS_DETACH,res=0x1) retval=1 0019:Call PE DLL (proc=0x7efd1850,module=0x7ef60000 L"ntdll.dll",reason=PROCESS_DETACH,res=0x1) 0019:Ret PE DLL (proc=0x7efd1850,module=0x7ef60000 L"ntdll.dll",reason=PROCESS_DETACH,res=0x1) retval=1 0012:Call PE DLL (proc=0x7ebbfe70,module=0x7eb80000 L"rpcrt4.dll",reason=PROCESS_DETACH,res=0x1) 0012:Ret PE DLL (proc=0x7ebbfe70,module=0x7eb80000 L"rpcrt4.dll",reason=PROCESS_DETACH,res=0x1) retval=1 0012:Call PE DLL (proc=0x7ebf61c0,module=0x7ebe0000 L"ntoskrnl.exe",reason=PROCESS_DETACH,res=0x1) 0012:Call ntdll.RtlRemoveVectoredExceptionHandler(0011bed0) ret=7ebf4b17 0012:Ret ntdll.RtlRemoveVectoredExceptionHandler() retval=00000001 ret=7ebf4b17 0012:Ret PE DLL (proc=0x7ebf61c0,module=0x7ebe0000 L"ntoskrnl.exe",reason=PROCESS_DETACH,res=0x1) retval=1 0012:Call PE DLL (proc=0x7ec554e0,module=0x7ec20000 L"advapi32.dll",reason=PROCESS_DETACH,res=0x1) 0012:Ret PE DLL (proc=0x7ec554e0,module=0x7ec20000 L"advapi32.dll",reason=PROCESS_DETACH,res=0x1) retval=1 0012:Call PE DLL (proc=0x7ee72a90,module=0x7edf0000 L"KERNEL32.dll",reason=PROCESS_DETACH,res=0x1) 0012:Ret PE DLL (proc=0x7ee72a90,module=0x7edf0000 L"KERNEL32.dll",reason=PROCESS_DETACH,res=0x1) retval=1 0012:Call PE DLL (proc=0x7efd1850,module=0x7ef60000 L"ntdll.dll",reason=PROCESS_DETACH,res=0x1) 0012:Ret PE DLL (proc=0x7efd1850,module=0x7ef60000 L"ntdll.dll",reason=PROCESS_DETACH,res=0x1) retval=1 000f:Ret KERNEL32.WaitForSingleObjectEx() retval=00000000 ret=7ec55cd2 000f:Call KERNEL32.CloseHandle(00000048) ret=7ec55d4b 000f:Ret KERNEL32.CloseHandle() retval=00000001 ret=7ec55d4b 000f:Call advapi32.RegCloseKey(00000020) ret=7ec59378 000f:Ret advapi32.RegCloseKey() retval=00000000 ret=7ec59378 000f:Call ntdll.RtlDeleteCriticalSection(00114f88) ret=7ec59386 000f:Ret ntdll.RtlDeleteCriticalSection() retval=00000000 ret=7ec59386 000f:Call ntdll.RtlFreeHeap(00110000,00000000,00114f78) ret=7ec593a6 000f:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec593a6 000f:Call KERNEL32.ExitProcess(00000000) ret=7ec60d36 000f:Call PE DLL (proc=0x7ec2ce70,module=0x7ebe0000 L"rpcrt4.dll",reason=PROCESS_DETACH,res=0x1) 000f:Call KERNEL32.WaitForSingleObject(00000030,ffffffff) ret=7ec1fc2c 000f:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7ec1fc2c 000f:Call KERNEL32.SetEvent(00000024) ret=7ec23c04 0010:Ret KERNEL32.WaitForMultipleObjectsEx() retval=00000000 ret=7ec26376 0010:Call ntdll.RtlFreeHeap(00110000,00000000,0011a9f8) ret=7ec26936 0010:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec26936 0010:Call KERNEL32.FlushFileBuffers(0000004c) ret=7ec25b19 0010:Ret KERNEL32.FlushFileBuffers() retval=00000001 ret=7ec25b19 0010:Call KERNEL32.CloseHandle(0000004c) ret=7ec25b27 000f:Ret KERNEL32.SetEvent() retval=00000001 ret=7ec23c04 000f:Call KERNEL32.WaitForSingleObject(00000034,ffffffff) ret=7ec1fc4a 0014:Ret KERNEL32.ReadFile() retval=00000000 ret=7ec262f2 0014:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec1e246 0014:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec1e246 0014:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec1e32e 0014:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec1e32e 0014:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec2b066 0014:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec2b066 0014:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec1e246 0014:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec1e246 0014:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec1ed28 0014:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec1ed28 0014:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec1ed4b 0014:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec1ed4b 0014:Call ntdll.RtlFreeHeap(00110000,00000000,0011b100) ret=7ec208c5 0014:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec208c5 0014:Call KERNEL32.FlushFileBuffers(00000028) ret=7ec25b19 0014:Ret KERNEL32.FlushFileBuffers() retval=00000001 ret=7ec25b19 0014:Call KERNEL32.CloseHandle(00000028) ret=7ec25b27 0010:Ret KERNEL32.CloseHandle() retval=00000001 ret=7ec25b27 0010:Call KERNEL32.CloseHandle(00000050) ret=7ec25b43 0014:Ret KERNEL32.CloseHandle() retval=00000001 ret=7ec25b27 0014:Call KERNEL32.CloseHandle(0000002c) ret=7ec25b43 0010:Ret KERNEL32.CloseHandle() retval=00000001 ret=7ec25b43 0010:Call KERNEL32.SetEvent(00000034) ret=7ec20255 0014:Ret KERNEL32.CloseHandle() retval=00000001 ret=7ec25b43 0014:Call ntdll.RtlFreeHeap(00110000,00000000,0011acf0) ret=7ec166d6 0014:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec166d6 0014:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec166d6 0014:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec166d6 0014:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec28c52 0014:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec28c52 0014:Call ntdll.RtlFreeHeap(00110000,00000000,0011b070) ret=7ec55b98 0014:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec55b98 0014:Call ntdll.RtlDeleteResource(0011b02c) ret=7ec13e48 0010:Ret KERNEL32.SetEvent() retval=00000001 ret=7ec20255 000f:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=7ec1fc4a 000f:Call KERNEL32.ReleaseMutex(00000030) ret=7ec1fc58 000f:Ret KERNEL32.ReleaseMutex() retval=00000001 ret=7ec1fc58 000f:Call ntdll.RtlFreeHeap(00110000,00000000,0011aa58) ret=7ec166d6 000f:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec166d6 000f:Call ntdll.RtlDeleteCriticalSection(0011aa28) ret=7ec20317 000f:Ret ntdll.RtlDeleteCriticalSection() retval=00000000 ret=7ec20317 000f:Call KERNEL32.CloseHandle(00000030) ret=7ec20325 0014:Ret ntdll.RtlDeleteResource() retval=00000000 ret=7ec13e48 0014:Call ntdll.RtlFreeHeap(00110000,00000000,0011b008) ret=7ec13e68 0014:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec13e68 0014:Call ntdll.RtlFreeHeap(00110000,00000000,0011b0d8) ret=7ec55b98 0014:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec55b98 0014:Call ntdll.RtlDeleteResource(0011b164) ret=7ec13e48 000f:Ret KERNEL32.CloseHandle() retval=00000001 ret=7ec20325 000f:Call KERNEL32.CloseHandle(00000034) ret=7ec20333 000f:Ret KERNEL32.CloseHandle() retval=00000001 ret=7ec20333 000f:Call ntdll.RtlFreeHeap(00110000,00000000,0011aa10) ret=7ec20361 000f:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec20361 000f:Ret PE DLL (proc=0x7ec2ce70,module=0x7ebe0000 L"rpcrt4.dll",reason=PROCESS_DETACH,res=0x1) retval=1 000f:Call PE DLL (proc=0x7ebc84e0,module=0x7eb90000 L"advapi32.dll",reason=PROCESS_DETACH,res=0x1) 000f:Ret PE DLL (proc=0x7ebc84e0,module=0x7eb90000 L"advapi32.dll",reason=PROCESS_DETACH,res=0x1) retval=1 000f:Call PE DLL (proc=0x7ee72a90,module=0x7edf0000 L"KERNEL32.dll",reason=PROCESS_DETACH,res=0x1) 000f:Ret PE DLL (proc=0x7ee72a90,module=0x7edf0000 L"KERNEL32.dll",reason=PROCESS_DETACH,res=0x1) retval=1 000f:Call PE DLL (proc=0x7efd1850,module=0x7ef60000 L"ntdll.dll",reason=PROCESS_DETACH,res=0x1) 000f:Ret PE DLL (proc=0x7efd1850,module=0x7ef60000 L"ntdll.dll",reason=PROCESS_DETACH,res=0x1) retval=1 0014:Ret ntdll.RtlDeleteResource() retval=00000000 ret=7ec13e48 0014:Call ntdll.RtlFreeHeap(00110000,00000000,0011b140) ret=7ec13e68 0014:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec13e68 0014:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec143c3 0014:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec143c3 0014:Call ntdll.RtlFreeHeap(00110000,00000000,0011af40) ret=7ec143ea 0014:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec143ea 0014:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec14411 0014:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec14411 0014:Call ntdll.RtlFreeHeap(00110000,00000000,0011af28) ret=7ec14438 0014:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec14438 0014:Call ntdll.RtlDeleteCriticalSection(0011aed0) ret=7ec14449 0014:Ret ntdll.RtlDeleteCriticalSection() retval=00000000 ret=7ec14449 0014:Call ntdll.RtlFreeHeap(00110000,00000000,0011aea0) ret=7ec1446c 0014:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec1446c 0014:Call ntdll.RtlFreeHeap(00110000,00000000,0011ae88) ret=7ec166d6 0014:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec166d6 0014:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec166d6 0014:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec166d6 0014:Call ntdll.RtlFreeHeap(00110000,00000000,0011ae70) ret=7ec166d6 0014:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec166d6 0014:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7ec16bb6 0014:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec16bb6 0014:Call ntdll.RtlFreeHeap(00110000,00000000,0011ae20) ret=7ec16bf4 0014:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec16bf4 0014:Call ntdll.RtlFreeHeap(00110000,00000000,0011ac58) ret=7ec28c9f 0014:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7ec28c9f