Dump started on 9/28/2012 at 12:10:43.705 Operating system: Microsoft Windows XP Professional Service Pack 3 (build 2600) User name: test.xp Member of: Domain Users, Iedereen, Gebruikers, Administrators, INTERACTIEF, Geverifieerde gebruikers, , LOKAAL, G-CRL-Lijsten, G-APPL_TMSViewer, G-COMEZ, Domain Admins, Essom Testgroep, G-Dameware_remote_access, Denied RODC Password Replication Group Computer name: VM-THINAPP2 IE version: 6.0.2900.5512 Drives: Drive C: Fixed NTFS serial 1954226516 [x747B2154], 11,295 MB user free, CASE_SENSITIVE_SEARCH CASE_PRESERVED_NAMES UNICODE_ON_DISK PERSISTENT_ACLS FILE_COMPRESSION VOLUME_QUOTAS SUPPORTS_SPARSE_FILES SUPPORTS_REPARSE_POINTS SUPPORTS_OBJECT_IDS SUPPORTS_ENCRYPTION NAMED_STREAMS Drive D: Working dir: C:\Program Files\VMware\VMware ThinApp\Captures\Ultimo\bin ADO version: 2.81.1132.0 Terminal services: Not running Remote session: No LUA enabled: No LOCALE_SYSTEM_DEFAULT: 0413 NLD LOCALE_USER_DEFAULT: 0413 NLD Installed apps System-wide AddressBook, Branding, Connection Manager, DirectAnimation, DirectDrawEx, DXM_Runtime, Fontcore, ICW, Microsoft Internationalized Domain Names Mitigation APIs, IE40, IE4Data, IE5BAKEX, IEData, Beveiligingsupdate voor Windows XP (KB2079403), Beveiligingsupdate voor Windows XP (KB2115168), Beveiligingsupdate voor Windows XP (KB2121546), Update voor Windows XP (KB2141007), Beveiligingsupdate voor Windows XP (KB2160329), Beveiligingsupdate voor Windows XP (KB2229593), Beveiligingsupdate voor Windows XP (KB2259922), Update voor Windows XP (KB2264107), Beveiligingsupdate voor Windows XP (KB2286198), Beveiligingsupdate voor Windows XP (KB2296011), Update voor Windows XP (KB2345886), Beveiligingsupdate voor Windows XP (KB2347290), Beveiligingsupdate voor Windows XP (KB2360131), Beveiligingsupdate voor Windows XP (KB2360937), Beveiligingsupdate voor Windows Media Player (KB2378111), Beveiligingsupdate voor Windows XP (KB2387149), Beveiligingsupdate voor Windows XP (KB2393802), Beveiligingsupdate voor Windows XP (KB2419632), Beveiligingsupdate voor Windows XP (KB2423089), Beveiligingsupdate voor Windows XP (KB2440591), Beveiligingsupdate voor Windows XP (KB2443105), Hotfix voor Windows XP (KB2443685), Update voor Windows XP (KB2467659), Beveiligingsupdate voor Windows XP (KB2476687), Beveiligingsupdate voor Windows XP (KB2478960), Beveiligingsupdate voor Windows XP (KB2478971), Beveiligingsupdate voor Windows XP (KB2479628), Beveiligingsupdate voor Windows XP (KB2479943), Beveiligingsupdate voor Windows XP (KB2483185), Beveiligingsupdate voor Windows XP (KB2483614), Beveiligingsupdate voor Windows XP (KB2485376), Update voor Windows XP (KB898461), Beveiligingsupdate voor Windows XP (KB923561), Beveiligingsupdate voor Windows XP (KB923789), KB943729: Update voor Windows XP, Beveiligingsupdate voor Windows XP (KB946648), Beveiligingsupdate voor Windows XP (KB950760), Beveiligingsupdate voor Windows XP (KB950762), Beveiligingsupdate voor Windows XP (KB950974), Beveiligingsupdate voor Windows XP (KB951376-v2), Beveiligingsupdate voor Windows XP (KB951748), Update voor Windows XP (KB951978), Beveiligingsupdate voor Windows XP (KB952004), Beveiligingsupdate voor Windows Media Player (KB952069), Hotfix voor Windows XP (KB952287), Beveiligingsupdate voor Windows XP (KB952954), Beveiligingsupdate voor Windows Media Player (KB954155), Beveiligingsupdate voor Windows XP (KB954459), Update voor Windows XP (KB955759), Beveiligingsupdate voor Windows XP (KB956572), Beveiligingsupdate voor Windows XP (KB956744), Beveiligingsupdate voor Windows XP (KB956802), Beveiligingsupdate voor Windows XP (KB956803), Beveiligingsupdate voor Windows XP (KB956844), Beveiligingsupdate voor Windows XP (KB958644), Beveiligingsupdate voor Windows XP (KB958869), Beveiligingsupdate voor Windows XP (KB959426), Beveiligingsupdate voor Windows XP (KB960803), Beveiligingsupdate voor Windows XP (KB960859), Beveiligingsupdate voor Windows XP (KB961501), Update voor Windows XP (KB967715), Update voor Windows XP (KB968389), Beveiligingsupdate voor Windows Media Player (KB968816), Beveiligingsupdate voor Windows XP (KB969059), Hotfix voor Windows XP (KB969084), Beveiligingsupdate voor Windows XP (KB970430), Update voor Windows XP (KB971029), KB971513: Update voor Microsoft Windows, Beveiligingsupdate voor Windows XP (KB971657), Update voor Windows XP (KB971737), Beveiligingsupdate voor Windows XP (KB971961), Beveiligingsupdate voor Windows XP (KB972270), Beveiligingsupdate voor Windows XP (KB973507), Beveiligingsupdate voor Windows Media Player (KB973540), Update voor Windows XP (KB973687), Update voor Windows XP (KB973815), Beveiligingsupdate voor Windows XP (KB973869), Beveiligingsupdate voor Windows XP (KB973904), Beveiligingsupdate voor Windows XP (KB974112), Beveiligingsupdate voor Windows XP (KB974318), Beveiligingsupdate voor Windows XP (KB974392), Beveiligingsupdate voor Windows XP (KB974455), Beveiligingsupdate voor Windows XP (KB974571), Beveiligingsupdate voor Windows XP (KB975025), Beveiligingsupdate voor Windows XP (KB975467), Beveiligingsupdate voor Windows Media Player (KB975558), Beveiligingsupdate voor Windows XP (KB975560), Beveiligingsupdate voor Windows XP (KB975562), Beveiligingsupdate voor Windows XP (KB975713), Beveiligingsupdate voor Windows XP (KB977816), Beveiligingsupdate voor Windows XP (KB977914), Beveiligingsupdate voor Windows XP (KB978037), Beveiligingsupdate voor Windows XP (KB978338), Beveiligingsupdate voor Windows XP (KB978542), Beveiligingsupdate voor Windows XP (KB978601), Beveiligingsupdate voor Windows XP (KB978706), Beveiligingsupdate voor Windows XP (KB979309), Beveiligingsupdate voor Windows Media Player (KB979402), Beveiligingsupdate voor Windows XP (KB979482), Beveiligingsupdate voor Windows XP (KB979687), Beveiligingsupdate voor Windows XP (KB980195), Beveiligingsupdate voor Windows XP (KB980218), Beveiligingsupdate voor Windows XP (KB980232), Beveiligingsupdate voor Windows XP (KB980436), Beveiligingsupdate voor Windows XP (KB981322), Beveiligingsupdate voor Windows XP (KB981349), Hotfix voor Windows XP (KB981793), Beveiligingsupdate voor Windows XP (KB981852), Beveiligingsupdate voor Windows XP (KB981997), Beveiligingsupdate voor Windows XP (KB982132), Beveiligingsupdate voor Windows XP (KB982214), Beveiligingsupdate voor Windows XP (KB982665), Beveiligingsupdate voor Windows XP (KB982802), Microsoft .NET Framework 2.0, MobileOptionPack, MPlayer2, NetMeeting, Microsoft National Language Support Downlevel APIs, OutlookExpress, PCHealth, SchedulingAgent, Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148, WebFldrs XP, VMware ThinApp, VMware Tools, Microsoft .NET Framework 2.0, Microsoft Silverlight, Per-user Environment strings: =::=::\ ALLUSERSPROFILE=C:\Documents and Settings\All Users APPDATA=C:\Documents and Settings\test.xp\Application Data CommonProgramFiles=C:\Program Files\Common Files COMPUTERNAME=VM-THINAPP2 ComSpec=C:\WINDOWS\system32\cmd.exe FP_NO_HOST_CHECK=NO HOMEDRIVE=C: HOMEPATH=\Documents and Settings\test.xp LOGONSERVER=\\DC01 NUMBER_OF_PROCESSORS=1 OS=Windows_NT Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH PROCESSOR_ARCHITECTURE=x86 PROCESSOR_IDENTIFIER=x86 Family 6 Model 37 Stepping 1, GenuineIntel PROCESSOR_LEVEL=6 PROCESSOR_REVISION=2501 ProgramFiles=C:\Program Files SESSIONNAME=Console SystemDrive=C: SystemRoot=C:\WINDOWS TEMP=C:\DOCUME~1\ADM_RO~1.WAE\LOCALS~1\Temp TMP=C:\DOCUME~1\ADM_RO~1.WAE\LOCALS~1\Temp TS_LOG_FILENAME=C:\Program Files\VMware\VMware ThinApp\Captures\Ultimo\bin\Ultimo Facility Management.exe.01cd9d7248d03690-904.trace TS_ORIGIN=C:\Program Files\VMware\VMware ThinApp\Captures\Ultimo\bin\Ultimo Facility Management.exe USERDNSDOMAIN=LZR.NL USERDOMAIN=LZR USERNAME=test.xp USERPROFILE=C:\Documents and Settings\test.xp windir=C:\WINDOWS Current process: Process ID: 2308 Minimum req'd operating system ver: 4.0 Ultimo Facility Management.exe C:\Program Files\VMware\VMware ThinApp\Captures\Ultimo\bin\Ultimo Facility Management.exe CompanyName: Ultimo Software Solutions FileVersion: 8.30.20.0720 InternalName: umm LegalCopyright: (C) Ultimo Software Solutions 1994 - 2010 ProductName: Ultimo ProductVersion: 8.30.20 Priority class: Normal Processor affinity mask: x1 System affinity mask: x1 Creation time: Fri 28 Sep 2012 12:10:43 Priority boost: Normal behavior Modules: Base Size Entry x79BF0000 x00008000 x79BF154C Ultimo Facility Mana C:\Program Files\VMware\VMware ThinApp\Captures\Ultimo\bin\Ultimo Facility Management.exe x7C900000 x000B8000 x7C9120F8 ntdll.dll C:\WINDOWS\system32\ntdll.dll x7C7D0000 x00100000 x7C7DB64E kernel32.dll C:\WINDOWS\system32\kernel32.dll x7E390000 x00091000 x7E39B217 USER32.dll C:\WINDOWS\system32\USER32.dll x77E40000 x00049000 x77E46587 GDI32.dll C:\WINDOWS\system32\GDI32.dll x76330000 x0001D000 x763312C0 IMM32.DLL C:\WINDOWS\system32\IMM32.DLL x77F40000 x000AB000 x77F4710B ADVAPI32.dll C:\WINDOWS\system32\ADVAPI32.dll x77DA0000 x00093000 x77DA628F RPCRT4.dll C:\WINDOWS\system32\RPCRT4.dll x77F10000 x00011000 x77F12146 Secur32.dll C:\WINDOWS\system32\Secur32.dll x7FF50000 x0003A000 x7FF60530 nt0_dll.dll C:\WINDOWS\system32\nt0_dll.dll x770E0000 x0008B000 x770E1560 oleaut32.dll C:\WINDOWS\system32\oleaut32.dll x77BE0000 x00058000 x77BEF2A1 msvcrt.dll C:\WINDOWS\system32\msvcrt.dll x774A0000 x0013E000 x774BD061 ole32.dll C:\WINDOWS\system32\ole32.dll x5B190000 x00038000 x5B191626 uxtheme.dll C:\WINDOWS\system32\uxtheme.dll x75250000 x0002E000 x75269FE1 msctfime.ime C:\WINDOWS\system32\msctfime.ime x10000000 x0028A000 x10008F30 Logging.dll C:\Program Files\VMware\VMware ThinApp\Logging.dll x77BD0000 x00008000 x77BD1135 VERSION.dll C:\WINDOWS\system32\VERSION.dll x76BB0000 x0000B000 x76BB10F1 psapi.dll C:\WINDOWS\system32\psapi.dll 32-bit processes: 0000 [x0000] system idle process 0004 [x0004] system 0544 [x0220] smss.exe \SystemRoot\System32\smss.exe 0608 [x0260] csrss.exe \??\C:\WINDOWS\system32\csrss.exe 0632 [x0278] winlogon.exe \??\C:\WINDOWS\system32\winlogon.exe 0676 [x02A4] services.exe C:\WINDOWS\system32\services.exe 0688 [x02B0] lsass.exe C:\WINDOWS\system32\lsass.exe 0852 [x0354] vmacthlp.exe C:\Program Files\VMware\VMware Tools\vmacthlp.exe 0880 [x0370] svchost.exe C:\WINDOWS\system32\svchost.exe 0948 [x03B4] svchost.exe C:\WINDOWS\system32\svchost.exe 1040 [x0410] svchost.exe C:\WINDOWS\System32\svchost.exe 1088 [x0440] svchost.exe C:\WINDOWS\system32\svchost.exe 1184 [x04A0] svchost.exe C:\WINDOWS\system32\svchost.exe 1388 [x056C] spoolsv.exe C:\WINDOWS\system32\spoolsv.exe 1488 [x05D0] svchost.exe C:\WINDOWS\system32\svchost.exe 1708 [x06AC] vmtoolsd.exe C:\Program Files\VMware\VMware Tools\vmtoolsd.exe 1976 [x07B8] alg.exe C:\WINDOWS\System32\alg.exe 1312 [x0520] Explorer.EXE C:\WINDOWS\Explorer.EXE 2024 [x07E8] VMwareTray.exe C:\Program Files\VMware\VMware Tools\VMwareTray.exe 1688 [x0698] vmtoolsd.exe C:\Program Files\VMware\VMware Tools\vmtoolsd.exe 3448 [x0D78] NOTEPAD.EXE C:\WINDOWS\System32\NOTEPAD.EXE 0128 [x0080] NOTEPAD.EXE C:\WINDOWS\system32\NOTEPAD.EXE 0920 [x0398] log_monitor.exe C:\Program Files\VMware\VMware ThinApp\log_monitor.exe 2308 [x0904] Ultimo Facility Management.exe C:\Program Files\VMware\VMware ThinApp\Captures\Ultimo\bin\Ultimo Facility Management.exe Shell folders: ProgramFilesDir = C:\Program Files Common StartMenu = C:\Documents and Settings\All Users\Menu Start StartMenu = C:\Documents and Settings\test.xp\Menu Start Common AppData = C:\Documents and Settings\All Users\Application Data Local AppData = C:\Documents and Settings\test.xp\Local Settings\Application Data AppData = C:\Documents and Settings\test.xp\Application Data Common Desktop = C:\Documents and Settings\All Users\Bureaublad Desktop = C:\Documents and Settings\test.xp\Bureaublad Common Startup = C:\Documents and Settings\All Users\Menu Start\Programma's\Opstarten Startup = C:\Documents and Settings\test.xp\Menu Start\Programma's\Opstarten Common Programs = C:\Documents and Settings\All Users\Menu Start\Programma's Programs = C:\Documents and Settings\test.xp\Menu Start\Programma's Common Favorites = C:\Documents and Settings\All Users\Favorieten Favorites = C:\Documents and Settings\test.xp\Favorieten SendTo = C:\Documents and Settings\test.xp\SendTo Templates = C:\Documents and Settings\test.xp\Sjablonen Recent = C:\Documents and Settings\test.xp\Onlangs geopend NetHood = C:\Documents and Settings\test.xp\NetHood Fonts = C:\WINDOWS\Fonts My Pictures = C:\Documents and Settings\test.xp\Mijn documenten\Mijn afbeeldingen My Videos = [default: C:\Documents and Settings\test.xp\Mijn documenten\Mijn video's] Personal = C:\Documents and Settings\test.xp\Mijn documenten Profile = C:\Documents and Settings\test.xp Profiles = SystemSystem = C:\WINDOWS\system32 32-bit device drivers: Kernel mode drivers: Abiosdsk Abiosdsk abp480n5 abp480n5 ACPI Microsoft ACPI-stuurprogramma ACPIEC ACPIEC adpu160m adpu160m AFD AFD agp440 Intel AGP Bus Filter Aha154x Aha154x aic78u2 aic78u2 aic78xx aic78xx AliIde AliIde amsint amsint asc asc asc3350p asc3350p asc3550 asc3550 AsyncMac Stuurprogramma voor RAS asyncrone media atapi Standaard IDE/ESDI-vasteschijfcontroller Atdisk Atdisk Atmarpc ATM ARP-client-protocol audstub Audiostub-stuurprogramma Beep Beep cbidf2k cbidf2k cd20xrnt cd20xrnt Cdaudio Cdaudio Cdrom Cd-rom-stuurprogramma Changer Changer CmBatt Stuurprogramma voor Microsoft AC-adapter CmdIde CmdIde Compbatt Microsoft Composite Battery-stuurprogramma Cpqarray Cpqarray dac960nt dac960nt Disk Stuurprogramma voor schijfstations dmboot dmboot dmio Stuurprogramma voor Schijfbeheer dmload dmload dpti2o dpti2o Fdc Stuurprogramma voor diskettestationcontroller Fips Fips Flpydisk Stuurprogramma voor diskettestation Ftdisk Stuurprogramma voor Volumebeheer Gpc Algemene pakketclassificeerder hpn hpn HTTP HTTP i2omgmt i2omgmt i2omp i2omp i8042prt Stuurprogramma voor i8042-toetsenbord en PS/2-muispoort Imapi Filterstuurprogramma voor het branden van cd's ini910u ini910u IntelIde IntelIde intelppm Intel GV3-processorstuurprogramma Ip6Fw IPv6 Windows Firewall Driver IpFilter IP Traffic Filter Driver IpInIp IP in IP Tunnel Driver IpNat IP Network Address Translator IPSec IPSEC-stuurprogramma IRENUM IR Enumerator-service isapnp PnP ISA/EISA Bus-stuurprogramma Kbdclass Stuurprogramma voor verschillende toetsenbordtypen KSecDD KSecDD lbrtfdc lbrtfdc LGTO_Syn Sync Driver mnmdd mnmdd Modem Modem Mouclass Stuurprogramma voor muistypen MountMgr MountMgr mraid35x mraid35x mssmbios BIOS-stuurprogramma voor Microsoft Systeembeheer NDIS NDIS-systeemstuurprogramma NdisTapi RAS NDIS TAPI-stuurprogramma Ndisuio I/O-protocol van NDIS-gebruikermodus NdisWan RAS NDIS WAN-stuurprogramma NDProxy NDIS-proxy NetBT NetBios over Tcpip Null Null NwlnkFlt IPX Traffic Filter Driver NwlnkFwd IPX Traffic Forwarder Driver Parport Stuurprogramma voor parallelle poort PartMgr PartMgr ParVdm ParVdm PCI PCI Bus-stuurprogramma PCIDump PCIDump PCIIde PCIIde Pcmcia Pcmcia PCnet AMD PCNET Compatible Adapter-stuurprogramma PDCOMP PDCOMP PDFRAME PDFRAME PDRELI PDRELI PDRFRAME PDRFRAME perc2 perc2 perc2hib perc2hib PptpMini WAN-minipoort (PPTP) PSched QoS-pakketplanner Ptilink Stuurprogramma voor Directe parallelle verbinding ql1080 ql1080 Ql10wnt Ql10wnt ql12160 ql12160 ql1240 ql1240 ql1280 ql1280 RasAcd Stuurprogramma voor Automatische verbinding voor RAS Rasl2tp WAN-minipoort (L2TP) RasPppoe PPPOE-RAS-stuurprogramma Raspti Direct Parallel RDPCDD RDPCDD rdpdr Stuurprogramma voor Terminal-serverapparaatredirector RDPWD RDPWD redbook Stuurprogramma voor afspeelfilter van digitale cd-audio Secdrv Secdrv serenum Serenum Filter-stuurprogramma Serial Stuurprogramma voor seriële poort Sfloppy Sfloppy Simbad Simbad Sparrow Sparrow swenum Software Bus-stuurprogramma symc810 symc810 symc8xx symc8xx sym_hi sym_hi sym_u3 sym_u3 Tcpip Stuurprogramma voor TCP/IP-protocol TDPIPE TDPIPE TDTCP TDTCP TermDD Stuurprogramma voor terminal-apparaat TosIde TosIde ultra ultra Update Microcode Update-stuurprogramma VgaSave VgaSave ViaIde ViaIde vmci VMware VMCI Bus Driver vmdebug VMware Replay Debugging Helper VMMEMCTL Memory Control Driver vmmouse VMware Pointing Device vmrawdsk VMware Vista Physical Disk Helper vmscsi vmscsi vmxnet VMware Ethernet Adapter Driver vmx_svga vmx_svga VolSnap VolSnap Wanarp RAS IP ARP-stuurprogramma WDICA WDICA WS2IFSL Windows Socket 2.0 Non-IFS-omgeving voor serviceproviderondersteuning 138 kernel mode drivers File system and filter drivers: Cdfs Cdfs Fastfat Fastfat FltMgr FltMgr MRxDAV WebDav-client-redirector MRxSmb MRxSmb Msfs Msfs Mup Mup NetBIOS NetBIOS-interface Npfs Npfs Ntfs Ntfs Rdbss Rdbss sr Stuurprogramma voor systeemherstelfilter Srv Srv Udfs Udfs 14 file system and filter drivers Adapter drivers: 0 adapter drivers Recognizer drivers: 0 recognizer drivers 152 device drivers Dump ended on 9/28/2012 at 12:10:43.940 ========================================================================= ========================================================================= 000001 0000 0000 Logging options: CAP_LEVEL=9 MAX_CAP_ARY=25 MAX_CAP_STR=150 MAX_NEST=100 VERSION=4.7.2-771812 SHOW_FULL_REPORT=1 000003 0000 0900 VMware ThinApp Version 4.7.2-771812 / 120703, Windows 5.1 (Windows XP) 000005 0000 0900 Database version: 3.3 000007 0000 0900 No config file loaded: Could not locate file Capture.ini. Searched these locations: C:\Program Files\VMware\VMware ThinApp\Captures\Ultimo\..\modules\resource\Capture.ini C:\Program Files\VMware\VMware ThinApp\Captures\Ultimo\bin\resource\Capture.ini No THINSTALL_BIN env var 000009 0000 0900 QueryPerformanceFrequency reports 3 MIPS 000011 0000 0900 Logging started for ThinApp C:\Program Files\VMware\VMware ThinApp\Captures\Ultimo\bin\Ultimo Facility Management.exe Using archive=C:\Program Files\VMware\VMware ThinApp\Captures\Ultimo\bin\Ultimo Facility Management.exe PID=0x904 [2308] CommandLine = "C:\Program Files\VMware\VMware ThinApp\Captures\Ultimo\bin\Ultimo Facility Management.exe" 000015 0000 0900 System Current Directory = C:\Program Files\VMware\VMware ThinApp\Captures\Ultimo\bin Virtual Current Directory = 000017 0000 0900 |start_env_var| =::=::\ 000018 0000 0900 |start_env_var| ALLUSERSPROFILE=C:\Documents and Settings\All Users 000019 0000 0900 |start_env_var| APPDATA=C:\Documents and Settings\test.xp\Application Data 000020 0000 0900 |start_env_var| CommonProgramFiles=C:\Program Files\Common Files 000021 0000 0900 |start_env_var| COMPUTERNAME=VM-THINAPP2 000022 0000 0900 |start_env_var| ComSpec=C:\WINDOWS\system32\cmd.exe 000023 0000 0900 |start_env_var| FP_NO_HOST_CHECK=NO 000024 0000 0900 |start_env_var| HOMEDRIVE=C: 000025 0000 0900 |start_env_var| HOMEPATH=\Documents and Settings\test.xp 000026 0000 0900 |start_env_var| LOGONSERVER=\\DC01 000027 0000 0900 |start_env_var| NUMBER_OF_PROCESSORS=1 000028 0000 0900 |start_env_var| OS=Windows_NT 000029 0000 0900 |start_env_var| Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem 000030 0000 0900 |start_env_var| PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH 000031 0000 0900 |start_env_var| PROCESSOR_ARCHITECTURE=x86 000032 0000 0900 |start_env_var| PROCESSOR_IDENTIFIER=x86 Family 6 Model 37 Stepping 1, GenuineIntel 000033 0000 0900 |start_env_var| PROCESSOR_LEVEL=6 000034 0000 0900 |start_env_var| PROCESSOR_REVISION=2501 000035 0000 0900 |start_env_var| ProgramFiles=C:\Program Files 000036 0000 0900 |start_env_var| SESSIONNAME=Console 000037 0000 0900 |start_env_var| SystemDrive=C: 000038 0000 0900 |start_env_var| SystemRoot=C:\WINDOWS 000039 0000 0900 |start_env_var| TEMP=C:\DOCUME~1\ADM_RO~1.WAE\LOCALS~1\Temp 000040 0000 0900 |start_env_var| TMP=C:\DOCUME~1\ADM_RO~1.WAE\LOCALS~1\Temp 000041 0000 0900 |start_env_var| TS_LOG_FILENAME=C:\Program Files\VMware\VMware ThinApp\Captures\Ultimo\bin\Ultimo Facility Management.exe.01cd9d7248d03690-904.trace 000042 0000 0900 |start_env_var| TS_ORIGIN=C:\Program Files\VMware\VMware ThinApp\Captures\Ultimo\bin\Ultimo Facility Management.exe 000043 0000 0900 |start_env_var| USERDNSDOMAIN=LZR.NL 000044 0000 0900 |start_env_var| USERDOMAIN=LZR 000045 0000 0900 |start_env_var| USERNAME=test.xp 000046 0000 0900 |start_env_var| USERPROFILE=C:\Documents and Settings\test.xp 000047 0000 0900 |start_env_var| windir=C:\WINDOWS 000049 0000 0900 ThinApp loaded at 7fce0000-7fe0e000 000051 0000 0900 Running with transaction logging enabled 000053 0000 0900 AppSync: No AppSyncURL available, skipping AppSyncing 000187 0904 092c ????????????:77bef0c0->????????????:7c7d97e0 TlsGetValue (DWORD dwTlsIndex=3h) 000188 0904 092c ????????????:77bef0c0<-????????????:7c7d97e0 TlsGetValue ->*=*0h (DWORD dwTlsIndex=3h) 000190 0904 092c ????????????:77bef0e5->????????????:7c7d9c65 TlsSetValue (DWORD dwTlsIndex=3h, LPVOID lpTlsValue=*864DB0h) 000191 0904 092c ????????????:77bef0e5<-????????????:7c7d9c65 TlsSetValue ->int=1h (DWORD dwTlsIndex=3h, LPVOID lpTlsValue=*864DB0h) 000193 0904 092c ????????????:77bef0f6->????????????:7c7d97d0 GetCurrentThreadId () 000194 0904 092c ????????????:77bef0f6<-????????????:7c7d97d0 GetCurrentThreadId ->unsigned long=92Ch () 000196 0904 092c ????????????:77bd1180->????????????:7c7d9c65 TlsSetValue (DWORD dwTlsIndex=Ah, LPVOID lpTlsValue=*0h ) 000197 0904 092c ????????????:77bd1180<-????????????:7c7d9c65 TlsSetValue ->int=1h (DWORD dwTlsIndex=Ah, LPVOID lpTlsValue=*0h ) 000199 0000 092c Setting thread locale: 0 000201 0000 092c Thread h=fffffffe, id=92c is running, stack = 0100f000 - 01010000 000203 0000 092c ExitThread(0) starting. 000205 0000 092c ExitThread h=fffffffe, if=92c exit_code=0 000266 0000 092c ExitThread h=fffffffe, (2 other threads running, not shutting down) 000268 0904 092c ????????????:7526d323->????????????:7c801deb GetSystemDirectoryW (LPWSTR lpBuffer=*100FC3Ch->L"", UINT uSize=105h) 000269 0904 092c ????????????:7526d323<-????????????:7c801deb GetSystemDirectoryW ->unsigned int=13h (LPWSTR lpBuffer=*100FC3Ch->L"C:\WINDOWS\system32", UINT uSize=105h) 000271 0904 092c ????????????:7526d35a->????????????:7c7d9aa9 lstrlenW (LPCWSTR lpString=*75252488h->L"Msctf.dll") 000272 0904 092c ????????????:7526d35a<-????????????:7c7d9aa9 lstrlenW ->int=9h (LPCWSTR lpString=*75252488h->L"Msctf.dll") 000274 0904 092c ????????????:7526d375->????????????:77c1806b wcsncpy (*=*100FC64h->L'\F130h', *=*75252488h->L'M', int =F1h) 000275 0904 092c ????????????:7526d375<-????????????:77c1806b wcsncpy ->*=*100FC2Ch->L'\FE50h' (*=*100FC64h->L'M', *=*75252488h->L'M', int =F1h) 000277 0904 092c ????????????:7526d55b->????????????:7c7de4dd GetModuleHandleW+ (LPCWSTR lpModuleName=*100FC3Ch->L"C:\WINDOWS\system32\Msctf.dll") 000279 0000 092c NtQueryInformationProcess [patching drive map] 000281 0000 092c NtQueryAttributesFile* objAttr=100F374h (root=0h sd=0h qos=0h attr=(40h OBJ_CASE_INSENSITIVE) name=100F398h (14A708h/66 "\??\C:\WINDOWS\system32\Msctf.dll"))-> st=0h OK [LOCATOR: "\??\C:\WINDOWS\system32\Msctf.dll"][Package: "%SystemSystem%\Msctf.dll":][Sandbox: "%SystemSystem%\Msctf.dll": 1:LNameNotFound] 000283 0000 092c NtOpenFile* pHandle=0100F460Access(100020h ***unknown=100020h)objAttr=100F418h (root=0h sd=0h qos=0h attr=(40h OBJ_CASE_INSENSITIVE) name=100F444h (14A708h/66 "\??\C:\WINDOWS\system32\Msctf.dll")) iosb=0100F438hShare(5h FILE_SHARE_DELETE FILE_SHARE_READ)Options(60h FILE_SYNCHRONOUS_IO_NONALERT FILE_NON_DIRECTORY_FILE)-> st=0h OKh=110h [Native: ""][LOCATOR: "\??\C:\WINDOWS\system32\Msctf.dll"][Package: "%SystemSystem%\Msctf.dll":][Sandbox: "%SystemSystem%\Msctf.dll": 1:LNameNotFound] 000285 0000 092c NtQueryInformationFile* h=110h InfoClass=14 FilePositionInformation iosb=0100EF98h-> st=0h OK 000286 0000 092c NtQueryInformationFile* h=110h InfoClass=5 FileStandardInformation iosb=0100EEC4h-> st=0h OK 000287 0000 092c NtQueryInformationFile* h=110h InfoClass=14 FilePositionInformation iosb=0100ECE8h-> st=0h OK 000289 0000 092c NtSetInformationFile* h=110h InfoClass=14 FilePositionInformation iosb=0100ECECh-> st=0h OK 000291 0000 092c NtReadFile* h=110h iosb=0100ECB4hdata=100EE94h/64-> st=0h OK readdata=100EE94h/64 "MZ......................@......................................." 000292 0000 092c NtSetInformationFile* h=110h InfoClass=14 FilePositionInformation iosb=0100ECFCh-> st=0h OK 000293 0000 092c NtReadFile* h=110h iosb=0100ECC4hdata=100ED2Ch/248-> st=0h OK readdata=100ED2Ch/248 "PE..L...#..H...........!.........p...............0....jt................................S..............................." 000294 0000 092c NtSetInformationFile* h=110h InfoClass=14 FilePositionInformation iosb=0100ECFCh-> st=0h OK 000295 0000 092c NtReadFile* h=110h iosb=0100ECD0hdata=100EE6Ch/40-> st=0h OK readdata=100EE6Ch/40 ".text..................................`" 000296 0000 092c NtSetInformationFile* h=110h InfoClass=14 FilePositionInformation iosb=0100ECFCh-> st=0h OK 000297 0000 092c NtReadFile* h=110h iosb=0100EED4h offset=0:0hdata=1110000h/299008-> st=0h OK readdata=1110000h/297984 "MZ......................@...............................................!..L.!This.program.cannot.be.run.in.DOS.mode...." 000298 0000 092c NtSetInformationFile* h=110h InfoClass=14 FilePositionInformation iosb=0100EFA0h-> st=0h OK 000299 0000 092c NtCreateSection* SectionHandle=00000118access=(Eh SECTION_ALL_ACCESS)protect=(10h PAGE_EXECUTE)sectAttr=(8000000h SEC_COMMIT) FileHandle=00000110-> st=0h OK 000301 0000 092c NtClose h=110h-> st=0h OK [CloseVirtualFileHandle] 000302 0000 092c NtClose h=118h-> st=0h OK [CloseVirtualFileMappingHandle] 000303 0904 092c ????????????:7526d55b<-????????????:7c7de4dd *** GetModuleHandleW+ ->*=*0h (LPCWSTR lpModuleName=*0h ) *** GetLastError() returns 126=0x7e [0]: Kan opgegeven module niet vinden. 000305 0904 092c ????????????:752690de->????????????:7c7d97e0 TlsGetValue (DWORD dwTlsIndex=9h) 000306 0904 092c ????????????:752690de<-????????????:7c7d97e0 TlsGetValue ->*=*0h (DWORD dwTlsIndex=9h) 000308 0904 092c ????????????:75269cb8->????????????:7c7d97e0 TlsGetValue (DWORD dwTlsIndex=9h) 000309 0904 092c ????????????:75269cb8<-????????????:7c7d97e0 TlsGetValue ->*=*0h (DWORD dwTlsIndex=9h) 000311 0904 092c ????????????:770e1693->????????????:7c7d97e0 TlsGetValue (DWORD dwTlsIndex=4h) 000312 0904 092c ????????????:770e1693<-????????????:7c7d97e0 TlsGetValue ->*=*0h (DWORD dwTlsIndex=4h) 000314 0904 092c ????????????:77c09fc2->????????????:7c7d97e0 TlsGetValue (DWORD dwTlsIndex=3h) 000315 0904 092c ????????????:77c09fc2<-????????????:7c7d97e0 TlsGetValue ->*=*864DB0h (DWORD dwTlsIndex=3h) 000317 0904 092c ????????????:77c0a0e8->????????????:7c7d9c65 TlsSetValue (DWORD dwTlsIndex=3h, LPVOID lpTlsValue=*0h ) 000318 0904 092c ????????????:77c0a0e8<-????????????:7c7d9c65 TlsSetValue ->int=1h (DWORD dwTlsIndex=3h, LPVOID lpTlsValue=*0h ) 000320 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 000321 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 000322 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 000323 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 000325 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 000326 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 000327 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 000328 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 000329 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 000330 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 000331 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 000332 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 000333 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 000334 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 000335 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 000336 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 000337 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 000338 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 000339 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 000340 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 000341 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 000342 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 000343 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 000344 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 000345 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 000346 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 000347 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 000348 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 000350 0904 0380 ????????????:7e3acb4a->????????????:77e4814e GetObjectType (HGDIOBJ h=e1010764h) 000351 0904 0380 ????????????:7e3acb4a<-????????????:77e4814e GetObjectType ->unsigned long=3h (HGDIOBJ h=e1010764h) 000353 0904 0380 ????????????:7e3acbce->????????????:77e490a3 GdiConvertAndCheckDC (== no prototype available ==) 000354 0904 0380 ????????????:7e3acbce<-????????????:77e490a3 GdiConvertAndCheckDC (== no prototype available ==) 000359 0904 0380 ????????????:7e3ab631->????????????:77e47cf1 GetViewportExtEx (HDC hdc=e1010764h, *lpsize=*D3F668h->struct {LONG cx=0h, LONG cy=0h}) 000360 0904 0380 ????????????:7e3ab631<-????????????:77e47cf1 GetViewportExtEx ->int=1h (HDC hdc=e1010764h, *lpsize=*D3F668h->struct {LONG cx=1h, LONG cy=1h}) 000362 0904 0380 ????????????:7e3ab645->????????????:77e47c79 GetWindowExtEx (HDC hdc=e1010764h, *lpsize=*D3F670h->struct {LONG cx=0h, LONG cy=0h}) 000363 0904 0380 ????????????:7e3ab645<-????????????:77e47c79 GetWindowExtEx ->int=1h (HDC hdc=e1010764h, *lpsize=*D3F670h->struct {LONG cx=1h, LONG cy=1h}) 000365 0904 0380 ????????????:7e3ab744->????????????:77e47e56 GetHFONT (== no prototype available ==) 000366 0904 0380 ????????????:7e3ab744<-????????????:77e47e56 GetHFONT (== no prototype available ==) 000368 0904 0380 ????????????:7e3ab6aa->????????????:77e47db9 GetTextMetricsW (HDC hdc=e1010764h, *lptm=*D3F62Ch->struct {LONG tmHeight=7E3C048Fh, LONG tmAscent=7E3A8EB0h, LONG tmDescent=FFFFFFFFh, LONG tmInternalLeading=7E3A8EABh, LONG tmExternalLeading=ED000000h, LONG tmAveCharWidth=FB6F2CAEh, LONG tmMaxCharWidth=D3B170h, LONG tmWeight=D3F9E4h, LONG tmOverhang=100281C0h, LONG tmDigitizedAspectX=0h, LONG tmDigitizedAspectY=D3F698h, WCHAR tmFirstChar=L'\1A4Fh', WCHAR tmLastChar=L'\7FF9h', WCHAR tmDefaultChar=L'\BD2Eh', WCHAR tmBreakChar=L'\19h', BYTE tmItalic='\9Eh', BYTE tmUnderlined='\16h', BYTE tmStruckOut='\00h', BYTE tmPitchAndFamily='\00h', BYTE tmCharSet='J'}) 000369 0904 0380 ????????????:7e3ab6aa<-????????????:77e47db9 GetTextMetricsW ->int=1h (HDC hdc=e1010764h, *lptm=*D3F62Ch->struct {LONG tmHeight=10h, LONG tmAscent=Dh, LONG tmDescent=3h, LONG tmInternalLeading=3h, LONG tmExternalLeading=0h, LONG tmAveCharWidth=6h, LONG tmMaxCharWidth=22h, LONG tmWeight=2BCh, LONG tmOverhang=0h, LONG tmDigitizedAspectX=60h, LONG tmDigitizedAspectY=60h, WCHAR tmFirstChar=L' ', WCHAR tmLastChar=L'\FFFCh', WCHAR tmDefaultChar=L'\1Fh', WCHAR tmBreakChar=L' ', BYTE tmItalic='\00h', BYTE tmUnderlined='\00h', BYTE tmStruckOut='\00h', BYTE tmPitchAndFamily=''', BYTE tmCharSet='\00h'}) 000371 0904 0380 ????????????:7e3ab4d3->????????????:77e47786 CreateRectRgn (int x1=0h, int y1=0h, int x2=0h, int y2=0h) 000372 0904 0380 ????????????:7e3ab4d3<-????????????:77e47786 CreateRectRgn ->*=*7F0407D3h (int x1=0h, int y1=7F0407D3h, int x2=0h, int y2=0h) 000374 0904 0380 ????????????:7e3ab4e4->????????????:77e46ad6 GetClipRgn (HDC hdc=e1010764h, HRGN hrgn=7f0407d3h) 000375 0904 0380 ????????????:7e3ab4e4<-????????????:77e46ad6 GetClipRgn ->int=0h (HDC hdc=e1010764h, HRGN hrgn=7f0407d3h) 000377 0904 0380 ????????????:7e3ab4f0->????????????:77e46bfa DeleteObject (HGDIOBJ ho=7f0407d3h) 000378 0904 0380 ????????????:7e3ab4f0<-????????????:77e46bfa DeleteObject ->int=1h (HGDIOBJ ho=7f0407d3h) 000380 0904 0380 ????????????:7e3ab513->????????????:77e46a56 IntersectClipRect (HDC hdc=e1010764h, int left=38h, int top=Ch, int right=127h, int bottom=4Bh) 000381 0904 0380 ????????????:7e3ab513<-????????????:77e46a56 IntersectClipRect ->int=3h (HDC hdc=e1010764h, int left=38h, int top=Ch, int right=127h, int bottom=4Bh) 000383 0904 0380 ????????????:7e3aba83->????????????:77e469d0 GdiGetCodePage (== no prototype available ==) 000384 0904 0380 ????????????:7e3aba83<-????????????:77e469d0 GdiGetCodePage (== no prototype available ==) 000386 0904 0380 ????????????:7e3ab91a->????????????:77e46b0d GetTextExtentPointW (HDC hdc=e1010764h, LPCWSTR lpString=*D3F7D8h->L"Launching ultimo.exe", int c=14h, *lpsz=*D3F5E4h->struct {LONG cx=77E47DB9h, LONG cy=7E3AB6AAh}) 000387 0904 0380 ????????????:7e3ab91a<-????????????:77e46b0d GetTextExtentPointW ->int=1h (HDC hdc=e1010764h, LPCWSTR lpString=*D3F7D8h->L"Launching ultimo.exe", int c=14h, *lpsz=*D3F5E4h->struct {LONG cx=8Bh, LONG cy=10h}) 000389 0904 0380 ????????????:7e3ac422->????????????:77e47eac TextOutW (HDC hdc=e1010764h, int x=38h, int y=Ch, LPCWSTR lpString=*D3F7D8h->L"Launching ultimo.exe", int c=14h) 000390 0904 0380 ????????????:7e3ac422<-????????????:77e47eac TextOutW ->int=1h (HDC hdc=e1010764h, int x=38h, int y=Ch, LPCWSTR lpString=*D3F7D8h->L"Launching ultimo.exe", int c=14h) 000391 0904 0380 ????????????:7e3ab91a->????????????:77e46b0d GetTextExtentPointW (HDC hdc=e1010764h, LPCWSTR lpString=*D3F7D8h->L"Launching ultimo.exe", int c=14h, *lpsz=*D3F5FCh->struct {LONG cx=E1010764h, LONG cy=38h}) 000392 0904 0380 ????????????:7e3ab91a<-????????????:77e46b0d GetTextExtentPointW ->int=1h (HDC hdc=e1010764h, LPCWSTR lpString=*D3F7D8h->L"Launching ultimo.exe", int c=14h, *lpsz=*D3F5FCh->struct {LONG cx=8Bh, LONG cy=10h}) 000394 0904 0380 ????????????:7e3ab7d0->????????????:77e47874 ExtSelectClipRgn (HDC hdc=e1010764h, HRGN hrgn=0h, int mode=5h) 000395 0904 0380 ????????????:7e3ab7d0<-????????????:77e47874 ExtSelectClipRgn ->int=2h (HDC hdc=e1010764h, HRGN hrgn=0h, int mode=5h) 000398 0904 0380 ????????????:7e3ab631->????????????:77e47cf1 GetViewportExtEx (HDC hdc=e1010764h, *lpsize=*D3F668h->struct {LONG cx=0h, LONG cy=0h}) 000399 0904 0380 ????????????:7e3ab631<-????????????:77e47cf1 GetViewportExtEx ->int=1h (HDC hdc=e1010764h, *lpsize=*D3F668h->struct {LONG cx=1h, LONG cy=1h}) 000400 0904 0380 ????????????:7e3ab645->????????????:77e47c79 GetWindowExtEx (HDC hdc=e1010764h, *lpsize=*D3F670h->struct {LONG cx=0h, LONG cy=0h}) 000401 0904 0380 ????????????:7e3ab645<-????????????:77e47c79 GetWindowExtEx ->int=1h (HDC hdc=e1010764h, *lpsize=*D3F670h->struct {LONG cx=1h, LONG cy=1h}) 000402 0904 0380 ????????????:7e3ab744->????????????:77e47e56 GetHFONT (== no prototype available ==) 000403 0904 0380 ????????????:7e3ab744<-????????????:77e47e56 GetHFONT (== no prototype available ==) 000404 0904 0380 ????????????:7e3ab6aa->????????????:77e47db9 GetTextMetricsW (HDC hdc=e1010764h, *lptm=*D3F62Ch->struct {LONG tmHeight=FFFFFFFFh, LONG tmAscent=800h, LONG tmDescent=EDD3F660h, LONG tmInternalLeading=FB6F2CB6h, LONG tmExternalLeading=ED000000h, LONG tmAveCharWidth=FB6F2CAEh, LONG tmMaxCharWidth=D3B170h, LONG tmWeight=D3F9E4h, LONG tmOverhang=100281C0h, LONG tmDigitizedAspectX=0h, LONG tmDigitizedAspectY=D3F698h, WCHAR tmFirstChar=L'\1A4Fh', WCHAR tmLastChar=L'\7FF9h', WCHAR tmDefaultChar=L'\BD2Eh', WCHAR tmBreakChar=L'\19h', BYTE tmItalic='\9Eh', BYTE tmUnderlined='\16h', BYTE tmStruckOut='\00h', BYTE tmPitchAndFamily='\00h', BYTE tmCharSet='J'}) 000405 0904 0380 ????????????:7e3ab6aa<-????????????:77e47db9 GetTextMetricsW ->int=1h (HDC hdc=e1010764h, *lptm=*D3F62Ch->struct {LONG tmHeight=Eh, LONG tmAscent=Bh, LONG tmDescent=3h, LONG tmInternalLeading=3h, LONG tmExternalLeading=0h, LONG tmAveCharWidth=5h, LONG tmMaxCharWidth=1Dh, LONG tmWeight=190h, LONG tmOverhang=0h, LONG tmDigitizedAspectX=60h, LONG tmDigitizedAspectY=60h, WCHAR tmFirstChar=L' ', WCHAR tmLastChar=L'\FFFCh', WCHAR tmDefaultChar=L'\1Fh', WCHAR tmBreakChar=L' ', BYTE tmItalic='\00h', BYTE tmUnderlined='\00h', BYTE tmStruckOut='\00h', BYTE tmPitchAndFamily=''', BYTE tmCharSet='\00h'}) 000406 0904 0380 ????????????:7e3ab4d3->????????????:77e47786 CreateRectRgn (int x1=0h, int y1=0h, int x2=0h, int y2=0h) 000407 0904 0380 ????????????:7e3ab4d3<-????????????:77e47786 CreateRectRgn ->*=*800407D3h (int x1=0h, int y1=800407D3h, int x2=0h, int y2=0h) 000408 0904 0380 ????????????:7e3ab4e4->????????????:77e46ad6 GetClipRgn (HDC hdc=e1010764h, HRGN hrgn=800407d3h) 000409 0904 0380 ????????????:7e3ab4e4<-????????????:77e46ad6 GetClipRgn ->int=0h (HDC hdc=e1010764h, HRGN hrgn=800407d3h) 000410 0904 0380 ????????????:7e3ab4f0->????????????:77e46bfa DeleteObject (HGDIOBJ ho=800407d3h) 000411 0904 0380 ????????????:7e3ab4f0<-????????????:77e46bfa DeleteObject ->int=1h (HGDIOBJ ho=800407d3h) 000412 0904 0380 ????????????:7e3ab513->????????????:77e46a56 IntersectClipRect (HDC hdc=e1010764h, int left=38h, int top=1Eh, int right=127h, int bottom=4Bh) 000413 0904 0380 ????????????:7e3ab513<-????????????:77e46a56 IntersectClipRect ->int=3h (HDC hdc=e1010764h, int left=38h, int top=1Eh, int right=127h, int bottom=4Bh) 000414 0904 0380 ????????????:7e3aba83->????????????:77e469d0 GdiGetCodePage (== no prototype available ==) 000415 0904 0380 ????????????:7e3aba83<-????????????:77e469d0 GdiGetCodePage (== no prototype available ==) 000416 0904 0380 ????????????:7e3ab91a->????????????:77e46b0d GetTextExtentPointW (HDC hdc=e1010764h, LPCWSTR lpString=*D3F858h->L"Licensed to LZR 4.7.2", int c=15h, *lpsz=*D3F5E4h->struct {LONG cx=77E47DB9h, LONG cy=7E3AB6AAh}) 000417 0904 0380 ????????????:7e3ab91a<-????????????:77e46b0d GetTextExtentPointW ->int=1h (HDC hdc=e1010764h, LPCWSTR lpString=*D3F858h->L"Licensed to LZR 4.7.2", int c=15h, *lpsz=*D3F5E4h->struct {LONG cx=6Ah, LONG cy=Eh}) 000418 0904 0380 ????????????:7e3ac422->????????????:77e47eac TextOutW (HDC hdc=e1010764h, int x=38h, int y=1Eh, LPCWSTR lpString=*D3F858h->L"Licensed to LZR 4.7.2", int c=15h) 000419 0904 0380 ????????????:7e3ac422<-????????????:77e47eac TextOutW ->int=1h (HDC hdc=e1010764h, int x=38h, int y=1Eh, LPCWSTR lpString=*D3F858h->L"Licensed to LZR 4.7.2", int c=15h) 000420 0904 0380 ????????????:7e3ab91a->????????????:77e46b0d GetTextExtentPointW (HDC hdc=e1010764h, LPCWSTR lpString=*D3F858h->L"Licensed to LZR 4.7.2", int c=15h, *lpsz=*D3F5FCh->struct {LONG cx=E1010764h, LONG cy=38h}) 000421 0904 0380 ????????????:7e3ab91a<-????????????:77e46b0d GetTextExtentPointW ->int=1h (HDC hdc=e1010764h, LPCWSTR lpString=*D3F858h->L"Licensed to LZR 4.7.2", int c=15h, *lpsz=*D3F5FCh->struct {LONG cx=6Ah, LONG cy=Eh}) 000422 0904 0380 ????????????:7e3ab7d0->????????????:77e47874 ExtSelectClipRgn (HDC hdc=e1010764h, HRGN hrgn=0h, int mode=5h) 000423 0904 0380 ????????????:7e3ab7d0<-????????????:77e47874 ExtSelectClipRgn ->int=2h (HDC hdc=e1010764h, HRGN hrgn=0h, int mode=5h) 000424 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 000425 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 000426 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 000427 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 000429 0904 0900 ????????????:7ff64a9f->????????????:7c928615 RtlMapGenericMask (PACCESS_MASK =*12E80Ch->F003Fh, *=*12E7F8h->struct {ACCESS_MASK GenericRead=20019h, ACCESS_MASK GenericWrite=20006h, ACCESS_MASK GenericExecute=20019h, ACCESS_MASK GenericAll=F003Fh}) 000430 0904 0900 ????????????:7ff64a9f<-????????????:7c928615 RtlMapGenericMask ->void=void (PACCESS_MASK =*12E80Ch->F003Fh, *=*12E7F8h->struct {ACCESS_MASK GenericRead=20019h, ACCESS_MASK GenericWrite=20006h, ACCESS_MASK GenericExecute=20019h, ACCESS_MASK GenericAll=F003Fh}) 000432 0000 0900 CloseVirtualRegistryKeyHandle hKey=114h (HKEY_LOCAL_MACHINE\Software\Thinstall\StubProcessList) 000433 0000 0900 NtClose h=114h-> st=0h OK [CloseVirtualRegistryKeyHandle] 000434 0000 0900 NtCreateFile* pHandle=0012E364Access(100001h ***unknown=100001h)objAttr=12E368h (root=0h sd=0h qos=0h attr=(40h OBJ_CASE_INSENSITIVE) name=12E39Ch (12E3B4h/74 "\??\UNC\ultimo\ultimo$\Bin\ultimo.exe")) iosb=0012E380hAttribs(0h)Share(1h FILE_SHARE_READ) Disposition=1 FILE_OPENOptions(20h FILE_SYNCHRONOUS_IO_NONALERT)-> st=0h OKh=114h [Native: ""][Native: "\??\UNC\ultimo\ultimo$\Bin\ultimo.exe"][Native target] 000435 0000 0900 NtSetInformationFile* h=114h InfoClass=14 FilePositionInformation iosb=0012E298h-> st=0h OK 000436 0000 0900 NtReadFile* h=114h iosb=0012E268hdata=12E410h/64-> st=0h OK readdata=12E410h/64 "MZ......................@......................................." 000437 0000 0900 NtSetInformationFile* h=114h InfoClass=14 FilePositionInformation iosb=0012E298h-> st=0h OK 000438 0000 0900 NtReadFile* h=114h iosb=0012E268hdata=12E318h/4-> st=0h OK readdata=12E318h/4 "PE.." 000439 0000 0900 NtSetInformationFile* h=114h InfoClass=14 FilePositionInformation iosb=0012E298h-> st=0h OK 000440 0000 0900 NtReadFile* h=114h iosb=0012E268hdata=12E31Ch/244-> st=0h OK readdata=12E31Ch/244 "L.....EL..........................................@..........................P.........................................." 000441 0000 0900 NtClose h=114h-> st=0h OK 000442 0000 0900 NtCreateFile* pHandle=0012CA50Access(80100000h GENERIC_READ ***unknown=100000h)objAttr=12CA54h (root=0h sd=0h qos=0h attr=(40h OBJ_CASE_INSENSITIVE) name=12CA88h (12CAA0h/74 "\??\UNC\ultimo\ultimo$\Bin\ultimo.exe")) iosb=0012CA6ChAttribs(0h)Share(1h FILE_SHARE_READ) Disposition=1 FILE_OPENOptions(20h FILE_SYNCHRONOUS_IO_NONALERT)-> st=0h OKh=114h [Native: ""][Native: "\??\UNC\ultimo\ultimo$\Bin\ultimo.exe"][Native target] 000443 0000 0900 NtSetInformationFile* h=114h InfoClass=14 FilePositionInformation iosb=0012CB4Ch-> st=0h OK 000444 0000 0900 NtQueryInformationFile* h=114h InfoClass=5 FileStandardInformation iosb=0012CB18h-> st=0h OK 000445 0000 0900 NtReadFile* h=114h iosb=0012CB08hdata=12CB68h/16-> st=0h OK readdata=12CB68h/16 "........!..L.!Th" 000446 0000 0900 NtClose h=114h-> st=0h OK 000447 0000 0900 NtCreateFile* pHandle=0012CB74Access(80100000h GENERIC_READ ***unknown=100000h)objAttr=12CB78h (root=0h sd=0h qos=0h attr=(40h OBJ_CASE_INSENSITIVE) name=12CBACh (12CBC4h/74 "\??\UNC\ultimo\ultimo$\Bin\ultimo.exe")) iosb=0012CB90hAttribs(0h)Share(3h FILE_SHARE_READ FILE_SHARE_WRITE) Disposition=1 FILE_OPENOptions(20h FILE_SYNCHRONOUS_IO_NONALERT)-> st=0h OKh=114h [Native: ""][Native: "\??\UNC\ultimo\ultimo$\Bin\ultimo.exe"][Native target] 000448 0000 0900 NtSetInformationFile* h=114h InfoClass=14 FilePositionInformation iosb=0012CAA8h-> st=0h OK 000449 0000 0900 NtReadFile* h=114h iosb=0012CA78hdata=12CC20h/64-> st=0h OK readdata=12CC20h/64 "MZ......................@......................................." 000450 0000 0900 NtSetInformationFile* h=114h InfoClass=14 FilePositionInformation iosb=0012CAA8h-> st=0h OK 000451 0000 0900 NtReadFile* h=114h iosb=0012CA78hdata=12CD48h/4-> st=0h OK readdata=12CD48h/4 "PE.." 000452 0000 0900 NtSetInformationFile* h=114h InfoClass=14 FilePositionInformation iosb=0012CAA8h-> st=0h OK 000453 0000 0900 NtReadFile* h=114h iosb=0012CA78hdata=12CD4Ch/244-> st=0h OK readdata=12CD4Ch/244 "L.....EL..........................................@..........................P.........................................." 000454 0000 0900 NtClose h=114h-> st=0h OK 000456 0904 0900 ????????????:7e3d5e1f->????????????:7c901295 RtlInitUnicodeString (*=*12CC60h->struct {USHORT Length=0h, USHORT MaximumLength=0h, PWSTR Buffer=*0h }, PCWSTR =*12DA14h->L"WinSta0") 000457 0904 0900 ????????????:7e3d5e1f<-????????????:7c901295 RtlInitUnicodeString ->void=void (*=*12CC60h->struct {USHORT Length=Eh, USHORT MaximumLength=10h, PWSTR Buffer=*12DA14h->L"WinSta0"}, PCWSTR =*12DA14h->L"WinSta0") 000459 0904 0900 ????????????:7e3b226a->????????????:7c90d56e NtOpenDirectoryObject (PHANDLE =*12CC18h->*7FF91D0Bh, ACCESS_MASK =2h, *=*12CC00h->struct {ULONG Length=18h, HANDLE RootDirectory=0h, *ObjectName=*407E3F15h , ULONG Attributes=0h, PVOID SecurityDescriptor=*0h , PVOID SecurityQualityOfService=*F91D0B00h}) 000460 0904 0900 ????????????:7e3b226a<-????????????:7c90d56e NtOpenDirectoryObject ->long=0h (PHANDLE =*12CC18h->*114h, ACCESS_MASK =2h, *=*12CC00h->struct {ULONG Length=18h, HANDLE RootDirectory=0h, *ObjectName=*407E3F15h , ULONG Attributes=0h, PVOID SecurityDescriptor=*0h , PVOID SecurityQualityOfService=*11400h}) 000462 0904 0900 ????????????:7e3b22b8->????????????:7c90cfee NtClose+ (HANDLE =114h) 000463 0000 0900 NtClose h=114h-> st=0h OK 000464 0904 0900 ????????????:7e3b22b8<-????????????:7c90cfee NtClose+ ->long=0h (HANDLE =114h) 000466 0904 0900 ????????????:7e3a856d->????????????:7c901295 RtlInitUnicodeString (*=*12CC5Ch->struct {USHORT Length=CC70h, USHORT MaximumLength=12h, PWSTR Buffer=*12CC70h->L""}, PCWSTR =*20818h->L"Default") 000467 0904 0900 ????????????:7e3a856d<-????????????:7c901295 RtlInitUnicodeString ->void=void (*=*12CC5Ch->struct {USHORT Length=Eh, USHORT MaximumLength=10h, PWSTR Buffer=*20818h->L"Default"}, PCWSTR =*20818h->L"Default") 000469 0904 0900 ????????????:77f4731f->????????????:7c90d81e NtQueryInformationToken (HANDLE =110h, TOKEN_INFORMATION_CLASS =enum{1}, PVOID =*935A88h, ULONG =80h, PULONG =*12BEE8h->80h) 000470 0904 0900 ????????????:77f4731f<-????????????:7c90d81e NtQueryInformationToken ->long=0h (HANDLE =110h, TOKEN_INFORMATION_CLASS =enum{1}, PVOID =*935A88h, ULONG =80h, PULONG =*12BEE8h->24h) 000472 0904 0900 ????????????:7ff64a3a->????????????:7c917fae RtlLengthSid (PSID =*935A90h) 000473 0904 0900 ????????????:7ff64a3a<-????????????:7c917fae RtlLengthSid ->unsigned long=1Ch (PSID =*935A90h) 000474 0904 0900 ????????????:7ff64a3a->????????????:7c917fae RtlLengthSid (PSID =*935A90h) 000475 0904 0900 ????????????:7ff64a3a<-????????????:7c917fae RtlLengthSid ->unsigned long=1Ch (PSID =*935A90h) 000477 0904 0900 ????????????:77f4f0fb->????????????:7c917f7a RtlCopySid (DWORD =1Ch, PSID =*935B10h, PSID =*935A90h) 000478 0904 0900 ????????????:77f4f0fb<-????????????:7c917f7a RtlCopySid ->char='\00h' (DWORD =1Ch, PSID =*935B10h, PSID =*935A90h) 000480 0904 0900 ????????????:77f49f5f->????????????:7c91d48b RtlIsGenericTableEmpty (== no prototype available ==) 000481 0904 0900 ????????????:77f49f5f<-????????????:7c91d48b RtlIsGenericTableEmpty (== no prototype available ==) 000483 0904 0900 ????????????:77f4823d->????????????:7c90d66e NtOpenThreadToken (HANDLE =fffffffeh, DWORD =8h, BOOLEAN ='\00h', *=*12BEA0h->*0h ) 000484 0904 0900 ????????????:77f4823d<-????????????:7c90d66e NtOpenThreadToken ->long=0h (HANDLE =fffffffeh, DWORD =8h, BOOLEAN ='\00h', *=*12BEA0h->*110h) 000486 0904 0900 ????????????:77f48031->????????????:7c917fae RtlLengthSid (PSID =*12BF00h) 000487 0904 0900 ????????????:77f48031<-????????????:7c917fae RtlLengthSid ->unsigned long=10h (PSID =*12BF00h) 000489 0904 0900 ????????????:77f4803e->????????????:7c7d9a2d LocalAlloc (UINT uFlags=40h, SIZE_T uBytes=58h) 000490 0904 0900 ????????????:77f4803e<-????????????:7c7d9a2d LocalAlloc ->*=*149160h (UINT uFlags=40h, SIZE_T uBytes=58h) 000492 0904 0900 ????????????:77f48051->????????????:7c925c59 RtlCreateSecurityDescriptor (PSECURITY_DESCRIPTOR =*149160h, DWORD =1h) 000493 0904 0900 ????????????:77f48051<-????????????:7c925c59 RtlCreateSecurityDescriptor ->long=0h (PSECURITY_DESCRIPTOR =*149160h, DWORD =1h) 000495 0904 0900 ????????????:77f4805c->????????????:7c9261f5 RtlSetOwnerSecurityDescriptor (PSECURITY_DESCRIPTOR =*149160h, PSID =*12BF00h, BOOLEAN ='\00h') 000496 0904 0900 ????????????:77f4805c<-????????????:7c9261f5 RtlSetOwnerSecurityDescriptor ->long=0h (PSECURITY_DESCRIPTOR =*149160h, PSID =*12BF00h, BOOLEAN ='\00h') 000498 0904 0900 ????????????:77f48067->????????????:7c92623f RtlSetGroupSecurityDescriptor (PSECURITY_DESCRIPTOR =*149160h, PSID =*12BF00h, BOOLEAN ='\00h') 000499 0904 0900 ????????????:77f48067<-????????????:7c92623f RtlSetGroupSecurityDescriptor ->long=0h (PSECURITY_DESCRIPTOR =*149160h, PSID =*12BF00h, BOOLEAN ='\00h') 000501 0904 0900 ????????????:77f48077->????????????:7c925df1 RtlCreateAcl (PACL =*149174h->struct {BYTE AclRevision='\00h', BYTE Sbz1='\00h', WORD AclSize=0h, WORD AceCount=0h, WORD Sbz2=0h}, DWORD =44h, DWORD =2h) 000502 0904 0900 ????????????:77f48077<-????????????:7c925df1 RtlCreateAcl ->long=0h (PACL =*149174h->struct {BYTE AclRevision='\02h', BYTE Sbz1='\00h', WORD AclSize=44h, WORD AceCount=0h, WORD Sbz2=0h}, DWORD =44h, DWORD =2h) 000504 0904 0900 ????????????:77f4808e->????????????:7c925e43 RtlAddAccessAllowedAce (PACL =*149174h->struct {BYTE AclRevision='\02h', BYTE Sbz1='\00h', WORD AclSize=44h, WORD AceCount=0h, WORD Sbz2=0h}, DWORD =2h, DWORD =1h, PSID =*12BF00h) 000505 0904 0900 ????????????:77f4808e<-????????????:7c925e43 RtlAddAccessAllowedAce ->long=0h (PACL =*149174h->struct {BYTE AclRevision='\02h', BYTE Sbz1='\00h', WORD AclSize=44h, WORD AceCount=1h, WORD Sbz2=0h}, DWORD =2h, DWORD =1h, PSID =*12BF00h) 000507 0904 0900 ????????????:77f480a2->????????????:7c925c87 RtlSetDaclSecurityDescriptor (PSECURITY_DESCRIPTOR =*149160h, BOOLEAN ='\01h', PACL =*149174h->struct {BYTE AclRevision='\02h', BYTE Sbz1='\00h', WORD AclSize=44h, WORD AceCount=1h, WORD Sbz2=0h}, BOOLEAN ='\00h') 000508 0904 0900 ????????????:77f480a2<-????????????:7c925c87 RtlSetDaclSecurityDescriptor ->long=0h (PSECURITY_DESCRIPTOR =*149160h, BOOLEAN ='\01h', PACL =*149174h->struct {BYTE AclRevision='\02h', BYTE Sbz1='\00h', WORD AclSize=44h, WORD AceCount=1h, WORD Sbz2=0h}, BOOLEAN ='\00h') 000510 0904 0900 ????????????:77f480c8->????????????:7c90ce6e NtAccessCheck (PSECURITY_DESCRIPTOR =*149160h, HANDLE =110h, ACCESS_MASK =1h, PGENERIC_MAPPING =*12BE70h->struct {ACCESS_MASK GenericRead=20000h, ACCESS_MASK GenericWrite=20000h, ACCESS_MASK GenericExecute=20000h, ACCESS_MASK GenericAll=1F0000h}, *=*12BEA4h->struct {DWORD PrivilegeCount=100281C0h, DWORD Control=0h, struct[1] Privilege=[struct {struct Luid=struct {DWORD LowPart=12BEF0h, LONG HighPart=7FF91E69h}, DWORD Attributes=FFFFFF74h}]}, PULONG =*12BE84h->38h, PULONG =*12BE94h->0h, *=*12BE90h->0h) 000511 0904 0900 ????????????:77f480c8<-????????????:7c90ce6e NtAccessCheck ->long=0h (PSECURITY_DESCRIPTOR =*149160h, HANDLE =110h, ACCESS_MASK =1h, PGENERIC_MAPPING =*12BE70h->struct {ACCESS_MASK GenericRead=20000h, ACCESS_MASK GenericWrite=20000h, ACCESS_MASK GenericExecute=20000h, ACCESS_MASK GenericAll=1F0000h}, *=*12BEA4h->struct {DWORD PrivilegeCount=0h, DWORD Control=0h, struct[1] Privilege=[struct {struct Luid=struct {DWORD LowPart=12BEF0h, LONG HighPart=7FF91E69h}, DWORD Attributes=FFFFFF74h}]}, PULONG =*12BE84h->38h, PULONG =*12BE94h->1h, *=*12BE90h->0h) 000513 0904 0900 ????????????:77f48298->????????????:7c90cfee NtClose+ (HANDLE =110h) 000514 0904 0900 ????????????:77f48298<-????????????:7c90cfee NtClose+ ->long=0h (HANDLE =110h) 000516 0904 0900 ????????????:77f480e2->????????????:7c7d99cf LocalFree (HLOCAL hMem=149160h) 000517 0904 0900 ????????????:77f480e2<-????????????:7c7d99cf LocalFree ->*=*0h (HLOCAL hMem=149160h) 000519 0904 0900 ????????????:77f46a49->????????????:7c90d5ce NtOpenKey+ (PHANDLE =*12BCC0h->*0h , ACCESS_MASK =2000000h, *=*12BC18h->struct {ULONG Length=18h, HANDLE RootDirectory=20h, *ObjectName=*400012BCh , ULONG Attributes=0h, PVOID SecurityDescriptor=*0h , PVOID SecurityQualityOfService=*74007400h}) 000520 0904 0900 ????????????:77f46a49<-????????????:7c90d5ce NtOpenKey+ ->long=0h (PHANDLE =*12BCC0h->*110h, ACCESS_MASK =2000000h, *=*12BC18h->struct {ULONG Length=18h, HANDLE RootDirectory=20h, *ObjectName=*400012BCh , ULONG Attributes=0h, PVOID SecurityDescriptor=*0h , PVOID SecurityQualityOfService=*74007400h}) 000522 0904 0900 ????????????:77f4b356->????????????:7c90d85e NtQueryKey+ (HANDLE =110h, DWORD =0h, *=*12BCC4h, DWORD =208h, *=*12BCBCh->0h) 000523 0904 0900 ????????????:77f4b356<-????????????:7c90d85e NtQueryKey+ ->long=0h (HANDLE =110h, DWORD =0h, *=*12BCC4h, DWORD =208h, *=*12BCBCh->2Eh) 000525 0904 0900 ????????????:77f46c03->????????????:7c90cfee NtClose+ (HANDLE =110h) 000526 0904 0900 ????????????:77f46c03<-????????????:7c90cfee NtClose+ ->long=0h (HANDLE =110h) 000528 0904 0900 ????????????:77f4b37e->????????????:7c7e0b79 CompareFileTime (*lpFileTime1=*77FB6540h->struct {DWORD dwLowDateTime=48F419DFh, DWORD dwHighDateTime=1CD9D72h}, *lpFileTime2=*12BCC4h->struct {DWORD dwLowDateTime=76C8A8AEh, DWORD dwHighDateTime=1CB75B3h}) 000529 0904 0900 ????????????:77f4b37e<-????????????:7c7e0b79 CompareFileTime ->long=1h (*lpFileTime1=*77FB6540h->struct {DWORD dwLowDateTime=48F419DFh, DWORD dwHighDateTime=1CD9D72h}, *lpFileTime2=*12BCC4h->struct {DWORD dwLowDateTime=76C8A8AEh, DWORD dwHighDateTime=1CB75B3h}) 000531 0904 0900 ????????????:77f48137->????????????:7c9262e7 RtlOpenCurrentUser (ACCESS_MASK =20019h, PHANDLE =*12BEE8h->*5477h) 000532 0904 0900 ????????????:77f48137<-????????????:7c9262e7 RtlOpenCurrentUser ->long=0h (ACCESS_MASK =20019h, PHANDLE =*12BEE8h->*110h) 000533 0904 0900 ????????????:77f46a49->????????????:7c90d5ce NtOpenKey+ (PHANDLE =*12BCC0h->*0h , ACCESS_MASK =2000000h, *=*12BC18h->struct {ULONG Length=18h, HANDLE RootDirectory=110h, *ObjectName=*400012BCh , ULONG Attributes=0h, PVOID SecurityDescriptor=*0h , PVOID SecurityQualityOfService=*74007400h}) 000534 0904 0900 ????????????:77f46a49<-????????????:7c90d5ce NtOpenKey+ ->long=C0000034h (PHANDLE =*12BCC0h->*0h , ACCESS_MASK =2000000h, *=*12BC18h->struct {ULONG Length=18h, HANDLE RootDirectory=110h, *ObjectName=*400012BCh , ULONG Attributes=0h, PVOID SecurityDescriptor=*0h , PVOID SecurityQualityOfService=*74007400h}) 000535 0904 0900 ????????????:77f46c03->????????????:7c90cfee NtClose+ (HANDLE =110h) 000536 0904 0900 ????????????:77f46c03<-????????????:7c90cfee NtClose+ ->long=0h (HANDLE =110h) 000538 0904 0900 ????????????:77f4a370->????????????:7c913ac2 RtlDetermineDosPathNameType_U (PCWSTR =*12D080h->L"\\ultimo\ultimo$\Bin\ultimo.exe") 000539 0904 0900 ????????????:77f4a370<-????????????:7c913ac2 RtlDetermineDosPathNameType_U ->enum=enum{1} (PCWSTR =*12D080h->L"\\ultimo\ultimo$\Bin\ultimo.exe") 000541 0904 0900 ????????????:77f4a254->????????????:7c90d7ce NtQueryInformationFile (HANDLE =114h, *=*12B594h->struct {ULONG_PTR Information=0h}, PVOID =*12B5A4h, LONG =210h, FILE_INFORMATION_CLASS =enum{9}) 000542 0904 0900 ????????????:77f4a254<-????????????:7c90d7ce NtQueryInformationFile ->long=0h (HANDLE =114h, *=*12B594h->struct {ULONG_PTR Information=0h}, PVOID =*12B5A4h, LONG =210h, FILE_INFORMATION_CLASS =enum{9}) 000547 0904 0900 ????????????:77f4a31b->????????????:7c7e33f3 GetLongPathNameW+ (LPCWSTR lpszShortPath=*12B5A8h->L"\\ultimo\ultimo$\Bin\ultimo.exe", LPWSTR lpszLongPath=*12B7B4h->L"", DWORD cchBuffer=104h) 000548 0904 0900 ????????????:77f4a31b<-????????????:7c7e33f3 GetLongPathNameW+ ->unsigned long=1Fh (LPCWSTR lpszShortPath=*12B5A8h->L"\\ultimo\ultimo$\Bin\ultimo.exe", LPWSTR lpszLongPath=*12B7B4h->L"\\ultimo\ultimo$\Bin\ultimo.exe", DWORD cchBuffer=104h) 000550 0904 0900 ????????????:77f4a333->????????????:7c901295 RtlInitUnicodeString (*=*12B59Ch->struct {USHORT Length=3Eh, USHORT MaximumLength=20Ch, PWSTR Buffer=*12B5A8h->L"\\ultimo\ultimo$\Bin\ultimo.exe"}, PCWSTR =*12B7B4h->L"\\ultimo\ultimo$\Bin\ultimo.exe") 000551 0904 0900 ????????????:77f4a333<-????????????:7c901295 RtlInitUnicodeString ->void=void (*=*12B59Ch->struct {USHORT Length=3Eh, USHORT MaximumLength=40h, PWSTR Buffer=*12B7B4h->L"\\ultimo\ultimo$\Bin\ultimo.exe"}, PCWSTR =*12B7B4h->L"\\ultimo\ultimo$\Bin\ultimo.exe") 000553 0904 0900 ????????????:77f4a343->????????????:7c91f963 RtlDuplicateUnicodeString (int =1h, *=*12B59Ch->struct {USHORT Length=3Eh, USHORT MaximumLength=40h, PWSTR Buffer=*12B7B4h->L"\\ultimo\ultimo$\Bin\ultimo.exe"}, *=*12BEBCh->struct {USHORT Length=0h, USHORT MaximumLength=0h, PWSTR Buffer=*0h }) 000554 0904 0900 ????????????:77f4a343<-????????????:7c91f963 RtlDuplicateUnicodeString ->long=0h (int =1h, *=*12B59Ch->struct {USHORT Length=3Eh, USHORT MaximumLength=40h, PWSTR Buffer=*12B7B4h->L"\\ultimo\ultimo$\Bin\ultimo.exe"}, *=*12BEBCh->struct {USHORT Length=3Eh, USHORT MaximumLength=40h, PWSTR Buffer=*148920h->L"\\ultimo\ultimo$\Bin\ultimo.exe"}) 000556 0904 0900 ????????????:77f4af07->????????????:7c91d48b RtlIsGenericTableEmpty (== no prototype available ==) 000557 0904 0900 ????????????:77f4af07<-????????????:7c91d48b RtlIsGenericTableEmpty (== no prototype available ==) 000559 0904 0900 ????????????:77f4af32->????????????:7c91d413 RtlEnumerateGenericTableWithoutSplaying (== no prototype available ==) 000560 0904 0900 ????????????:77f4af32<-????????????:7c91d413 RtlEnumerateGenericTableWithoutSplaying (== no prototype available ==) 000562 0904 0900 ????????????:77f4b1ba->????????????:7c7e0aa9 GetFileSizeEx+ (HANDLE hFile=114h, PLARGE_INTEGER lpFileSize=*12BEC8h->union {struct u=struct {DWORD LowPart=0h, LONG HighPart=0h}, LONGLONG QuadPart=0.000000e+000 }) 000563 0904 0900 ????????????:77f4b1ba<-????????????:7c7e0aa9 GetFileSizeEx+ ->int=1h (HANDLE hFile=114h, PLARGE_INTEGER lpFileSize=*12BEC8h->union {struct u=struct {DWORD LowPart=144000h, LONG HighPart=0h}, LONGLONG QuadPart=6.556765e-318 }) 000565 0904 0900 ????????????:77f4b1e6->????????????:7c7d943c CreateFileMappingW+ (HANDLE hFile=114h, *lpFileMappingAttributes=*0h , DWORD flProtect=2h, DWORD dwMaximumSizeHigh=0h, DWORD dwMaximumSizeLow=144000h, LPCWSTR lpName=*0h ) 000566 0904 0900 ????????????:77f4b1e6<-????????????:7c7d943c CreateFileMappingW+ ->*=*110h (HANDLE hFile=114h, *lpFileMappingAttributes=*0h , DWORD flProtect=2h, DWORD dwMaximumSizeHigh=0h, DWORD dwMaximumSizeLow=144000h, LPCWSTR lpName=*0h ) 000568 0904 0900 ????????????:77f4b207->????????????:7c7db9a5 MapViewOfFile+ (HANDLE hFileMappingObject=110h, DWORD dwDesiredAccess=4h, DWORD dwFileOffsetHigh=0h, DWORD dwFileOffsetLow=0h, SIZE_T dwNumberOfBytesToMap=144000h) 000569 0904 0900 ????????????:77f4b207<-????????????:7c7db9a5 MapViewOfFile+ ->*=*1110000h (HANDLE hFileMappingObject=110h, DWORD dwDesiredAccess=4h, DWORD dwFileOffsetHigh=0h, DWORD dwFileOffsetLow=0h, SIZE_T dwNumberOfBytesToMap=144000h) 000571 0904 0900 ????????????:77f4b213->????????????:7c7d9be7 CloseHandle+ (HANDLE hObject=110h) 000572 0904 0900 ????????????:77f4b213<-????????????:7c7d9be7 CloseHandle+ ->int=1h (HANDLE hObject=110h) 000574 0904 0900 ????????????:77f4af72->????????????:7c91d413 RtlEnumerateGenericTableWithoutSplaying (== no prototype available ==) 000575 0904 0900 ????????????:77f4af72<-????????????:7c91d413 RtlEnumerateGenericTableWithoutSplaying (== no prototype available ==) 000576 0904 0900 ????????????:77f4af72->????????????:7c91d413 RtlEnumerateGenericTableWithoutSplaying (== no prototype available ==) 000577 0904 0900 ????????????:77f4af72<-????????????:7c91d413 RtlEnumerateGenericTableWithoutSplaying (== no prototype available ==) 000578 0904 0900 ????????????:77f4af72->????????????:7c91d413 RtlEnumerateGenericTableWithoutSplaying (== no prototype available ==) 000579 0904 0900 ????????????:77f4af72<-????????????:7c91d413 RtlEnumerateGenericTableWithoutSplaying (== no prototype available ==) 000580 0904 0900 ????????????:77f4af72->????????????:7c91d413 RtlEnumerateGenericTableWithoutSplaying (== no prototype available ==) 000581 0904 0900 ????????????:77f4af72<-????????????:7c91d413 RtlEnumerateGenericTableWithoutSplaying (== no prototype available ==) 000582 0904 0900 ????????????:77f4af72->????????????:7c91d413 RtlEnumerateGenericTableWithoutSplaying (== no prototype available ==) 000583 0904 0900 ????????????:77f4af72<-????????????:7c91d413 RtlEnumerateGenericTableWithoutSplaying (== no prototype available ==) 000584 0904 0900 ????????????:77f4af72->????????????:7c91d413 RtlEnumerateGenericTableWithoutSplaying (== no prototype available ==) 000585 0904 0900 ????????????:77f4af72<-????????????:7c91d413 RtlEnumerateGenericTableWithoutSplaying (== no prototype available ==) 000587 0904 0900 ????????????:77f4a876->????????????:7c91d48b RtlIsGenericTableEmpty (== no prototype available ==) 000588 0904 0900 ????????????:77f4a876<-????????????:7c91d48b RtlIsGenericTableEmpty (== no prototype available ==) 000590 0904 0900 ????????????:77f4a899->????????????:7c91d413 RtlEnumerateGenericTableWithoutSplaying (== no prototype available ==) 000591 0904 0900 ????????????:77f4a899<-????????????:7c91d413 RtlEnumerateGenericTableWithoutSplaying (== no prototype available ==) 000593 0904 0900 ????????????:77f4a8b7->????????????:7c91d413 RtlEnumerateGenericTableWithoutSplaying (== no prototype available ==) 000594 0904 0900 ????????????:77f4a8b7<-????????????:7c91d413 RtlEnumerateGenericTableWithoutSplaying (== no prototype available ==) 000596 0904 0900 ????????????:77f4a932->????????????:7c91057f wcsncpy (*=*12B998h->L'\00h', *=*1422C8h->L'C', int =57h) 000597 0904 0900 ????????????:77f4a932<-????????????:7c91057f wcsncpy ->*=*12BDFCh->L'\BEDCh' (*=*12B998h->L'C', *=*1422C8h->L'C', int =57h) 000599 0904 0900 ????????????:77f4a94d->????????????:7c9148e2 wcschr (*=*12B998h->L'C', _wchar =L'~') 000600 0904 0900 ????????????:77f4a94d<-????????????:7c9148e2 wcschr ->*=*12BDFCh->L'\BEDCh' (*=*12B998h->L'C', _wchar =L'~') 000602 0904 0900 ????????????:77f4a99a->????????????:7c901295 RtlInitUnicodeString (*=*12B6FCh->struct {USHORT Length=0h, USHORT MaximumLength=0h, PWSTR Buffer=*0h }, PCWSTR =*1422C8h->L"C:\Documents and Settings\test.xp\Local Settings\Temporary Internet Files\OLK*") 000603 0904 0900 ????????????:77f4a99a<-????????????:7c901295 RtlInitUnicodeString ->void=void (*=*12B6FCh->struct {USHORT Length=AEh, USHORT MaximumLength=B0h, PWSTR Buffer=*1422C8h->L"C:\Documents and Settings\test.xp\Local Settings\Temporary Internet Files\OLK*"}, PCWSTR =*1422C8h->L"C:\Documents and Settings\test.xp\Local Settings\Temporary Internet Files\OLK*") 000605 0904 0900 ????????????:77f4a9a4->????????????:7c901295 RtlInitUnicodeString (*=*12B704h->struct {USHORT Length=BDFCh, USHORT MaximumLength=12h, PWSTR Buffer=*12B998h->L"C:\Documents and Settings\test.xp\Local Settings\Temporary Internet Files\OLK*"}, PCWSTR =*148920h->L"\\ultimo\ultimo$\Bin\ultimo.exe") 000606 0904 0900 ????????????:77f4a9a4<-????????????:7c901295 RtlInitUnicodeString ->void=void (*=*12B704h->struct {USHORT Length=3Eh, USHORT MaximumLength=40h, PWSTR Buffer=*148920h->L"\\ultimo\ultimo$\Bin\ultimo.exe"}, PCWSTR =*148920h->L"\\ultimo\ultimo$\Bin\ultimo.exe") 000608 0904 0900 ????????????:77f4a9c1->????????????:7c9148e2 wcschr (*=*1422C8h->L'C', _wchar =L'\') 000609 0904 0900 ????????????:77f4a9c1<-????????????:7c9148e2 wcschr ->*=*12B70Ch->L'\BDFCh' (*=*1422C8h->L'C', _wchar =L'\') 000610 0904 0900 ????????????:77f4a8b7->????????????:7c91d413 RtlEnumerateGenericTableWithoutSplaying (== no prototype available ==) 000611 0904 0900 ????????????:77f4a8b7<-????????????:7c91d413 RtlEnumerateGenericTableWithoutSplaying (== no prototype available ==) 000612 0904 0900 ????????????:77f4a8b7->????????????:7c91d413 RtlEnumerateGenericTableWithoutSplaying (== no prototype available ==) 000613 0904 0900 ????????????:77f4a8b7<-????????????:7c91d413 RtlEnumerateGenericTableWithoutSplaying (== no prototype available ==) 000614 0904 0900 ????????????:77f4a8b7->????????????:7c91d413 RtlEnumerateGenericTableWithoutSplaying (== no prototype available ==) 000615 0904 0900 ????????????:77f4a8b7<-????????????:7c91d413 RtlEnumerateGenericTableWithoutSplaying (== no prototype available ==) 000616 0904 0900 ????????????:77f4a8b7->????????????:7c91d413 RtlEnumerateGenericTableWithoutSplaying (== no prototype available ==) 000617 0904 0900 ????????????:77f4a8b7<-????????????:7c91d413 RtlEnumerateGenericTableWithoutSplaying (== no prototype available ==) 000618 0904 0900 ????????????:77f4a8b7->????????????:7c91d413 RtlEnumerateGenericTableWithoutSplaying (== no prototype available ==) 000619 0904 0900 ????????????:77f4a8b7<-????????????:7c91d413 RtlEnumerateGenericTableWithoutSplaying (== no prototype available ==) 000621 0904 0900 ????????????:77f4a79c->????????????:7c7dba14 UnmapViewOfFile+ (LPCVOID lpBaseAddress=*1110000h) 000622 0904 0900 ????????????:77f4a79c<-????????????:7c7dba14 UnmapViewOfFile+ ->int=1h (LPCVOID lpBaseAddress=*1110000h) 000624 0904 0900 ????????????:77f4a63c->????????????:7c91826d RtlAllocateHandle (*=*77FB64E0h->struct {ULONG MaxHandleCount=40h, ULONG HandleSize=40h, unsigned long[2] Unused=[0h, 0h], PVOID NextFree=*AB0000h, PVOID FirstHandle=*AB00h, PVOID ReservedMemory=*100000ABh, PVOID MaxHandle=*97EAC000h}, *=*12BECCh->0h) 000625 0904 0900 ????????????:77f4a63c<-????????????:7c91826d RtlAllocateHandle ->*=*AB0000h->struct {*Next=*0h } (*=*77FB64E0h->struct {ULONG MaxHandleCount=40h, ULONG HandleSize=40h, unsigned long[2] Unused=[0h, 0h], PVOID NextFree=*AB0040h, PVOID FirstHandle=*AB00h, PVOID ReservedMemory=*100000ABh, PVOID MaxHandle=*97EAC000h}, *=*12BECCh->0h) 000627 0904 0900 ????????????:77f4b0c7->????????????:7c90d5ce NtOpenKey+ (PHANDLE =*12BCB4h->*0h , ACCESS_MASK =1h, *=*77F4B118h->struct {ULONG Length=18h, HANDLE RootDirectory=0h, *ObjectName=*4077F4A6h , ULONG Attributes=0h, PVOID SecurityDescriptor=*0h , PVOID SecurityQualityOfService=*18001600h}) 000628 0904 0900 ????????????:77f4b0c7<-????????????:7c90d5ce NtOpenKey+ ->long=0h (PHANDLE =*12BCB4h->*110h, ACCESS_MASK =1h, *=*77F4B118h->struct {ULONG Length=18h, HANDLE RootDirectory=0h, *ObjectName=*4077F4A6h , ULONG Attributes=0h, PVOID SecurityDescriptor=*0h , PVOID SecurityQualityOfService=*18001600h}) 000630 0904 0900 ????????????:77f4b0f1->????????????:7c90d96e NtQueryValueKey+ (HANDLE =110h, *=*77F4B130h->struct {USHORT Length=16h, USHORT MaximumLength=18h, PWSTR Buffer=*77F4B138h->L"LogFileName"}, DWORD =2h, *=*12BCC0h, DWORD =218h, *=*12BCACh->0h) 000631 0904 0900 ????????????:77f4b0f1<-????????????:7c90d96e NtQueryValueKey+ ->long=C0000034h (HANDLE =110h, *=*77F4B130h->struct {USHORT Length=16h, USHORT MaximumLength=18h, PWSTR Buffer=*77F4B138h->L"LogFileName"}, DWORD =2h, *=*12BCC0h, DWORD =218h, *=*12BCACh->0h) 000633 0904 0900 ????????????:77f4b0ff->????????????:7c90cfee NtClose+ (HANDLE =110h) 000634 0904 0900 ????????????:77f4b0ff<-????????????:7c90cfee NtClose+ ->long=0h (HANDLE =110h) 000636 0904 0900 ????????????:77f4a700->????????????:7c9132a8 RtlIsValidIndexHandle (*=*77FB64E0h->struct {ULONG MaxHandleCount=40h, ULONG HandleSize=40h, unsigned long[2] Unused=[0h, 0h], PVOID NextFree=*AB0040h, PVOID FirstHandle=*AB00h, PVOID ReservedMemory=*100000ABh, PVOID MaxHandle=*97EAC000h}, ULONG Index=0h, *=*12BF58h->*233595Fh->struct {*Next=*1000A30h->struct {}}) ++++ STREAM-OUT-OF-SYNC by +-4 000637 0904 0900 ????????????:77f4a700<-????????????:7c9132a8 RtlIsValidIndexHandle ->char='\01h' (*=*77FB64E0h->struct {ULONG MaxHandleCount=40h, ULONG HandleSize=40h, unsigned long[2] Unused=[0h, 0h], PVOID NextFree=*AB0040h, PVOID FirstHandle=*AB00h, PVOID ReservedMemory=*100000ABh, PVOID MaxHandle=*97EAC000h}, ULONG Index=0h, *=*12BF58h->*AB0000h->struct {*Next=*1h}) 000639 0904 0900 ????????????:77f49153->????????????:7c91fa57 RtlLookupElementGenericTable (== no prototype available ==) 000640 0904 0900 ????????????:77f49153<-????????????:7c91fa57 RtlLookupElementGenericTable (== no prototype available ==) 000641 0904 0900 ????????????:77f49153->????????????:7c91fa57 RtlLookupElementGenericTable (== no prototype available ==) 000642 0904 0900 ????????????:77f49153<-????????????:7c91fa57 RtlLookupElementGenericTable (== no prototype available ==) 000643 0904 0900 ????????????:77f4731f->????????????:7c90d81e NtQueryInformationToken (HANDLE =11ch, TOKEN_INFORMATION_CLASS =enum{8}, PVOID =*12BE28h, ULONG =4h, PULONG =*12BE14h->0h) 000644 0904 0900 ????????????:77f4731f<-????????????:7c90d81e NtQueryInformationToken ->long=0h (HANDLE =11ch, TOKEN_INFORMATION_CLASS =enum{8}, PVOID =*12BE28h, ULONG =4h, PULONG =*12BE14h->4h) 000646 0904 0900 ????????????:77f481fd->????????????:7c90d2ae NtDuplicateToken (HANDLE =11ch, ACCESS_MASK =Ch, *=*12BDB4h->struct {ULONG Length=18h, HANDLE RootDirectory=0h, *ObjectName=*0h , ULONG Attributes=0h, PVOID SecurityDescriptor=*BDCC0000h, PVOID SecurityQualityOfService=*C00h}, SECURITY_IMPERSONATION_LEVEL =enum{0}, TOKEN_TYPE =enum{2}, PHANDLE =*12BE18h->*0h ) 000647 0904 0900 ????????????:77f481fd<-????????????:7c90d2ae NtDuplicateToken ->long=0h (HANDLE =11ch, ACCESS_MASK =Ch, *=*12BDB4h->struct {ULONG Length=18h, HANDLE RootDirectory=0h, *ObjectName=*0h , ULONG Attributes=0h, PVOID SecurityDescriptor=*BDCC0000h, PVOID SecurityQualityOfService=*C00h}, SECURITY_IMPERSONATION_LEVEL =enum{0}, TOKEN_TYPE =enum{2}, PHANDLE =*12BE18h->*110h) 000648 0904 0900 ????????????:77f48031->????????????:7c917fae RtlLengthSid (PSID =*77FB65E0h) 000649 0904 0900 ????????????:77f48031<-????????????:7c917fae RtlLengthSid ->unsigned long=Ch (PSID =*77FB65E0h) 000650 0904 0900 ????????????:77f4803e->????????????:7c7d9a2d LocalAlloc (UINT uFlags=40h, SIZE_T uBytes=4Ch) 000651 0904 0900 ????????????:77f4803e<-????????????:7c7d9a2d LocalAlloc ->*=*146540h (UINT uFlags=40h, SIZE_T uBytes=4Ch) 000652 0904 0900 ????????????:77f48051->????????????:7c925c59 RtlCreateSecurityDescriptor (PSECURITY_DESCRIPTOR =*146540h, DWORD =1h) 000653 0904 0900 ????????????:77f48051<-????????????:7c925c59 RtlCreateSecurityDescriptor ->long=0h (PSECURITY_DESCRIPTOR =*146540h, DWORD =1h) 000654 0904 0900 ????????????:77f4805c->????????????:7c9261f5 RtlSetOwnerSecurityDescriptor (PSECURITY_DESCRIPTOR =*146540h, PSID =*77FB65E0h, BOOLEAN ='\00h') 000655 0904 0900 ????????????:77f4805c<-????????????:7c9261f5 RtlSetOwnerSecurityDescriptor ->long=0h (PSECURITY_DESCRIPTOR =*146540h, PSID =*77FB65E0h, BOOLEAN ='\00h') 000656 0904 0900 ????????????:77f48067->????????????:7c92623f RtlSetGroupSecurityDescriptor (PSECURITY_DESCRIPTOR =*146540h, PSID =*77FB65E0h, BOOLEAN ='\00h') 000657 0904 0900 ????????????:77f48067<-????????????:7c92623f RtlSetGroupSecurityDescriptor ->long=0h (PSECURITY_DESCRIPTOR =*146540h, PSID =*77FB65E0h, BOOLEAN ='\00h') 000658 0904 0900 ????????????:77f48077->????????????:7c925df1 RtlCreateAcl (PACL =*146554h->struct {BYTE AclRevision='\00h', BYTE Sbz1='\00h', WORD AclSize=0h, WORD AceCount=0h, WORD Sbz2=0h}, DWORD =38h, DWORD =2h) 000659 0904 0900 ????????????:77f48077<-????????????:7c925df1 RtlCreateAcl ->long=0h (PACL =*146554h->struct {BYTE AclRevision='\02h', BYTE Sbz1='\00h', WORD AclSize=38h, WORD AceCount=0h, WORD Sbz2=0h}, DWORD =38h, DWORD =2h) 000660 0904 0900 ????????????:77f4808e->????????????:7c925e43 RtlAddAccessAllowedAce (PACL =*146554h->struct {BYTE AclRevision='\02h', BYTE Sbz1='\00h', WORD AclSize=38h, WORD AceCount=0h, WORD Sbz2=0h}, DWORD =2h, DWORD =1h, PSID =*77FB65E0h) 000661 0904 0900 ????????????:77f4808e<-????????????:7c925e43 RtlAddAccessAllowedAce ->long=0h (PACL =*146554h->struct {BYTE AclRevision='\02h', BYTE Sbz1='\00h', WORD AclSize=38h, WORD AceCount=1h, WORD Sbz2=0h}, DWORD =2h, DWORD =1h, PSID =*77FB65E0h) 000662 0904 0900 ????????????:77f480a2->????????????:7c925c87 RtlSetDaclSecurityDescriptor (PSECURITY_DESCRIPTOR =*146540h, BOOLEAN ='\01h', PACL =*146554h->struct {BYTE AclRevision='\02h', BYTE Sbz1='\00h', WORD AclSize=38h, WORD AceCount=1h, WORD Sbz2=0h}, BOOLEAN ='\00h') 000663 0904 0900 ????????????:77f480a2<-????????????:7c925c87 RtlSetDaclSecurityDescriptor ->long=0h (PSECURITY_DESCRIPTOR =*146540h, BOOLEAN ='\01h', PACL =*146554h->struct {BYTE AclRevision='\02h', BYTE Sbz1='\00h', WORD AclSize=38h, WORD AceCount=1h, WORD Sbz2=0h}, BOOLEAN ='\00h') 000664 0904 0900 ????????????:77f480c8->????????????:7c90ce6e NtAccessCheck (PSECURITY_DESCRIPTOR =*146540h, HANDLE =110h, ACCESS_MASK =1h, PGENERIC_MAPPING =*12BD88h->struct {ACCESS_MASK GenericRead=20000h, ACCESS_MASK GenericWrite=20000h, ACCESS_MASK GenericExecute=20000h, ACCESS_MASK GenericAll=1F0000h}, *=*12BDBCh->struct {DWORD PrivilegeCount=0h, DWORD Control=0h, struct[1] Privilege=[struct {struct Luid=struct {DWORD LowPart=0h, LONG HighPart=12BDCCh}, DWORD Attributes=Ch}]}, PULONG =*12BD9Ch->38h, PULONG =*12BDACh->0h, *=*12BDA8h->0h) 000665 0904 0900 ????????????:77f480c8<-????????????:7c90ce6e NtAccessCheck ->long=0h (PSECURITY_DESCRIPTOR =*146540h, HANDLE =110h, ACCESS_MASK =1h, PGENERIC_MAPPING =*12BD88h->struct {ACCESS_MASK GenericRead=20000h, ACCESS_MASK GenericWrite=20000h, ACCESS_MASK GenericExecute=20000h, ACCESS_MASK GenericAll=1F0000h}, *=*12BDBCh->struct {DWORD PrivilegeCount=0h, DWORD Control=0h, struct[1] Privilege=[struct {struct Luid=struct {DWORD LowPart=0h, LONG HighPart=12BDCCh}, DWORD Attributes=Ch}]}, PULONG =*12BD9Ch->38h, PULONG =*12BDACh->0h, *=*12BDA8h->C0000022h) 000666 0904 0900 ????????????:77f480e2->????????????:7c7d99cf LocalFree (HLOCAL hMem=146540h) 000667 0904 0900 ????????????:77f480e2<-????????????:7c7d99cf LocalFree ->*=*0h (HLOCAL hMem=146540h) 000668 0904 0900 ????????????:77f48031->????????????:7c917fae RtlLengthSid (PSID =*77FB6580h) 000669 0904 0900 ????????????:77f48031<-????????????:7c917fae RtlLengthSid ->unsigned long=Ch (PSID =*77FB6580h) 000670 0904 0900 ????????????:77f4803e->????????????:7c7d9a2d LocalAlloc (UINT uFlags=40h, SIZE_T uBytes=4Ch) 000671 0904 0900 ????????????:77f4803e<-????????????:7c7d9a2d LocalAlloc ->*=*146540h (UINT uFlags=40h, SIZE_T uBytes=4Ch) 000672 0904 0900 ????????????:77f48051->????????????:7c925c59 RtlCreateSecurityDescriptor (PSECURITY_DESCRIPTOR =*146540h, DWORD =1h) 000673 0904 0900 ????????????:77f48051<-????????????:7c925c59 RtlCreateSecurityDescriptor ->long=0h (PSECURITY_DESCRIPTOR =*146540h, DWORD =1h) 000674 0904 0900 ????????????:77f4805c->????????????:7c9261f5 RtlSetOwnerSecurityDescriptor (PSECURITY_DESCRIPTOR =*146540h, PSID =*77FB6580h, BOOLEAN ='\00h') 000675 0904 0900 ????????????:77f4805c<-????????????:7c9261f5 RtlSetOwnerSecurityDescriptor ->long=0h (PSECURITY_DESCRIPTOR =*146540h, PSID =*77FB6580h, BOOLEAN ='\00h') 000676 0904 0900 ????????????:77f48067->????????????:7c92623f RtlSetGroupSecurityDescriptor (PSECURITY_DESCRIPTOR =*146540h, PSID =*77FB6580h, BOOLEAN ='\00h') 000677 0904 0900 ????????????:77f48067<-????????????:7c92623f RtlSetGroupSecurityDescriptor ->long=0h (PSECURITY_DESCRIPTOR =*146540h, PSID =*77FB6580h, BOOLEAN ='\00h') 000678 0904 0900 ????????????:77f48077->????????????:7c925df1 RtlCreateAcl (PACL =*146554h->struct {BYTE AclRevision='\00h', BYTE Sbz1='\00h', WORD AclSize=0h, WORD AceCount=0h, WORD Sbz2=0h}, DWORD =38h, DWORD =2h) 000679 0904 0900 ????????????:77f48077<-????????????:7c925df1 RtlCreateAcl ->long=0h (PACL =*146554h->struct {BYTE AclRevision='\02h', BYTE Sbz1='\00h', WORD AclSize=38h, WORD AceCount=0h, WORD Sbz2=0h}, DWORD =38h, DWORD =2h) 000680 0904 0900 ????????????:77f4808e->????????????:7c925e43 RtlAddAccessAllowedAce (PACL =*146554h->struct {BYTE AclRevision='\02h', BYTE Sbz1='\00h', WORD AclSize=38h, WORD AceCount=0h, WORD Sbz2=0h}, DWORD =2h, DWORD =1h, PSID =*77FB6580h) 000681 0904 0900 ????????????:77f4808e<-????????????:7c925e43 RtlAddAccessAllowedAce ->long=0h (PACL =*146554h->struct {BYTE AclRevision='\02h', BYTE Sbz1='\00h', WORD AclSize=38h, WORD AceCount=1h, WORD Sbz2=0h}, DWORD =2h, DWORD =1h, PSID =*77FB6580h) 000682 0904 0900 ????????????:77f480a2->????????????:7c925c87 RtlSetDaclSecurityDescriptor (PSECURITY_DESCRIPTOR =*146540h, BOOLEAN ='\01h', PACL =*146554h->struct {BYTE AclRevision='\02h', BYTE Sbz1='\00h', WORD AclSize=38h, WORD AceCount=1h, WORD Sbz2=0h}, BOOLEAN ='\00h') 000683 0904 0900 ????????????:77f480a2<-????????????:7c925c87 RtlSetDaclSecurityDescriptor ->long=0h (PSECURITY_DESCRIPTOR =*146540h, BOOLEAN ='\01h', PACL =*146554h->struct {BYTE AclRevision='\02h', BYTE Sbz1='\00h', WORD AclSize=38h, WORD AceCount=1h, WORD Sbz2=0h}, BOOLEAN ='\00h') 000684 0904 0900 ????????????:77f480c8->????????????:7c90ce6e NtAccessCheck (PSECURITY_DESCRIPTOR =*146540h, HANDLE =110h, ACCESS_MASK =1h, PGENERIC_MAPPING =*12BD88h->struct {ACCESS_MASK GenericRead=20000h, ACCESS_MASK GenericWrite=20000h, ACCESS_MASK GenericExecute=20000h, ACCESS_MASK GenericAll=1F0000h}, *=*12BDBCh->struct {DWORD PrivilegeCount=0h, DWORD Control=0h, struct[1] Privilege=[struct {struct Luid=struct {DWORD LowPart=0h, LONG HighPart=12BDCCh}, DWORD Attributes=Ch}]}, PULONG =*12BD9Ch->38h, PULONG =*12BDACh->0h, *=*12BDA8h->0h) 000685 0904 0900 ????????????:77f480c8<-????????????:7c90ce6e NtAccessCheck ->long=0h (PSECURITY_DESCRIPTOR =*146540h, HANDLE =110h, ACCESS_MASK =1h, PGENERIC_MAPPING =*12BD88h->struct {ACCESS_MASK GenericRead=20000h, ACCESS_MASK GenericWrite=20000h, ACCESS_MASK GenericExecute=20000h, ACCESS_MASK GenericAll=1F0000h}, *=*12BDBCh->struct {DWORD PrivilegeCount=0h, DWORD Control=0h, struct[1] Privilege=[struct {struct Luid=struct {DWORD LowPart=0h, LONG HighPart=12BDCCh}, DWORD Attributes=Ch}]}, PULONG =*12BD9Ch->38h, PULONG =*12BDACh->0h, *=*12BDA8h->C0000022h) 000686 0904 0900 ????????????:77f480e2->????????????:7c7d99cf LocalFree (HLOCAL hMem=146540h) 000687 0904 0900 ????????????:77f480e2<-????????????:7c7d99cf LocalFree ->*=*0h (HLOCAL hMem=146540h) 000689 0904 0900 ????????????:77f8eadb->????????????:7c90cfee NtClose+ (HANDLE =110h) 000690 0904 0900 ????????????:77f8eadb<-????????????:7c90cfee NtClose+ ->long=0h (HANDLE =110h) 000692 0904 0900 ????????????:77f4903a->????????????:7c90d81e NtQueryInformationToken (HANDLE =11ch, TOKEN_INFORMATION_CLASS =enum{1}, PVOID =*14BF48h, ULONG =80h, PULONG =*12BE18h->12BDFCh) 000693 0904 0900 ????????????:77f4903a<-????????????:7c90d81e NtQueryInformationToken ->long=0h (HANDLE =11ch, TOKEN_INFORMATION_CLASS =enum{1}, PVOID =*14BF48h, ULONG =80h, PULONG =*12BE18h->24h) 000695 0904 0900 ????????????:77f4ad42->????????????:7c90d81e NtQueryInformationToken (HANDLE =11ch, TOKEN_INFORMATION_CLASS =enum{15}, PVOID =*12BEA4h, ULONG =4h, PULONG =*12BE38h->0h) 000696 0904 0900 ????????????:77f4ad42<-????????????:7c90d81e NtQueryInformationToken ->long=0h (HANDLE =11ch, TOKEN_INFORMATION_CLASS =enum{15}, PVOID =*12BEA4h, ULONG =4h, PULONG =*12BE38h->4h) 000698 0904 0900 ????????????:77f4ae64->????????????:7c90ff2d RtlFreeHeap (HANDLE =140000h, ULONG =0h, PVOID =*14BF48h) 000699 0904 0900 ????????????:77f4ae64<-????????????:7c90ff2d RtlFreeHeap ->char='\01h' (HANDLE =140000h, ULONG =0h, PVOID =*14BF48h) 000701 0904 0900 ????????????:77f4b009->????????????:7c9132a8 RtlIsValidIndexHandle (*=*77FB64E0h->struct {ULONG MaxHandleCount=40h, ULONG HandleSize=40h, unsigned long[2] Unused=[0h, 0h], PVOID NextFree=*AB0040h, PVOID FirstHandle=*AB00h, PVOID ReservedMemory=*100000ABh, PVOID MaxHandle=*97EAC000h}, ULONG Index=0h, *=*12BF68h->*74000000h->struct {*Next=*1000A30h->struct {}}) ++++ STREAM-OUT-OF-SYNC by +-4 000702 0904 0900 ????????????:77f4b009<-????????????:7c9132a8 RtlIsValidIndexHandle ->char='\01h' (*=*77FB64E0h->struct {ULONG MaxHandleCount=40h, ULONG HandleSize=40h, unsigned long[2] Unused=[0h, 0h], PVOID NextFree=*AB0040h, PVOID FirstHandle=*AB00h, PVOID ReservedMemory=*100000ABh, PVOID MaxHandle=*97EAC000h}, ULONG Index=0h, *=*12BF68h->*AB0000h->struct {*Next=*1h}) 000704 0904 0900 ????????????:77f4b017->????????????:7c91326f RtlFreeHandle (*=*77FB64E0h->struct {ULONG MaxHandleCount=40h, ULONG HandleSize=40h, unsigned long[2] Unused=[0h, 0h], PVOID NextFree=*AB0040h, PVOID FirstHandle=*AB00h, PVOID ReservedMemory=*100000ABh, PVOID MaxHandle=*97EAC000h}, *=*AB0000h->struct {*Next=*1h}) 000705 0904 0900 ????????????:77f4b017<-????????????:7c91326f RtlFreeHandle ->char='\01h' (*=*77FB64E0h->struct {ULONG MaxHandleCount=40h, ULONG HandleSize=40h, unsigned long[2] Unused=[0h, 0h], PVOID NextFree=*AB0000h, PVOID FirstHandle=*AB00h, PVOID ReservedMemory=*100000ABh, PVOID MaxHandle=*97EAC000h}, *=*AB0000h->struct {*Next=*AB0040h}) 000707 0000 0900 *** RelaunchUsingCreateProcess::CreateProcess failed: [Native: "\\ultimo\ultimo$\Bin\ultimo.exe" > "\??\UNC\ultimo\ultimo$\Bin\ultimo.exe"][CreateProcessW \\ultimo\ultimo$\Bin\ultimo.exe -> 0h] 000708 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 000709 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 000710 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 000711 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 000712 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 000713 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 000714 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 000715 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 000716 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 000717 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 000718 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 000719 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 000720 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 000721 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 000722 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 000723 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 000724 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 000725 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 000726 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 000727 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 000728 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 000729 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 000730 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 000731 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 000732 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 000733 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 000734 0904 0380 ????????????:7e3acb4a->????????????:77e4814e GetObjectType (HGDIOBJ h=e1010764h) 000735 0904 0380 ????????????:7e3acb4a<-????????????:77e4814e GetObjectType ->unsigned long=3h (HGDIOBJ h=e1010764h) 000736 0904 0380 ????????????:7e3acbce->????????????:77e490a3 GdiConvertAndCheckDC (== no prototype available ==) 000737 0904 0380 ????????????:7e3acbce<-????????????:77e490a3 GdiConvertAndCheckDC (== no prototype available ==) 000740 0904 0380 ????????????:7e3ab631->????????????:77e47cf1 GetViewportExtEx (HDC hdc=e1010764h, *lpsize=*D3F7A0h->struct {LONG cx=0h, LONG cy=0h}) 000741 0904 0380 ????????????:7e3ab631<-????????????:77e47cf1 GetViewportExtEx ->int=1h (HDC hdc=e1010764h, *lpsize=*D3F7A0h->struct {LONG cx=1h, LONG cy=1h}) 000742 0904 0380 ????????????:7e3ab645->????????????:77e47c79 GetWindowExtEx (HDC hdc=e1010764h, *lpsize=*D3F7A8h->struct {LONG cx=0h, LONG cy=0h}) 000743 0904 0380 ????????????:7e3ab645<-????????????:77e47c79 GetWindowExtEx ->int=1h (HDC hdc=e1010764h, *lpsize=*D3F7A8h->struct {LONG cx=1h, LONG cy=1h}) 000744 0904 0380 ????????????:7e3ab744->????????????:77e47e56 GetHFONT (== no prototype available ==) 000745 0904 0380 ????????????:7e3ab744<-????????????:77e47e56 GetHFONT (== no prototype available ==) 000746 0904 0380 ????????????:7e3ab6aa->????????????:77e47db9 GetTextMetricsW (HDC hdc=e1010764h, *lptm=*D3F764h->struct {LONG tmHeight=1h, LONG tmAscent=0h, LONG tmDescent=0h, LONG tmInternalLeading=D3F73Ch, LONG tmExternalLeading=ED000000h, LONG tmAveCharWidth=FB6F2D76h, LONG tmMaxCharWidth=D3B2A8h, LONG tmWeight=D3FB1Ch, LONG tmOverhang=100281C0h, LONG tmDigitizedAspectX=0h, LONG tmDigitizedAspectY=D3F7D0h, WCHAR tmFirstChar=L'\1A4Fh', WCHAR tmLastChar=L'\7FF9h', WCHAR tmDefaultChar=L'\BD2Eh', WCHAR tmBreakChar=L'\19h', BYTE tmItalic='\9Eh', BYTE tmUnderlined='\16h', BYTE tmStruckOut='\00h', BYTE tmPitchAndFamily='\00h', BYTE tmCharSet='J'}) 000747 0904 0380 ????????????:7e3ab6aa<-????????????:77e47db9 GetTextMetricsW ->int=1h (HDC hdc=e1010764h, *lptm=*D3F764h->struct {LONG tmHeight=10h, LONG tmAscent=Dh, LONG tmDescent=3h, LONG tmInternalLeading=3h, LONG tmExternalLeading=0h, LONG tmAveCharWidth=6h, LONG tmMaxCharWidth=22h, LONG tmWeight=2BCh, LONG tmOverhang=0h, LONG tmDigitizedAspectX=60h, LONG tmDigitizedAspectY=60h, WCHAR tmFirstChar=L' ', WCHAR tmLastChar=L'\FFFCh', WCHAR tmDefaultChar=L'\1Fh', WCHAR tmBreakChar=L' ', BYTE tmItalic='\00h', BYTE tmUnderlined='\00h', BYTE tmStruckOut='\00h', BYTE tmPitchAndFamily=''', BYTE tmCharSet='\00h'}) 000748 0904 0380 ????????????:7e3ab4d3->????????????:77e47786 CreateRectRgn (int x1=0h, int y1=0h, int x2=0h, int y2=0h) 000749 0904 0380 ????????????:7e3ab4d3<-????????????:77e47786 CreateRectRgn ->*=*810407D3h (int x1=0h, int y1=810407D3h, int x2=0h, int y2=0h) 000750 0904 0380 ????????????:7e3ab4e4->????????????:77e46ad6 GetClipRgn (HDC hdc=e1010764h, HRGN hrgn=810407d3h) 000751 0904 0380 ????????????:7e3ab4e4<-????????????:77e46ad6 GetClipRgn ->int=0h (HDC hdc=e1010764h, HRGN hrgn=810407d3h) 000752 0904 0380 ????????????:7e3ab4f0->????????????:77e46bfa DeleteObject (HGDIOBJ ho=810407d3h) 000753 0904 0380 ????????????:7e3ab4f0<-????????????:77e46bfa DeleteObject ->int=1h (HGDIOBJ ho=810407d3h) 000754 0904 0380 ????????????:7e3ab513->????????????:77e46a56 IntersectClipRect (HDC hdc=e1010764h, int left=38h, int top=Ch, int right=127h, int bottom=4Bh) 000755 0904 0380 ????????????:7e3ab513<-????????????:77e46a56 IntersectClipRect ->int=3h (HDC hdc=e1010764h, int left=38h, int top=Ch, int right=127h, int bottom=4Bh) 000756 0904 0380 ????????????:7e3aba83->????????????:77e469d0 GdiGetCodePage (== no prototype available ==) 000757 0904 0380 ????????????:7e3aba83<-????????????:77e469d0 GdiGetCodePage (== no prototype available ==) 000758 0904 0380 ????????????:7e3ab91a->????????????:77e46b0d GetTextExtentPointW (HDC hdc=e1010764h, LPCWSTR lpString=*D3F910h->L"Launching ultimo.exe", int c=14h, *lpsz=*D3F71Ch->struct {LONG cx=77E47DB9h, LONG cy=7E3AB6AAh}) 000759 0904 0380 ????????????:7e3ab91a<-????????????:77e46b0d GetTextExtentPointW ->int=1h (HDC hdc=e1010764h, LPCWSTR lpString=*D3F910h->L"Launching ultimo.exe", int c=14h, *lpsz=*D3F71Ch->struct {LONG cx=8Bh, LONG cy=10h}) 000760 0904 0380 ????????????:7e3ac422->????????????:77e47eac TextOutW (HDC hdc=e1010764h, int x=38h, int y=Ch, LPCWSTR lpString=*D3F910h->L"Launching ultimo.exe", int c=14h) 000761 0904 0380 ????????????:7e3ac422<-????????????:77e47eac TextOutW ->int=1h (HDC hdc=e1010764h, int x=38h, int y=Ch, LPCWSTR lpString=*D3F910h->L"Launching ultimo.exe", int c=14h) 000762 0904 0380 ????????????:7e3ab91a->????????????:77e46b0d GetTextExtentPointW (HDC hdc=e1010764h, LPCWSTR lpString=*D3F910h->L"Launching ultimo.exe", int c=14h, *lpsz=*D3F734h->struct {LONG cx=E1010764h, LONG cy=38h}) 000763 0904 0380 ????????????:7e3ab91a<-????????????:77e46b0d GetTextExtentPointW ->int=1h (HDC hdc=e1010764h, LPCWSTR lpString=*D3F910h->L"Launching ultimo.exe", int c=14h, *lpsz=*D3F734h->struct {LONG cx=8Bh, LONG cy=10h}) 000764 0904 0380 ????????????:7e3ab7d0->????????????:77e47874 ExtSelectClipRgn (HDC hdc=e1010764h, HRGN hrgn=0h, int mode=5h) 000765 0904 0380 ????????????:7e3ab7d0<-????????????:77e47874 ExtSelectClipRgn ->int=2h (HDC hdc=e1010764h, HRGN hrgn=0h, int mode=5h) 000768 0904 0380 ????????????:7e3ab631->????????????:77e47cf1 GetViewportExtEx (HDC hdc=e1010764h, *lpsize=*D3F7A0h->struct {LONG cx=0h, LONG cy=0h}) 000769 0904 0380 ????????????:7e3ab631<-????????????:77e47cf1 GetViewportExtEx ->int=1h (HDC hdc=e1010764h, *lpsize=*D3F7A0h->struct {LONG cx=1h, LONG cy=1h}) 000770 0904 0380 ????????????:7e3ab645->????????????:77e47c79 GetWindowExtEx (HDC hdc=e1010764h, *lpsize=*D3F7A8h->struct {LONG cx=0h, LONG cy=0h}) 000771 0904 0380 ????????????:7e3ab645<-????????????:77e47c79 GetWindowExtEx ->int=1h (HDC hdc=e1010764h, *lpsize=*D3F7A8h->struct {LONG cx=1h, LONG cy=1h}) 000772 0904 0380 ????????????:7e3ab744->????????????:77e47e56 GetHFONT (== no prototype available ==) 000773 0904 0380 ????????????:7e3ab744<-????????????:77e47e56 GetHFONT (== no prototype available ==) 000774 0904 0380 ????????????:7e3ab6aa->????????????:77e47db9 GetTextMetricsW (HDC hdc=e1010764h, *lptm=*D3F764h->struct {LONG tmHeight=FFFFFFFFh, LONG tmAscent=800h, LONG tmDescent=EDD3F798h, LONG tmInternalLeading=FB6F2D7Eh, LONG tmExternalLeading=ED000000h, LONG tmAveCharWidth=FB6F2D76h, LONG tmMaxCharWidth=D3B2A8h, LONG tmWeight=D3FB1Ch, LONG tmOverhang=100281C0h, LONG tmDigitizedAspectX=0h, LONG tmDigitizedAspectY=D3F7D0h, WCHAR tmFirstChar=L'\1A4Fh', WCHAR tmLastChar=L'\7FF9h', WCHAR tmDefaultChar=L'\BD2Eh', WCHAR tmBreakChar=L'\19h', BYTE tmItalic='\9Eh', BYTE tmUnderlined='\16h', BYTE tmStruckOut='\00h', BYTE tmPitchAndFamily='\00h', BYTE tmCharSet='J'}) 000775 0904 0380 ????????????:7e3ab6aa<-????????????:77e47db9 GetTextMetricsW ->int=1h (HDC hdc=e1010764h, *lptm=*D3F764h->struct {LONG tmHeight=Eh, LONG tmAscent=Bh, LONG tmDescent=3h, LONG tmInternalLeading=3h, LONG tmExternalLeading=0h, LONG tmAveCharWidth=5h, LONG tmMaxCharWidth=1Dh, LONG tmWeight=190h, LONG tmOverhang=0h, LONG tmDigitizedAspectX=60h, LONG tmDigitizedAspectY=60h, WCHAR tmFirstChar=L' ', WCHAR tmLastChar=L'\FFFCh', WCHAR tmDefaultChar=L'\1Fh', WCHAR tmBreakChar=L' ', BYTE tmItalic='\00h', BYTE tmUnderlined='\00h', BYTE tmStruckOut='\00h', BYTE tmPitchAndFamily=''', BYTE tmCharSet='\00h'}) 000776 0904 0380 ????????????:7e3ab4d3->????????????:77e47786 CreateRectRgn (int x1=0h, int y1=0h, int x2=0h, int y2=0h) 000777 0904 0380 ????????????:7e3ab4d3<-????????????:77e47786 CreateRectRgn ->*=*820407D3h (int x1=0h, int y1=820407D3h, int x2=0h, int y2=0h) 000778 0904 0380 ????????????:7e3ab4e4->????????????:77e46ad6 GetClipRgn (HDC hdc=e1010764h, HRGN hrgn=820407d3h) 000779 0904 0380 ????????????:7e3ab4e4<-????????????:77e46ad6 GetClipRgn ->int=0h (HDC hdc=e1010764h, HRGN hrgn=820407d3h) 000780 0904 0380 ????????????:7e3ab4f0->????????????:77e46bfa DeleteObject (HGDIOBJ ho=820407d3h) 000781 0904 0380 ????????????:7e3ab4f0<-????????????:77e46bfa DeleteObject ->int=1h (HGDIOBJ ho=820407d3h) 000782 0904 0380 ????????????:7e3ab513->????????????:77e46a56 IntersectClipRect (HDC hdc=e1010764h, int left=38h, int top=1Eh, int right=127h, int bottom=4Bh) 000783 0904 0380 ????????????:7e3ab513<-????????????:77e46a56 IntersectClipRect ->int=3h (HDC hdc=e1010764h, int left=38h, int top=1Eh, int right=127h, int bottom=4Bh) 000784 0904 0380 ????????????:7e3aba83->????????????:77e469d0 GdiGetCodePage (== no prototype available ==) 000785 0904 0380 ????????????:7e3aba83<-????????????:77e469d0 GdiGetCodePage (== no prototype available ==) 000786 0904 0380 ????????????:7e3ab91a->????????????:77e46b0d GetTextExtentPointW (HDC hdc=e1010764h, LPCWSTR lpString=*D3F990h->L"Licensed to LZR 4.7.2", int c=15h, *lpsz=*D3F71Ch->struct {LONG cx=77E47DB9h, LONG cy=7E3AB6AAh}) 000787 0904 0380 ????????????:7e3ab91a<-????????????:77e46b0d GetTextExtentPointW ->int=1h (HDC hdc=e1010764h, LPCWSTR lpString=*D3F990h->L"Licensed to LZR 4.7.2", int c=15h, *lpsz=*D3F71Ch->struct {LONG cx=6Ah, LONG cy=Eh}) 000788 0904 0380 ????????????:7e3ac422->????????????:77e47eac TextOutW (HDC hdc=e1010764h, int x=38h, int y=1Eh, LPCWSTR lpString=*D3F990h->L"Licensed to LZR 4.7.2", int c=15h) 000789 0904 0380 ????????????:7e3ac422<-????????????:77e47eac TextOutW ->int=1h (HDC hdc=e1010764h, int x=38h, int y=1Eh, LPCWSTR lpString=*D3F990h->L"Licensed to LZR 4.7.2", int c=15h) 000790 0904 0380 ????????????:7e3ab91a->????????????:77e46b0d GetTextExtentPointW (HDC hdc=e1010764h, LPCWSTR lpString=*D3F990h->L"Licensed to LZR 4.7.2", int c=15h, *lpsz=*D3F734h->struct {LONG cx=E1010764h, LONG cy=38h}) 000791 0904 0380 ????????????:7e3ab91a<-????????????:77e46b0d GetTextExtentPointW ->int=1h (HDC hdc=e1010764h, LPCWSTR lpString=*D3F990h->L"Licensed to LZR 4.7.2", int c=15h, *lpsz=*D3F734h->struct {LONG cx=6Ah, LONG cy=Eh}) 000792 0904 0380 ????????????:7e3ab7d0->????????????:77e47874 ExtSelectClipRgn (HDC hdc=e1010764h, HRGN hrgn=0h, int mode=5h) 000793 0904 0380 ????????????:7e3ab7d0<-????????????:77e47874 ExtSelectClipRgn ->int=2h (HDC hdc=e1010764h, HRGN hrgn=0h, int mode=5h) 000794 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 000795 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 000796 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 000797 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 000798 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 000799 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 000800 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 000801 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 000802 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 000803 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 000804 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 000805 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 000806 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 000807 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 000808 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 000809 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 000810 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 000811 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 000812 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 000813 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 000814 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 000815 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 000816 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 000817 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 000818 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 000819 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 000820 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 000821 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 000822 0904 0380 ????????????:7e3acb4a->????????????:77e4814e GetObjectType (HGDIOBJ h=e1010764h) 000823 0904 0380 ????????????:7e3acb4a<-????????????:77e4814e GetObjectType ->unsigned long=3h (HGDIOBJ h=e1010764h) 000824 0904 0380 ????????????:7e3acbce->????????????:77e490a3 GdiConvertAndCheckDC (== no prototype available ==) 000825 0904 0380 ????????????:7e3acbce<-????????????:77e490a3 GdiConvertAndCheckDC (== no prototype available ==) 000828 0904 0380 ????????????:7e3ab631->????????????:77e47cf1 GetViewportExtEx (HDC hdc=e1010764h, *lpsize=*D3F7A0h->struct {LONG cx=0h, LONG cy=0h}) 000829 0904 0380 ????????????:7e3ab631<-????????????:77e47cf1 GetViewportExtEx ->int=1h (HDC hdc=e1010764h, *lpsize=*D3F7A0h->struct {LONG cx=1h, LONG cy=1h}) 000830 0904 0380 ????????????:7e3ab645->????????????:77e47c79 GetWindowExtEx (HDC hdc=e1010764h, *lpsize=*D3F7A8h->struct {LONG cx=0h, LONG cy=0h}) 000831 0904 0380 ????????????:7e3ab645<-????????????:77e47c79 GetWindowExtEx ->int=1h (HDC hdc=e1010764h, *lpsize=*D3F7A8h->struct {LONG cx=1h, LONG cy=1h}) 000832 0904 0380 ????????????:7e3ab744->????????????:77e47e56 GetHFONT (== no prototype available ==) 000833 0904 0380 ????????????:7e3ab744<-????????????:77e47e56 GetHFONT (== no prototype available ==) 000834 0904 0380 ????????????:7e3ab6aa->????????????:77e47db9 GetTextMetricsW (HDC hdc=e1010764h, *lptm=*D3F764h->struct {LONG tmHeight=1h, LONG tmAscent=0h, LONG tmDescent=0h, LONG tmInternalLeading=D3F73Ch, LONG tmExternalLeading=ED000000h, LONG tmAveCharWidth=FB6F2D76h, LONG tmMaxCharWidth=D3B2A8h, LONG tmWeight=D3FB1Ch, LONG tmOverhang=100281C0h, LONG tmDigitizedAspectX=0h, LONG tmDigitizedAspectY=D3F7D0h, WCHAR tmFirstChar=L'\1A4Fh', WCHAR tmLastChar=L'\7FF9h', WCHAR tmDefaultChar=L'\BD2Eh', WCHAR tmBreakChar=L'\19h', BYTE tmItalic='\9Eh', BYTE tmUnderlined='\16h', BYTE tmStruckOut='\00h', BYTE tmPitchAndFamily='\00h', BYTE tmCharSet='J'}) 000835 0904 0380 ????????????:7e3ab6aa<-????????????:77e47db9 GetTextMetricsW ->int=1h (HDC hdc=e1010764h, *lptm=*D3F764h->struct {LONG tmHeight=10h, LONG tmAscent=Dh, LONG tmDescent=3h, LONG tmInternalLeading=3h, LONG tmExternalLeading=0h, LONG tmAveCharWidth=6h, LONG tmMaxCharWidth=22h, LONG tmWeight=2BCh, LONG tmOverhang=0h, LONG tmDigitizedAspectX=60h, LONG tmDigitizedAspectY=60h, WCHAR tmFirstChar=L' ', WCHAR tmLastChar=L'\FFFCh', WCHAR tmDefaultChar=L'\1Fh', WCHAR tmBreakChar=L' ', BYTE tmItalic='\00h', BYTE tmUnderlined='\00h', BYTE tmStruckOut='\00h', BYTE tmPitchAndFamily=''', BYTE tmCharSet='\00h'}) 000836 0904 0380 ????????????:7e3ab4d3->????????????:77e47786 CreateRectRgn (int x1=0h, int y1=0h, int x2=0h, int y2=0h) 000837 0904 0380 ????????????:7e3ab4d3<-????????????:77e47786 CreateRectRgn ->*=*830407D3h (int x1=0h, int y1=830407D3h, int x2=0h, int y2=0h) 000838 0904 0380 ????????????:7e3ab4e4->????????????:77e46ad6 GetClipRgn (HDC hdc=e1010764h, HRGN hrgn=830407d3h) 000839 0904 0380 ????????????:7e3ab4e4<-????????????:77e46ad6 GetClipRgn ->int=0h (HDC hdc=e1010764h, HRGN hrgn=830407d3h) 000840 0904 0380 ????????????:7e3ab4f0->????????????:77e46bfa DeleteObject (HGDIOBJ ho=830407d3h) 000841 0904 0380 ????????????:7e3ab4f0<-????????????:77e46bfa DeleteObject ->int=1h (HGDIOBJ ho=830407d3h) 000842 0904 0380 ????????????:7e3ab513->????????????:77e46a56 IntersectClipRect (HDC hdc=e1010764h, int left=38h, int top=Ch, int right=127h, int bottom=4Bh) 000843 0904 0380 ????????????:7e3ab513<-????????????:77e46a56 IntersectClipRect ->int=3h (HDC hdc=e1010764h, int left=38h, int top=Ch, int right=127h, int bottom=4Bh) 000844 0904 0380 ????????????:7e3aba83->????????????:77e469d0 GdiGetCodePage (== no prototype available ==) 000845 0904 0380 ????????????:7e3aba83<-????????????:77e469d0 GdiGetCodePage (== no prototype available ==) 000846 0904 0380 ????????????:7e3ab91a->????????????:77e46b0d GetTextExtentPointW (HDC hdc=e1010764h, LPCWSTR lpString=*D3F910h->L"Launching ultimo.exe", int c=14h, *lpsz=*D3F71Ch->struct {LONG cx=77E47DB9h, LONG cy=7E3AB6AAh}) 000847 0904 0380 ????????????:7e3ab91a<-????????????:77e46b0d GetTextExtentPointW ->int=1h (HDC hdc=e1010764h, LPCWSTR lpString=*D3F910h->L"Launching ultimo.exe", int c=14h, *lpsz=*D3F71Ch->struct {LONG cx=8Bh, LONG cy=10h}) 000848 0904 0380 ????????????:7e3ac422->????????????:77e47eac TextOutW (HDC hdc=e1010764h, int x=38h, int y=Ch, LPCWSTR lpString=*D3F910h->L"Launching ultimo.exe", int c=14h) 000849 0904 0380 ????????????:7e3ac422<-????????????:77e47eac TextOutW ->int=1h (HDC hdc=e1010764h, int x=38h, int y=Ch, LPCWSTR lpString=*D3F910h->L"Launching ultimo.exe", int c=14h) 000850 0904 0380 ????????????:7e3ab91a->????????????:77e46b0d GetTextExtentPointW (HDC hdc=e1010764h, LPCWSTR lpString=*D3F910h->L"Launching ultimo.exe", int c=14h, *lpsz=*D3F734h->struct {LONG cx=E1010764h, LONG cy=38h}) 000851 0904 0380 ????????????:7e3ab91a<-????????????:77e46b0d GetTextExtentPointW ->int=1h (HDC hdc=e1010764h, LPCWSTR lpString=*D3F910h->L"Launching ultimo.exe", int c=14h, *lpsz=*D3F734h->struct {LONG cx=8Bh, LONG cy=10h}) 000852 0904 0380 ????????????:7e3ab7d0->????????????:77e47874 ExtSelectClipRgn (HDC hdc=e1010764h, HRGN hrgn=0h, int mode=5h) 000853 0904 0380 ????????????:7e3ab7d0<-????????????:77e47874 ExtSelectClipRgn ->int=2h (HDC hdc=e1010764h, HRGN hrgn=0h, int mode=5h) 000856 0904 0380 ????????????:7e3ab631->????????????:77e47cf1 GetViewportExtEx (HDC hdc=e1010764h, *lpsize=*D3F7A0h->struct {LONG cx=0h, LONG cy=0h}) 000857 0904 0380 ????????????:7e3ab631<-????????????:77e47cf1 GetViewportExtEx ->int=1h (HDC hdc=e1010764h, *lpsize=*D3F7A0h->struct {LONG cx=1h, LONG cy=1h}) 000858 0904 0380 ????????????:7e3ab645->????????????:77e47c79 GetWindowExtEx (HDC hdc=e1010764h, *lpsize=*D3F7A8h->struct {LONG cx=0h, LONG cy=0h}) 000859 0904 0380 ????????????:7e3ab645<-????????????:77e47c79 GetWindowExtEx ->int=1h (HDC hdc=e1010764h, *lpsize=*D3F7A8h->struct {LONG cx=1h, LONG cy=1h}) 000860 0904 0380 ????????????:7e3ab744->????????????:77e47e56 GetHFONT (== no prototype available ==) 000861 0904 0380 ????????????:7e3ab744<-????????????:77e47e56 GetHFONT (== no prototype available ==) 000862 0904 0380 ????????????:7e3ab6aa->????????????:77e47db9 GetTextMetricsW (HDC hdc=e1010764h, *lptm=*D3F764h->struct {LONG tmHeight=FFFFFFFFh, LONG tmAscent=800h, LONG tmDescent=EDD3F798h, LONG tmInternalLeading=FB6F2D7Eh, LONG tmExternalLeading=ED000000h, LONG tmAveCharWidth=FB6F2D76h, LONG tmMaxCharWidth=D3B2A8h, LONG tmWeight=D3FB1Ch, LONG tmOverhang=100281C0h, LONG tmDigitizedAspectX=0h, LONG tmDigitizedAspectY=D3F7D0h, WCHAR tmFirstChar=L'\1A4Fh', WCHAR tmLastChar=L'\7FF9h', WCHAR tmDefaultChar=L'\BD2Eh', WCHAR tmBreakChar=L'\19h', BYTE tmItalic='\9Eh', BYTE tmUnderlined='\16h', BYTE tmStruckOut='\00h', BYTE tmPitchAndFamily='\00h', BYTE tmCharSet='J'}) 000863 0904 0380 ????????????:7e3ab6aa<-????????????:77e47db9 GetTextMetricsW ->int=1h (HDC hdc=e1010764h, *lptm=*D3F764h->struct {LONG tmHeight=Eh, LONG tmAscent=Bh, LONG tmDescent=3h, LONG tmInternalLeading=3h, LONG tmExternalLeading=0h, LONG tmAveCharWidth=5h, LONG tmMaxCharWidth=1Dh, LONG tmWeight=190h, LONG tmOverhang=0h, LONG tmDigitizedAspectX=60h, LONG tmDigitizedAspectY=60h, WCHAR tmFirstChar=L' ', WCHAR tmLastChar=L'\FFFCh', WCHAR tmDefaultChar=L'\1Fh', WCHAR tmBreakChar=L' ', BYTE tmItalic='\00h', BYTE tmUnderlined='\00h', BYTE tmStruckOut='\00h', BYTE tmPitchAndFamily=''', BYTE tmCharSet='\00h'}) 000864 0904 0380 ????????????:7e3ab4d3->????????????:77e47786 CreateRectRgn (int x1=0h, int y1=0h, int x2=0h, int y2=0h) 000865 0904 0380 ????????????:7e3ab4d3<-????????????:77e47786 CreateRectRgn ->*=*840407D3h (int x1=0h, int y1=840407D3h, int x2=0h, int y2=0h) 000866 0904 0380 ????????????:7e3ab4e4->????????????:77e46ad6 GetClipRgn (HDC hdc=e1010764h, HRGN hrgn=840407d3h) 000867 0904 0380 ????????????:7e3ab4e4<-????????????:77e46ad6 GetClipRgn ->int=0h (HDC hdc=e1010764h, HRGN hrgn=840407d3h) 000868 0904 0380 ????????????:7e3ab4f0->????????????:77e46bfa DeleteObject (HGDIOBJ ho=840407d3h) 000869 0904 0380 ????????????:7e3ab4f0<-????????????:77e46bfa DeleteObject ->int=1h (HGDIOBJ ho=840407d3h) 000870 0904 0380 ????????????:7e3ab513->????????????:77e46a56 IntersectClipRect (HDC hdc=e1010764h, int left=38h, int top=1Eh, int right=127h, int bottom=4Bh) 000871 0904 0380 ????????????:7e3ab513<-????????????:77e46a56 IntersectClipRect ->int=3h (HDC hdc=e1010764h, int left=38h, int top=1Eh, int right=127h, int bottom=4Bh) 000872 0904 0380 ????????????:7e3aba83->????????????:77e469d0 GdiGetCodePage (== no prototype available ==) 000873 0904 0380 ????????????:7e3aba83<-????????????:77e469d0 GdiGetCodePage (== no prototype available ==) 000874 0904 0380 ????????????:7e3ab91a->????????????:77e46b0d GetTextExtentPointW (HDC hdc=e1010764h, LPCWSTR lpString=*D3F990h->L"Licensed to LZR 4.7.2", int c=15h, *lpsz=*D3F71Ch->struct {LONG cx=77E47DB9h, LONG cy=7E3AB6AAh}) 000875 0904 0380 ????????????:7e3ab91a<-????????????:77e46b0d GetTextExtentPointW ->int=1h (HDC hdc=e1010764h, LPCWSTR lpString=*D3F990h->L"Licensed to LZR 4.7.2", int c=15h, *lpsz=*D3F71Ch->struct {LONG cx=6Ah, LONG cy=Eh}) 000876 0904 0380 ????????????:7e3ac422->????????????:77e47eac TextOutW (HDC hdc=e1010764h, int x=38h, int y=1Eh, LPCWSTR lpString=*D3F990h->L"Licensed to LZR 4.7.2", int c=15h) 000877 0904 0380 ????????????:7e3ac422<-????????????:77e47eac TextOutW ->int=1h (HDC hdc=e1010764h, int x=38h, int y=1Eh, LPCWSTR lpString=*D3F990h->L"Licensed to LZR 4.7.2", int c=15h) 000878 0904 0380 ????????????:7e3ab91a->????????????:77e46b0d GetTextExtentPointW (HDC hdc=e1010764h, LPCWSTR lpString=*D3F990h->L"Licensed to LZR 4.7.2", int c=15h, *lpsz=*D3F734h->struct {LONG cx=E1010764h, LONG cy=38h}) 000879 0904 0380 ????????????:7e3ab91a<-????????????:77e46b0d GetTextExtentPointW ->int=1h (HDC hdc=e1010764h, LPCWSTR lpString=*D3F990h->L"Licensed to LZR 4.7.2", int c=15h, *lpsz=*D3F734h->struct {LONG cx=6Ah, LONG cy=Eh}) 000880 0904 0380 ????????????:7e3ab7d0->????????????:77e47874 ExtSelectClipRgn (HDC hdc=e1010764h, HRGN hrgn=0h, int mode=5h) 000881 0904 0380 ????????????:7e3ab7d0<-????????????:77e47874 ExtSelectClipRgn ->int=2h (HDC hdc=e1010764h, HRGN hrgn=0h, int mode=5h) 000882 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 000883 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 000884 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 000885 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 000886 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 000887 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 000888 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 000889 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 000890 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 000891 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 000892 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 000893 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 000894 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 000895 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 000896 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 000897 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 000898 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 000899 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 000900 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 000901 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 000902 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 000903 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 000904 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 000905 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 000906 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 000907 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 000908 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 000909 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 000910 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 000911 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 000912 0904 0380 ????????????:7e3acb4a->????????????:77e4814e GetObjectType (HGDIOBJ h=e1010764h) 000913 0904 0380 ????????????:7e3acb4a<-????????????:77e4814e GetObjectType ->unsigned long=3h (HGDIOBJ h=e1010764h) 000914 0904 0380 ????????????:7e3acbce->????????????:77e490a3 GdiConvertAndCheckDC (== no prototype available ==) 000915 0904 0380 ????????????:7e3acbce<-????????????:77e490a3 GdiConvertAndCheckDC (== no prototype available ==) 000918 0904 0380 ????????????:7e3ab631->????????????:77e47cf1 GetViewportExtEx (HDC hdc=e1010764h, *lpsize=*D3F668h->struct {LONG cx=0h, LONG cy=0h}) 000919 0904 0380 ????????????:7e3ab631<-????????????:77e47cf1 GetViewportExtEx ->int=1h (HDC hdc=e1010764h, *lpsize=*D3F668h->struct {LONG cx=1h, LONG cy=1h}) 000920 0904 0380 ????????????:7e3ab645->????????????:77e47c79 GetWindowExtEx (HDC hdc=e1010764h, *lpsize=*D3F670h->struct {LONG cx=0h, LONG cy=0h}) 000921 0904 0380 ????????????:7e3ab645<-????????????:77e47c79 GetWindowExtEx ->int=1h (HDC hdc=e1010764h, *lpsize=*D3F670h->struct {LONG cx=1h, LONG cy=1h}) 000922 0904 0380 ????????????:7e3ab744->????????????:77e47e56 GetHFONT (== no prototype available ==) 000923 0904 0380 ????????????:7e3ab744<-????????????:77e47e56 GetHFONT (== no prototype available ==) 000924 0904 0380 ????????????:7e3ab6aa->????????????:77e47db9 GetTextMetricsW (HDC hdc=e1010764h, *lptm=*D3F62Ch->struct {LONG tmHeight=7E3C048Fh, LONG tmAscent=7E3A8EB0h, LONG tmDescent=FFFFFFFFh, LONG tmInternalLeading=7E3A8EABh, LONG tmExternalLeading=ED000000h, LONG tmAveCharWidth=FB6F2CAEh, LONG tmMaxCharWidth=D3B170h, LONG tmWeight=D3F9E4h, LONG tmOverhang=100281C0h, LONG tmDigitizedAspectX=0h, LONG tmDigitizedAspectY=D3F698h, WCHAR tmFirstChar=L'\1A4Fh', WCHAR tmLastChar=L'\7FF9h', WCHAR tmDefaultChar=L'\BD2Eh', WCHAR tmBreakChar=L'\19h', BYTE tmItalic='\9Eh', BYTE tmUnderlined='\16h', BYTE tmStruckOut='\00h', BYTE tmPitchAndFamily='\00h', BYTE tmCharSet='J'}) 000925 0904 0380 ????????????:7e3ab6aa<-????????????:77e47db9 GetTextMetricsW ->int=1h (HDC hdc=e1010764h, *lptm=*D3F62Ch->struct {LONG tmHeight=10h, LONG tmAscent=Dh, LONG tmDescent=3h, LONG tmInternalLeading=3h, LONG tmExternalLeading=0h, LONG tmAveCharWidth=6h, LONG tmMaxCharWidth=22h, LONG tmWeight=2BCh, LONG tmOverhang=0h, LONG tmDigitizedAspectX=60h, LONG tmDigitizedAspectY=60h, WCHAR tmFirstChar=L' ', WCHAR tmLastChar=L'\FFFCh', WCHAR tmDefaultChar=L'\1Fh', WCHAR tmBreakChar=L' ', BYTE tmItalic='\00h', BYTE tmUnderlined='\00h', BYTE tmStruckOut='\00h', BYTE tmPitchAndFamily=''', BYTE tmCharSet='\00h'}) 000926 0904 0380 ????????????:7e3ab4d3->????????????:77e47786 CreateRectRgn (int x1=0h, int y1=0h, int x2=0h, int y2=0h) 000927 0904 0380 ????????????:7e3ab4d3<-????????????:77e47786 CreateRectRgn ->*=*850407D3h (int x1=0h, int y1=850407D3h, int x2=0h, int y2=0h) 000928 0904 0380 ????????????:7e3ab4e4->????????????:77e46ad6 GetClipRgn (HDC hdc=e1010764h, HRGN hrgn=850407d3h) 000929 0904 0380 ????????????:7e3ab4e4<-????????????:77e46ad6 GetClipRgn ->int=0h (HDC hdc=e1010764h, HRGN hrgn=850407d3h) 000930 0904 0380 ????????????:7e3ab4f0->????????????:77e46bfa DeleteObject (HGDIOBJ ho=850407d3h) 000931 0904 0380 ????????????:7e3ab4f0<-????????????:77e46bfa DeleteObject ->int=1h (HGDIOBJ ho=850407d3h) 000932 0904 0380 ????????????:7e3ab513->????????????:77e46a56 IntersectClipRect (HDC hdc=e1010764h, int left=38h, int top=Ch, int right=127h, int bottom=4Bh) 000933 0904 0380 ????????????:7e3ab513<-????????????:77e46a56 IntersectClipRect ->int=3h (HDC hdc=e1010764h, int left=38h, int top=Ch, int right=127h, int bottom=4Bh) 000934 0904 0380 ????????????:7e3aba83->????????????:77e469d0 GdiGetCodePage (== no prototype available ==) 000935 0904 0380 ????????????:7e3aba83<-????????????:77e469d0 GdiGetCodePage (== no prototype available ==) 000936 0904 0380 ????????????:7e3ab91a->????????????:77e46b0d GetTextExtentPointW (HDC hdc=e1010764h, LPCWSTR lpString=*D3F7D8h->L"Launching ultimo.exe", int c=14h, *lpsz=*D3F5E4h->struct {LONG cx=77E47DB9h, LONG cy=7E3AB6AAh}) 000937 0904 0380 ????????????:7e3ab91a<-????????????:77e46b0d GetTextExtentPointW ->int=1h (HDC hdc=e1010764h, LPCWSTR lpString=*D3F7D8h->L"Launching ultimo.exe", int c=14h, *lpsz=*D3F5E4h->struct {LONG cx=8Bh, LONG cy=10h}) 000938 0904 0380 ????????????:7e3ac422->????????????:77e47eac TextOutW (HDC hdc=e1010764h, int x=38h, int y=Ch, LPCWSTR lpString=*D3F7D8h->L"Launching ultimo.exe", int c=14h) 000939 0904 0380 ????????????:7e3ac422<-????????????:77e47eac TextOutW ->int=1h (HDC hdc=e1010764h, int x=38h, int y=Ch, LPCWSTR lpString=*D3F7D8h->L"Launching ultimo.exe", int c=14h) 000940 0904 0380 ????????????:7e3ab91a->????????????:77e46b0d GetTextExtentPointW (HDC hdc=e1010764h, LPCWSTR lpString=*D3F7D8h->L"Launching ultimo.exe", int c=14h, *lpsz=*D3F5FCh->struct {LONG cx=E1010764h, LONG cy=38h}) 000941 0904 0380 ????????????:7e3ab91a<-????????????:77e46b0d GetTextExtentPointW ->int=1h (HDC hdc=e1010764h, LPCWSTR lpString=*D3F7D8h->L"Launching ultimo.exe", int c=14h, *lpsz=*D3F5FCh->struct {LONG cx=8Bh, LONG cy=10h}) 000942 0904 0380 ????????????:7e3ab7d0->????????????:77e47874 ExtSelectClipRgn (HDC hdc=e1010764h, HRGN hrgn=0h, int mode=5h) 000943 0904 0380 ????????????:7e3ab7d0<-????????????:77e47874 ExtSelectClipRgn ->int=2h (HDC hdc=e1010764h, HRGN hrgn=0h, int mode=5h) 000946 0904 0380 ????????????:7e3ab631->????????????:77e47cf1 GetViewportExtEx (HDC hdc=e1010764h, *lpsize=*D3F668h->struct {LONG cx=0h, LONG cy=0h}) 000947 0904 0380 ????????????:7e3ab631<-????????????:77e47cf1 GetViewportExtEx ->int=1h (HDC hdc=e1010764h, *lpsize=*D3F668h->struct {LONG cx=1h, LONG cy=1h}) 000948 0904 0380 ????????????:7e3ab645->????????????:77e47c79 GetWindowExtEx (HDC hdc=e1010764h, *lpsize=*D3F670h->struct {LONG cx=0h, LONG cy=0h}) 000949 0904 0380 ????????????:7e3ab645<-????????????:77e47c79 GetWindowExtEx ->int=1h (HDC hdc=e1010764h, *lpsize=*D3F670h->struct {LONG cx=1h, LONG cy=1h}) 000950 0904 0380 ????????????:7e3ab744->????????????:77e47e56 GetHFONT (== no prototype available ==) 000951 0904 0380 ????????????:7e3ab744<-????????????:77e47e56 GetHFONT (== no prototype available ==) 000952 0904 0380 ????????????:7e3ab6aa->????????????:77e47db9 GetTextMetricsW (HDC hdc=e1010764h, *lptm=*D3F62Ch->struct {LONG tmHeight=FFFFFFFFh, LONG tmAscent=800h, LONG tmDescent=EDD3F660h, LONG tmInternalLeading=FB6F2CB6h, LONG tmExternalLeading=ED000000h, LONG tmAveCharWidth=FB6F2CAEh, LONG tmMaxCharWidth=D3B170h, LONG tmWeight=D3F9E4h, LONG tmOverhang=100281C0h, LONG tmDigitizedAspectX=0h, LONG tmDigitizedAspectY=D3F698h, WCHAR tmFirstChar=L'\1A4Fh', WCHAR tmLastChar=L'\7FF9h', WCHAR tmDefaultChar=L'\BD2Eh', WCHAR tmBreakChar=L'\19h', BYTE tmItalic='\9Eh', BYTE tmUnderlined='\16h', BYTE tmStruckOut='\00h', BYTE tmPitchAndFamily='\00h', BYTE tmCharSet='J'}) 000953 0904 0380 ????????????:7e3ab6aa<-????????????:77e47db9 GetTextMetricsW ->int=1h (HDC hdc=e1010764h, *lptm=*D3F62Ch->struct {LONG tmHeight=Eh, LONG tmAscent=Bh, LONG tmDescent=3h, LONG tmInternalLeading=3h, LONG tmExternalLeading=0h, LONG tmAveCharWidth=5h, LONG tmMaxCharWidth=1Dh, LONG tmWeight=190h, LONG tmOverhang=0h, LONG tmDigitizedAspectX=60h, LONG tmDigitizedAspectY=60h, WCHAR tmFirstChar=L' ', WCHAR tmLastChar=L'\FFFCh', WCHAR tmDefaultChar=L'\1Fh', WCHAR tmBreakChar=L' ', BYTE tmItalic='\00h', BYTE tmUnderlined='\00h', BYTE tmStruckOut='\00h', BYTE tmPitchAndFamily=''', BYTE tmCharSet='\00h'}) 000954 0904 0380 ????????????:7e3ab4d3->????????????:77e47786 CreateRectRgn (int x1=0h, int y1=0h, int x2=0h, int y2=0h) 000955 0904 0380 ????????????:7e3ab4d3<-????????????:77e47786 CreateRectRgn ->*=*860407D3h (int x1=0h, int y1=860407D3h, int x2=0h, int y2=0h) 000956 0904 0380 ????????????:7e3ab4e4->????????????:77e46ad6 GetClipRgn (HDC hdc=e1010764h, HRGN hrgn=860407d3h) 000957 0904 0380 ????????????:7e3ab4e4<-????????????:77e46ad6 GetClipRgn ->int=0h (HDC hdc=e1010764h, HRGN hrgn=860407d3h) 000958 0904 0380 ????????????:7e3ab4f0->????????????:77e46bfa DeleteObject (HGDIOBJ ho=860407d3h) 000959 0904 0380 ????????????:7e3ab4f0<-????????????:77e46bfa DeleteObject ->int=1h (HGDIOBJ ho=860407d3h) 000960 0904 0380 ????????????:7e3ab513->????????????:77e46a56 IntersectClipRect (HDC hdc=e1010764h, int left=38h, int top=1Eh, int right=127h, int bottom=4Bh) 000961 0904 0380 ????????????:7e3ab513<-????????????:77e46a56 IntersectClipRect ->int=3h (HDC hdc=e1010764h, int left=38h, int top=1Eh, int right=127h, int bottom=4Bh) 000962 0904 0380 ????????????:7e3aba83->????????????:77e469d0 GdiGetCodePage (== no prototype available ==) 000963 0904 0380 ????????????:7e3aba83<-????????????:77e469d0 GdiGetCodePage (== no prototype available ==) 000964 0904 0380 ????????????:7e3ab91a->????????????:77e46b0d GetTextExtentPointW (HDC hdc=e1010764h, LPCWSTR lpString=*D3F858h->L"Licensed to LZR 4.7.2", int c=15h, *lpsz=*D3F5E4h->struct {LONG cx=77E47DB9h, LONG cy=7E3AB6AAh}) 000965 0904 0380 ????????????:7e3ab91a<-????????????:77e46b0d GetTextExtentPointW ->int=1h (HDC hdc=e1010764h, LPCWSTR lpString=*D3F858h->L"Licensed to LZR 4.7.2", int c=15h, *lpsz=*D3F5E4h->struct {LONG cx=6Ah, LONG cy=Eh}) 000966 0904 0380 ????????????:7e3ac422->????????????:77e47eac TextOutW (HDC hdc=e1010764h, int x=38h, int y=1Eh, LPCWSTR lpString=*D3F858h->L"Licensed to LZR 4.7.2", int c=15h) 000967 0904 0380 ????????????:7e3ac422<-????????????:77e47eac TextOutW ->int=1h (HDC hdc=e1010764h, int x=38h, int y=1Eh, LPCWSTR lpString=*D3F858h->L"Licensed to LZR 4.7.2", int c=15h) 000968 0904 0380 ????????????:7e3ab91a->????????????:77e46b0d GetTextExtentPointW (HDC hdc=e1010764h, LPCWSTR lpString=*D3F858h->L"Licensed to LZR 4.7.2", int c=15h, *lpsz=*D3F5FCh->struct {LONG cx=E1010764h, LONG cy=38h}) 000969 0904 0380 ????????????:7e3ab91a<-????????????:77e46b0d GetTextExtentPointW ->int=1h (HDC hdc=e1010764h, LPCWSTR lpString=*D3F858h->L"Licensed to LZR 4.7.2", int c=15h, *lpsz=*D3F5FCh->struct {LONG cx=6Ah, LONG cy=Eh}) 000970 0904 0380 ????????????:7e3ab7d0->????????????:77e47874 ExtSelectClipRgn (HDC hdc=e1010764h, HRGN hrgn=0h, int mode=5h) 000971 0904 0380 ????????????:7e3ab7d0<-????????????:77e47874 ExtSelectClipRgn ->int=2h (HDC hdc=e1010764h, HRGN hrgn=0h, int mode=5h) 000972 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 000973 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 000974 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 000975 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 000976 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 000977 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 000978 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 000979 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 000980 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 000981 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 000982 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 000983 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 000984 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 000985 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 000986 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 000987 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 000988 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 000989 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 000990 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 000991 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 000992 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 000993 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 000994 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 000995 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 000996 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 000997 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 000998 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 000999 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001000 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001001 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001002 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001003 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001004 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001005 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001006 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001007 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001008 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001009 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001010 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001011 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001012 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001013 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001014 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001015 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001016 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001017 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001018 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001019 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001020 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001021 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001022 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001023 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001024 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001025 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001026 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001027 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001028 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001029 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001030 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001031 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001032 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001033 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001034 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001035 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001036 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001037 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001038 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001039 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001040 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001041 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001042 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001043 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001044 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001045 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001046 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001047 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001048 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001049 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001050 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001051 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001052 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001053 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001054 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001055 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001056 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001057 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001058 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001059 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001060 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001061 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001062 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001063 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001064 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001065 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001066 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001067 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001068 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001069 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001070 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001071 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001072 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001073 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001074 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001075 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001076 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001077 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001078 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001079 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001080 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001081 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001082 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001083 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001084 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001085 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001086 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001087 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001088 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001089 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001090 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001091 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001092 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001093 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001094 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001095 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001096 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001097 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001098 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001099 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001100 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001101 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001102 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001103 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001104 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001105 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001106 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001107 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001108 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001109 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001110 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001111 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001112 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001113 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001114 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001115 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001116 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001117 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001118 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001119 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001120 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001121 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001122 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001123 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001124 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001125 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001126 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001127 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001128 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001129 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001130 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001131 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001132 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001133 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001134 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001135 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001136 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001137 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001138 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001139 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001140 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001141 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001142 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001143 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001144 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001145 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001146 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001147 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001148 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001149 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001150 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001151 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001152 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001153 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001154 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001155 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001156 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001157 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001158 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001159 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001160 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001161 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001162 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001163 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001164 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001165 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001166 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001167 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001168 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001169 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001170 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001171 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001172 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001173 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001174 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001175 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001176 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001177 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001178 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001179 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001180 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001181 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001182 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001183 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001184 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001185 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001186 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001187 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001188 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001189 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001190 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001191 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001192 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001193 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001194 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001195 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001196 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001197 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001198 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001199 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001200 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001201 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001202 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001203 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001204 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001205 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001206 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001207 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001208 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001209 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001210 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001211 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001212 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001213 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001214 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001215 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001216 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001217 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001218 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001219 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001220 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001221 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001222 0904 0380 ????????????:7e3acb4a->????????????:77e4814e GetObjectType (HGDIOBJ h=401081ch) 001223 0904 0380 ????????????:7e3acb4a<-????????????:77e4814e GetObjectType ->unsigned long=3h (HGDIOBJ h=401081ch) 001224 0904 0380 ????????????:7e3acbce->????????????:77e490a3 GdiConvertAndCheckDC (== no prototype available ==) 001225 0904 0380 ????????????:7e3acbce<-????????????:77e490a3 GdiConvertAndCheckDC (== no prototype available ==) 001228 0904 0380 ????????????:7e3ab631->????????????:77e47cf1 GetViewportExtEx (HDC hdc=401081ch, *lpsize=*D3F7A0h->struct {LONG cx=0h, LONG cy=0h}) 001229 0904 0380 ????????????:7e3ab631<-????????????:77e47cf1 GetViewportExtEx ->int=1h (HDC hdc=401081ch, *lpsize=*D3F7A0h->struct {LONG cx=1h, LONG cy=1h}) 001230 0904 0380 ????????????:7e3ab645->????????????:77e47c79 GetWindowExtEx (HDC hdc=401081ch, *lpsize=*D3F7A8h->struct {LONG cx=0h, LONG cy=0h}) 001231 0904 0380 ????????????:7e3ab645<-????????????:77e47c79 GetWindowExtEx ->int=1h (HDC hdc=401081ch, *lpsize=*D3F7A8h->struct {LONG cx=1h, LONG cy=1h}) 001232 0904 0380 ????????????:7e3ab744->????????????:77e47e56 GetHFONT (== no prototype available ==) 001233 0904 0380 ????????????:7e3ab744<-????????????:77e47e56 GetHFONT (== no prototype available ==) 001234 0904 0380 ????????????:7e3ab6aa->????????????:77e47db9 GetTextMetricsW (HDC hdc=401081ch, *lptm=*D3F764h->struct {LONG tmHeight=D3F7A0h, LONG tmAscent=7E3A8DACh, LONG tmDescent=7E3A8D8Bh, LONG tmInternalLeading=D3FA48h, LONG tmExternalLeading=ED000000h, LONG tmAveCharWidth=FB6F2D76h, LONG tmMaxCharWidth=D3B2A8h, LONG tmWeight=D3FB1Ch, LONG tmOverhang=100281C0h, LONG tmDigitizedAspectX=0h, LONG tmDigitizedAspectY=D3F7D0h, WCHAR tmFirstChar=L'\1A4Fh', WCHAR tmLastChar=L'\7FF9h', WCHAR tmDefaultChar=L'\BD2Eh', WCHAR tmBreakChar=L'\19h', BYTE tmItalic='\9Eh', BYTE tmUnderlined='\16h', BYTE tmStruckOut='\00h', BYTE tmPitchAndFamily='\00h', BYTE tmCharSet='J'}) 001235 0904 0380 ????????????:7e3ab6aa<-????????????:77e47db9 GetTextMetricsW ->int=1h (HDC hdc=401081ch, *lptm=*D3F764h->struct {LONG tmHeight=10h, LONG tmAscent=Dh, LONG tmDescent=3h, LONG tmInternalLeading=3h, LONG tmExternalLeading=0h, LONG tmAveCharWidth=6h, LONG tmMaxCharWidth=22h, LONG tmWeight=2BCh, LONG tmOverhang=0h, LONG tmDigitizedAspectX=60h, LONG tmDigitizedAspectY=60h, WCHAR tmFirstChar=L' ', WCHAR tmLastChar=L'\FFFCh', WCHAR tmDefaultChar=L'\1Fh', WCHAR tmBreakChar=L' ', BYTE tmItalic='\00h', BYTE tmUnderlined='\00h', BYTE tmStruckOut='\00h', BYTE tmPitchAndFamily=''', BYTE tmCharSet='\00h'}) 001236 0904 0380 ????????????:7e3ab4d3->????????????:77e47786 CreateRectRgn (int x1=0h, int y1=0h, int x2=0h, int y2=0h) 001237 0904 0380 ????????????:7e3ab4d3<-????????????:77e47786 CreateRectRgn ->*=*870407D3h (int x1=0h, int y1=870407D3h, int x2=0h, int y2=0h) 001238 0904 0380 ????????????:7e3ab4e4->????????????:77e46ad6 GetClipRgn (HDC hdc=401081ch, HRGN hrgn=870407d3h) 001239 0904 0380 ????????????:7e3ab4e4<-????????????:77e46ad6 GetClipRgn ->int=0h (HDC hdc=401081ch, HRGN hrgn=870407d3h) 001240 0904 0380 ????????????:7e3ab4f0->????????????:77e46bfa DeleteObject (HGDIOBJ ho=870407d3h) 001241 0904 0380 ????????????:7e3ab4f0<-????????????:77e46bfa DeleteObject ->int=1h (HGDIOBJ ho=870407d3h) 001242 0904 0380 ????????????:7e3ab513->????????????:77e46a56 IntersectClipRect (HDC hdc=401081ch, int left=38h, int top=Ch, int right=127h, int bottom=4Bh) 001243 0904 0380 ????????????:7e3ab513<-????????????:77e46a56 IntersectClipRect ->int=3h (HDC hdc=401081ch, int left=38h, int top=Ch, int right=127h, int bottom=4Bh) 001244 0904 0380 ????????????:7e3aba83->????????????:77e469d0 GdiGetCodePage (== no prototype available ==) 001245 0904 0380 ????????????:7e3aba83<-????????????:77e469d0 GdiGetCodePage (== no prototype available ==) 001246 0904 0380 ????????????:7e3ab91a->????????????:77e46b0d GetTextExtentPointW (HDC hdc=401081ch, LPCWSTR lpString=*D3F910h->L"Launching ultimo.exe", int c=14h, *lpsz=*D3F71Ch->struct {LONG cx=77E47DB9h, LONG cy=7E3AB6AAh}) 001247 0904 0380 ????????????:7e3ab91a<-????????????:77e46b0d GetTextExtentPointW ->int=1h (HDC hdc=401081ch, LPCWSTR lpString=*D3F910h->L"Launching ultimo.exe", int c=14h, *lpsz=*D3F71Ch->struct {LONG cx=8Bh, LONG cy=10h}) 001248 0904 0380 ????????????:7e3ac422->????????????:77e47eac TextOutW (HDC hdc=401081ch, int x=38h, int y=Ch, LPCWSTR lpString=*D3F910h->L"Launching ultimo.exe", int c=14h) 001249 0904 0380 ????????????:7e3ac422<-????????????:77e47eac TextOutW ->int=1h (HDC hdc=401081ch, int x=38h, int y=Ch, LPCWSTR lpString=*D3F910h->L"Launching ultimo.exe", int c=14h) 001250 0904 0380 ????????????:7e3ab91a->????????????:77e46b0d GetTextExtentPointW (HDC hdc=401081ch, LPCWSTR lpString=*D3F910h->L"Launching ultimo.exe", int c=14h, *lpsz=*D3F734h->struct {LONG cx=401081Ch, LONG cy=38h}) 001251 0904 0380 ????????????:7e3ab91a<-????????????:77e46b0d GetTextExtentPointW ->int=1h (HDC hdc=401081ch, LPCWSTR lpString=*D3F910h->L"Launching ultimo.exe", int c=14h, *lpsz=*D3F734h->struct {LONG cx=8Bh, LONG cy=10h}) 001252 0904 0380 ????????????:7e3ab7d0->????????????:77e47874 ExtSelectClipRgn (HDC hdc=401081ch, HRGN hrgn=0h, int mode=5h) 001253 0904 0380 ????????????:7e3ab7d0<-????????????:77e47874 ExtSelectClipRgn ->int=2h (HDC hdc=401081ch, HRGN hrgn=0h, int mode=5h) 001256 0904 0380 ????????????:7e3ab631->????????????:77e47cf1 GetViewportExtEx (HDC hdc=401081ch, *lpsize=*D3F7A0h->struct {LONG cx=0h, LONG cy=0h}) 001257 0904 0380 ????????????:7e3ab631<-????????????:77e47cf1 GetViewportExtEx ->int=1h (HDC hdc=401081ch, *lpsize=*D3F7A0h->struct {LONG cx=1h, LONG cy=1h}) 001258 0904 0380 ????????????:7e3ab645->????????????:77e47c79 GetWindowExtEx (HDC hdc=401081ch, *lpsize=*D3F7A8h->struct {LONG cx=0h, LONG cy=0h}) 001259 0904 0380 ????????????:7e3ab645<-????????????:77e47c79 GetWindowExtEx ->int=1h (HDC hdc=401081ch, *lpsize=*D3F7A8h->struct {LONG cx=1h, LONG cy=1h}) 001260 0904 0380 ????????????:7e3ab744->????????????:77e47e56 GetHFONT (== no prototype available ==) 001261 0904 0380 ????????????:7e3ab744<-????????????:77e47e56 GetHFONT (== no prototype available ==) 001262 0904 0380 ????????????:7e3ab6aa->????????????:77e47db9 GetTextMetricsW (HDC hdc=401081ch, *lptm=*D3F764h->struct {LONG tmHeight=FFFFFFFFh, LONG tmAscent=800h, LONG tmDescent=EDD3F798h, LONG tmInternalLeading=FB6F2D7Eh, LONG tmExternalLeading=ED000000h, LONG tmAveCharWidth=FB6F2D76h, LONG tmMaxCharWidth=D3B2A8h, LONG tmWeight=D3FB1Ch, LONG tmOverhang=100281C0h, LONG tmDigitizedAspectX=0h, LONG tmDigitizedAspectY=D3F7D0h, WCHAR tmFirstChar=L'\1A4Fh', WCHAR tmLastChar=L'\7FF9h', WCHAR tmDefaultChar=L'\BD2Eh', WCHAR tmBreakChar=L'\19h', BYTE tmItalic='\9Eh', BYTE tmUnderlined='\16h', BYTE tmStruckOut='\00h', BYTE tmPitchAndFamily='\00h', BYTE tmCharSet='J'}) 001263 0904 0380 ????????????:7e3ab6aa<-????????????:77e47db9 GetTextMetricsW ->int=1h (HDC hdc=401081ch, *lptm=*D3F764h->struct {LONG tmHeight=Eh, LONG tmAscent=Bh, LONG tmDescent=3h, LONG tmInternalLeading=3h, LONG tmExternalLeading=0h, LONG tmAveCharWidth=5h, LONG tmMaxCharWidth=1Dh, LONG tmWeight=190h, LONG tmOverhang=0h, LONG tmDigitizedAspectX=60h, LONG tmDigitizedAspectY=60h, WCHAR tmFirstChar=L' ', WCHAR tmLastChar=L'\FFFCh', WCHAR tmDefaultChar=L'\1Fh', WCHAR tmBreakChar=L' ', BYTE tmItalic='\00h', BYTE tmUnderlined='\00h', BYTE tmStruckOut='\00h', BYTE tmPitchAndFamily=''', BYTE tmCharSet='\00h'}) 001264 0904 0380 ????????????:7e3ab4d3->????????????:77e47786 CreateRectRgn (int x1=0h, int y1=0h, int x2=0h, int y2=0h) 001265 0904 0380 ????????????:7e3ab4d3<-????????????:77e47786 CreateRectRgn ->*=*880407D3h (int x1=0h, int y1=880407D3h, int x2=0h, int y2=0h) 001266 0904 0380 ????????????:7e3ab4e4->????????????:77e46ad6 GetClipRgn (HDC hdc=401081ch, HRGN hrgn=880407d3h) 001267 0904 0380 ????????????:7e3ab4e4<-????????????:77e46ad6 GetClipRgn ->int=0h (HDC hdc=401081ch, HRGN hrgn=880407d3h) 001268 0904 0380 ????????????:7e3ab4f0->????????????:77e46bfa DeleteObject (HGDIOBJ ho=880407d3h) 001269 0904 0380 ????????????:7e3ab4f0<-????????????:77e46bfa DeleteObject ->int=1h (HGDIOBJ ho=880407d3h) 001270 0904 0380 ????????????:7e3ab513->????????????:77e46a56 IntersectClipRect (HDC hdc=401081ch, int left=38h, int top=1Eh, int right=127h, int bottom=4Bh) 001271 0904 0380 ????????????:7e3ab513<-????????????:77e46a56 IntersectClipRect ->int=3h (HDC hdc=401081ch, int left=38h, int top=1Eh, int right=127h, int bottom=4Bh) 001272 0904 0380 ????????????:7e3aba83->????????????:77e469d0 GdiGetCodePage (== no prototype available ==) 001273 0904 0380 ????????????:7e3aba83<-????????????:77e469d0 GdiGetCodePage (== no prototype available ==) 001274 0904 0380 ????????????:7e3ab91a->????????????:77e46b0d GetTextExtentPointW (HDC hdc=401081ch, LPCWSTR lpString=*D3F990h->L"Licensed to LZR 4.7.2", int c=15h, *lpsz=*D3F71Ch->struct {LONG cx=77E47DB9h, LONG cy=7E3AB6AAh}) 001275 0904 0380 ????????????:7e3ab91a<-????????????:77e46b0d GetTextExtentPointW ->int=1h (HDC hdc=401081ch, LPCWSTR lpString=*D3F990h->L"Licensed to LZR 4.7.2", int c=15h, *lpsz=*D3F71Ch->struct {LONG cx=6Ah, LONG cy=Eh}) 001276 0904 0380 ????????????:7e3ac422->????????????:77e47eac TextOutW (HDC hdc=401081ch, int x=38h, int y=1Eh, LPCWSTR lpString=*D3F990h->L"Licensed to LZR 4.7.2", int c=15h) 001277 0904 0380 ????????????:7e3ac422<-????????????:77e47eac TextOutW ->int=1h (HDC hdc=401081ch, int x=38h, int y=1Eh, LPCWSTR lpString=*D3F990h->L"Licensed to LZR 4.7.2", int c=15h) 001278 0904 0380 ????????????:7e3ab91a->????????????:77e46b0d GetTextExtentPointW (HDC hdc=401081ch, LPCWSTR lpString=*D3F990h->L"Licensed to LZR 4.7.2", int c=15h, *lpsz=*D3F734h->struct {LONG cx=401081Ch, LONG cy=38h}) 001279 0904 0380 ????????????:7e3ab91a<-????????????:77e46b0d GetTextExtentPointW ->int=1h (HDC hdc=401081ch, LPCWSTR lpString=*D3F990h->L"Licensed to LZR 4.7.2", int c=15h, *lpsz=*D3F734h->struct {LONG cx=6Ah, LONG cy=Eh}) 001280 0904 0380 ????????????:7e3ab7d0->????????????:77e47874 ExtSelectClipRgn (HDC hdc=401081ch, HRGN hrgn=0h, int mode=5h) 001281 0904 0380 ????????????:7e3ab7d0<-????????????:77e47874 ExtSelectClipRgn ->int=2h (HDC hdc=401081ch, HRGN hrgn=0h, int mode=5h) 001282 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001283 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001284 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001285 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001286 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001287 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001288 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001289 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001290 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001291 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001292 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001293 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001294 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001295 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001296 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001297 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001298 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001299 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001300 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001301 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001302 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001303 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001304 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001305 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001306 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001307 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001308 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001309 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001310 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001311 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001312 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001313 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001314 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001315 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001316 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001317 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001318 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001319 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001320 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001321 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001322 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001323 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001324 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001325 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001326 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001327 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001328 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001329 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001330 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001331 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001332 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001333 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001334 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001335 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001336 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001337 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001338 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001339 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001340 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001341 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001342 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001343 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001344 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001345 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001346 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001347 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001348 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001349 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001350 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001351 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001352 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001353 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001354 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001355 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001356 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001357 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001358 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001359 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001360 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001361 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001362 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001363 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001364 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001365 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001366 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001367 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001368 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001369 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001370 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001371 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001372 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001373 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001374 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001375 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001376 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001377 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001378 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001379 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001380 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001381 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001382 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001383 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001384 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001385 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001386 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001387 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001388 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001389 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001390 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001391 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001392 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001393 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001394 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001395 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001396 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001397 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001398 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001399 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001400 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001401 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001402 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001403 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001404 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001405 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001406 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001407 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001408 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001409 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001410 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001411 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001412 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001413 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001414 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001415 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001416 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001417 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001418 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001419 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001420 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001421 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001422 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001423 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001424 0904 0380 ????????????:7e3acb4a->????????????:77e4814e GetObjectType (HGDIOBJ h=401081ch) 001425 0904 0380 ????????????:7e3acb4a<-????????????:77e4814e GetObjectType ->unsigned long=3h (HGDIOBJ h=401081ch) 001426 0904 0380 ????????????:7e3acbce->????????????:77e490a3 GdiConvertAndCheckDC (== no prototype available ==) 001427 0904 0380 ????????????:7e3acbce<-????????????:77e490a3 GdiConvertAndCheckDC (== no prototype available ==) 001430 0904 0380 ????????????:7e3ab631->????????????:77e47cf1 GetViewportExtEx (HDC hdc=401081ch, *lpsize=*D3F668h->struct {LONG cx=0h, LONG cy=0h}) 001431 0904 0380 ????????????:7e3ab631<-????????????:77e47cf1 GetViewportExtEx ->int=1h (HDC hdc=401081ch, *lpsize=*D3F668h->struct {LONG cx=1h, LONG cy=1h}) 001432 0904 0380 ????????????:7e3ab645->????????????:77e47c79 GetWindowExtEx (HDC hdc=401081ch, *lpsize=*D3F670h->struct {LONG cx=0h, LONG cy=0h}) 001433 0904 0380 ????????????:7e3ab645<-????????????:77e47c79 GetWindowExtEx ->int=1h (HDC hdc=401081ch, *lpsize=*D3F670h->struct {LONG cx=1h, LONG cy=1h}) 001434 0904 0380 ????????????:7e3ab744->????????????:77e47e56 GetHFONT (== no prototype available ==) 001435 0904 0380 ????????????:7e3ab744<-????????????:77e47e56 GetHFONT (== no prototype available ==) 001436 0904 0380 ????????????:7e3ab6aa->????????????:77e47db9 GetTextMetricsW (HDC hdc=401081ch, *lptm=*D3F62Ch->struct {LONG tmHeight=7E3C048Fh, LONG tmAscent=7E3A8EB0h, LONG tmDescent=FFFFFFFFh, LONG tmInternalLeading=7E3A8EABh, LONG tmExternalLeading=ED000000h, LONG tmAveCharWidth=FB6F2CAEh, LONG tmMaxCharWidth=D3B170h, LONG tmWeight=D3F9E4h, LONG tmOverhang=100281C0h, LONG tmDigitizedAspectX=0h, LONG tmDigitizedAspectY=D3F698h, WCHAR tmFirstChar=L'\1A4Fh', WCHAR tmLastChar=L'\7FF9h', WCHAR tmDefaultChar=L'\BD2Eh', WCHAR tmBreakChar=L'\19h', BYTE tmItalic='\9Eh', BYTE tmUnderlined='\16h', BYTE tmStruckOut='\00h', BYTE tmPitchAndFamily='\00h', BYTE tmCharSet='J'}) 001437 0904 0380 ????????????:7e3ab6aa<-????????????:77e47db9 GetTextMetricsW ->int=1h (HDC hdc=401081ch, *lptm=*D3F62Ch->struct {LONG tmHeight=10h, LONG tmAscent=Dh, LONG tmDescent=3h, LONG tmInternalLeading=3h, LONG tmExternalLeading=0h, LONG tmAveCharWidth=6h, LONG tmMaxCharWidth=22h, LONG tmWeight=2BCh, LONG tmOverhang=0h, LONG tmDigitizedAspectX=60h, LONG tmDigitizedAspectY=60h, WCHAR tmFirstChar=L' ', WCHAR tmLastChar=L'\FFFCh', WCHAR tmDefaultChar=L'\1Fh', WCHAR tmBreakChar=L' ', BYTE tmItalic='\00h', BYTE tmUnderlined='\00h', BYTE tmStruckOut='\00h', BYTE tmPitchAndFamily=''', BYTE tmCharSet='\00h'}) 001438 0904 0380 ????????????:7e3ab4d3->????????????:77e47786 CreateRectRgn (int x1=0h, int y1=0h, int x2=0h, int y2=0h) 001439 0904 0380 ????????????:7e3ab4d3<-????????????:77e47786 CreateRectRgn ->*=*890407D3h (int x1=0h, int y1=890407D3h, int x2=0h, int y2=0h) 001440 0904 0380 ????????????:7e3ab4e4->????????????:77e46ad6 GetClipRgn (HDC hdc=401081ch, HRGN hrgn=890407d3h) 001441 0904 0380 ????????????:7e3ab4e4<-????????????:77e46ad6 GetClipRgn ->int=0h (HDC hdc=401081ch, HRGN hrgn=890407d3h) 001442 0904 0380 ????????????:7e3ab4f0->????????????:77e46bfa DeleteObject (HGDIOBJ ho=890407d3h) 001443 0904 0380 ????????????:7e3ab4f0<-????????????:77e46bfa DeleteObject ->int=1h (HGDIOBJ ho=890407d3h) 001444 0904 0380 ????????????:7e3ab513->????????????:77e46a56 IntersectClipRect (HDC hdc=401081ch, int left=38h, int top=Ch, int right=127h, int bottom=4Bh) 001445 0904 0380 ????????????:7e3ab513<-????????????:77e46a56 IntersectClipRect ->int=3h (HDC hdc=401081ch, int left=38h, int top=Ch, int right=127h, int bottom=4Bh) 001446 0904 0380 ????????????:7e3aba83->????????????:77e469d0 GdiGetCodePage (== no prototype available ==) 001447 0904 0380 ????????????:7e3aba83<-????????????:77e469d0 GdiGetCodePage (== no prototype available ==) 001448 0904 0380 ????????????:7e3ab91a->????????????:77e46b0d GetTextExtentPointW (HDC hdc=401081ch, LPCWSTR lpString=*D3F7D8h->L"Launching ultimo.exe", int c=14h, *lpsz=*D3F5E4h->struct {LONG cx=77E47DB9h, LONG cy=7E3AB6AAh}) 001449 0904 0380 ????????????:7e3ab91a<-????????????:77e46b0d GetTextExtentPointW ->int=1h (HDC hdc=401081ch, LPCWSTR lpString=*D3F7D8h->L"Launching ultimo.exe", int c=14h, *lpsz=*D3F5E4h->struct {LONG cx=8Bh, LONG cy=10h}) 001450 0904 0380 ????????????:7e3ac422->????????????:77e47eac TextOutW (HDC hdc=401081ch, int x=38h, int y=Ch, LPCWSTR lpString=*D3F7D8h->L"Launching ultimo.exe", int c=14h) 001451 0904 0380 ????????????:7e3ac422<-????????????:77e47eac TextOutW ->int=1h (HDC hdc=401081ch, int x=38h, int y=Ch, LPCWSTR lpString=*D3F7D8h->L"Launching ultimo.exe", int c=14h) 001452 0904 0380 ????????????:7e3ab91a->????????????:77e46b0d GetTextExtentPointW (HDC hdc=401081ch, LPCWSTR lpString=*D3F7D8h->L"Launching ultimo.exe", int c=14h, *lpsz=*D3F5FCh->struct {LONG cx=401081Ch, LONG cy=38h}) 001453 0904 0380 ????????????:7e3ab91a<-????????????:77e46b0d GetTextExtentPointW ->int=1h (HDC hdc=401081ch, LPCWSTR lpString=*D3F7D8h->L"Launching ultimo.exe", int c=14h, *lpsz=*D3F5FCh->struct {LONG cx=8Bh, LONG cy=10h}) 001454 0904 0380 ????????????:7e3ab7d0->????????????:77e47874 ExtSelectClipRgn (HDC hdc=401081ch, HRGN hrgn=0h, int mode=5h) 001455 0904 0380 ????????????:7e3ab7d0<-????????????:77e47874 ExtSelectClipRgn ->int=2h (HDC hdc=401081ch, HRGN hrgn=0h, int mode=5h) 001458 0904 0380 ????????????:7e3ab631->????????????:77e47cf1 GetViewportExtEx (HDC hdc=401081ch, *lpsize=*D3F668h->struct {LONG cx=0h, LONG cy=0h}) 001459 0904 0380 ????????????:7e3ab631<-????????????:77e47cf1 GetViewportExtEx ->int=1h (HDC hdc=401081ch, *lpsize=*D3F668h->struct {LONG cx=1h, LONG cy=1h}) 001460 0904 0380 ????????????:7e3ab645->????????????:77e47c79 GetWindowExtEx (HDC hdc=401081ch, *lpsize=*D3F670h->struct {LONG cx=0h, LONG cy=0h}) 001461 0904 0380 ????????????:7e3ab645<-????????????:77e47c79 GetWindowExtEx ->int=1h (HDC hdc=401081ch, *lpsize=*D3F670h->struct {LONG cx=1h, LONG cy=1h}) 001462 0904 0380 ????????????:7e3ab744->????????????:77e47e56 GetHFONT (== no prototype available ==) 001463 0904 0380 ????????????:7e3ab744<-????????????:77e47e56 GetHFONT (== no prototype available ==) 001464 0904 0380 ????????????:7e3ab6aa->????????????:77e47db9 GetTextMetricsW (HDC hdc=401081ch, *lptm=*D3F62Ch->struct {LONG tmHeight=FFFFFFFFh, LONG tmAscent=800h, LONG tmDescent=EDD3F660h, LONG tmInternalLeading=FB6F2CB6h, LONG tmExternalLeading=ED000000h, LONG tmAveCharWidth=FB6F2CAEh, LONG tmMaxCharWidth=D3B170h, LONG tmWeight=D3F9E4h, LONG tmOverhang=100281C0h, LONG tmDigitizedAspectX=0h, LONG tmDigitizedAspectY=D3F698h, WCHAR tmFirstChar=L'\1A4Fh', WCHAR tmLastChar=L'\7FF9h', WCHAR tmDefaultChar=L'\BD2Eh', WCHAR tmBreakChar=L'\19h', BYTE tmItalic='\9Eh', BYTE tmUnderlined='\16h', BYTE tmStruckOut='\00h', BYTE tmPitchAndFamily='\00h', BYTE tmCharSet='J'}) 001465 0904 0380 ????????????:7e3ab6aa<-????????????:77e47db9 GetTextMetricsW ->int=1h (HDC hdc=401081ch, *lptm=*D3F62Ch->struct {LONG tmHeight=Eh, LONG tmAscent=Bh, LONG tmDescent=3h, LONG tmInternalLeading=3h, LONG tmExternalLeading=0h, LONG tmAveCharWidth=5h, LONG tmMaxCharWidth=1Dh, LONG tmWeight=190h, LONG tmOverhang=0h, LONG tmDigitizedAspectX=60h, LONG tmDigitizedAspectY=60h, WCHAR tmFirstChar=L' ', WCHAR tmLastChar=L'\FFFCh', WCHAR tmDefaultChar=L'\1Fh', WCHAR tmBreakChar=L' ', BYTE tmItalic='\00h', BYTE tmUnderlined='\00h', BYTE tmStruckOut='\00h', BYTE tmPitchAndFamily=''', BYTE tmCharSet='\00h'}) 001466 0904 0380 ????????????:7e3ab4d3->????????????:77e47786 CreateRectRgn (int x1=0h, int y1=0h, int x2=0h, int y2=0h) 001467 0904 0380 ????????????:7e3ab4d3<-????????????:77e47786 CreateRectRgn ->*=*8A0407D3h (int x1=0h, int y1=8A0407D3h, int x2=0h, int y2=0h) 001468 0904 0380 ????????????:7e3ab4e4->????????????:77e46ad6 GetClipRgn (HDC hdc=401081ch, HRGN hrgn=8a0407d3h) 001469 0904 0380 ????????????:7e3ab4e4<-????????????:77e46ad6 GetClipRgn ->int=0h (HDC hdc=401081ch, HRGN hrgn=8a0407d3h) 001470 0904 0380 ????????????:7e3ab4f0->????????????:77e46bfa DeleteObject (HGDIOBJ ho=8a0407d3h) 001471 0904 0380 ????????????:7e3ab4f0<-????????????:77e46bfa DeleteObject ->int=1h (HGDIOBJ ho=8a0407d3h) 001472 0904 0380 ????????????:7e3ab513->????????????:77e46a56 IntersectClipRect (HDC hdc=401081ch, int left=38h, int top=1Eh, int right=127h, int bottom=4Bh) 001473 0904 0380 ????????????:7e3ab513<-????????????:77e46a56 IntersectClipRect ->int=3h (HDC hdc=401081ch, int left=38h, int top=1Eh, int right=127h, int bottom=4Bh) 001474 0904 0380 ????????????:7e3aba83->????????????:77e469d0 GdiGetCodePage (== no prototype available ==) 001475 0904 0380 ????????????:7e3aba83<-????????????:77e469d0 GdiGetCodePage (== no prototype available ==) 001476 0904 0380 ????????????:7e3ab91a->????????????:77e46b0d GetTextExtentPointW (HDC hdc=401081ch, LPCWSTR lpString=*D3F858h->L"Licensed to LZR 4.7.2", int c=15h, *lpsz=*D3F5E4h->struct {LONG cx=77E47DB9h, LONG cy=7E3AB6AAh}) 001477 0904 0380 ????????????:7e3ab91a<-????????????:77e46b0d GetTextExtentPointW ->int=1h (HDC hdc=401081ch, LPCWSTR lpString=*D3F858h->L"Licensed to LZR 4.7.2", int c=15h, *lpsz=*D3F5E4h->struct {LONG cx=6Ah, LONG cy=Eh}) 001478 0904 0380 ????????????:7e3ac422->????????????:77e47eac TextOutW (HDC hdc=401081ch, int x=38h, int y=1Eh, LPCWSTR lpString=*D3F858h->L"Licensed to LZR 4.7.2", int c=15h) 001479 0904 0380 ????????????:7e3ac422<-????????????:77e47eac TextOutW ->int=1h (HDC hdc=401081ch, int x=38h, int y=1Eh, LPCWSTR lpString=*D3F858h->L"Licensed to LZR 4.7.2", int c=15h) 001480 0904 0380 ????????????:7e3ab91a->????????????:77e46b0d GetTextExtentPointW (HDC hdc=401081ch, LPCWSTR lpString=*D3F858h->L"Licensed to LZR 4.7.2", int c=15h, *lpsz=*D3F5FCh->struct {LONG cx=401081Ch, LONG cy=38h}) 001481 0904 0380 ????????????:7e3ab91a<-????????????:77e46b0d GetTextExtentPointW ->int=1h (HDC hdc=401081ch, LPCWSTR lpString=*D3F858h->L"Licensed to LZR 4.7.2", int c=15h, *lpsz=*D3F5FCh->struct {LONG cx=6Ah, LONG cy=Eh}) 001482 0904 0380 ????????????:7e3ab7d0->????????????:77e47874 ExtSelectClipRgn (HDC hdc=401081ch, HRGN hrgn=0h, int mode=5h) 001483 0904 0380 ????????????:7e3ab7d0<-????????????:77e47874 ExtSelectClipRgn ->int=2h (HDC hdc=401081ch, HRGN hrgn=0h, int mode=5h) 001484 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001485 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001486 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001487 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001488 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001489 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001490 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001491 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001492 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001493 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001494 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001495 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001496 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001497 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001498 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001499 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001500 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001501 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001502 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001503 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001504 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001505 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001506 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001507 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001508 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001509 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001510 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001511 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001512 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001513 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001514 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001515 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001516 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001517 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001518 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001519 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001520 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001521 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001522 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001523 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001524 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001525 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001526 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001527 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001528 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001529 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001530 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001531 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001532 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001533 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001534 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001535 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001536 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001537 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001538 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001539 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001540 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001541 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001542 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001543 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001544 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001545 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001546 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001547 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001548 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001549 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001550 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001551 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001552 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001553 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001554 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001555 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001556 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001557 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001558 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001559 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001560 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001561 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001562 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001563 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001564 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001565 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001566 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001567 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001568 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001569 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001570 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001571 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001572 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001573 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001574 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001575 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001576 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001577 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001578 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001579 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001580 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001581 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001582 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001583 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001584 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001585 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001586 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001587 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001588 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001589 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001590 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001591 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001592 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001593 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001594 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001595 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001596 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001597 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001598 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001599 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001600 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001601 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001602 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001603 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001604 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001605 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001606 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001607 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001608 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001609 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001610 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001611 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001612 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001613 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001614 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001615 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001616 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001617 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001618 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001619 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001620 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001621 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001622 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001623 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001624 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001625 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001626 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001627 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001628 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001629 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001630 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001631 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001632 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001633 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001634 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001635 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001636 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001637 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001638 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001639 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001640 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001641 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001642 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001643 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001644 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001645 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001646 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001647 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001648 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001649 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001650 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001651 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001652 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001653 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001654 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001655 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001656 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001657 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001658 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001659 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001660 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001661 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001662 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001663 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001665 0904 0380 ????????????:7634430e->????????????:7c913607 RtlDllShutdownInProgress () 001666 0904 0380 ????????????:7634430e<-????????????:7c913607 RtlDllShutdownInProgress ->char='\00h' () 001668 0904 0380 ????????????:752544f5->????????????:7c7d97e0 TlsGetValue (DWORD dwTlsIndex=9h) 001669 0904 0380 ????????????:752544f5<-????????????:7c7d97e0 TlsGetValue ->*=*146698h (DWORD dwTlsIndex=9h) 001671 0904 0380 ????????????:7e3eb942->????????????:7c7d97d0 GetCurrentThreadId () 001672 0904 0380 ????????????:7e3eb942<-????????????:7c7d97d0 GetCurrentThreadId ->unsigned long=380h () 001673 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001674 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001675 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001676 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001677 0904 0380 ????????????:7634430e->????????????:7c913607 RtlDllShutdownInProgress () 001678 0904 0380 ????????????:7634430e<-????????????:7c913607 RtlDllShutdownInProgress ->char='\00h' () 001679 0904 0380 ????????????:752544f5->????????????:7c7d97e0 TlsGetValue (DWORD dwTlsIndex=9h) 001680 0904 0380 ????????????:752544f5<-????????????:7c7d97e0 TlsGetValue ->*=*146698h (DWORD dwTlsIndex=9h) 001681 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001682 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001683 0904 0380 ????????????:7e3987b6->????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001684 0904 0380 ????????????:7e3987b6<-????????????:7c901198 RtlActivateActivationContextUnsafeFast (== no prototype available ==) 001685 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001686 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001687 0904 0380 ????????????:7e39885a->????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001688 0904 0380 ????????????:7e39885a<-????????????:7c9011dd RtlDeactivateActivationContextUnsafeFast (== no prototype available ==) 001689 0904 0380 ????????????:7526d323->????????????:7c801deb GetSystemDirectoryW (LPWSTR lpBuffer=*D3FC2Ch->L"", UINT uSize=105h) 001690 0904 0380 ????????????:7526d323<-????????????:7c801deb GetSystemDirectoryW ->unsigned int=13h (LPWSTR lpBuffer=*D3FC2Ch->L"C:\WINDOWS\system32", UINT uSize=105h) 001691 0904 0380 ????????????:7526d35a->????????????:7c7d9aa9 lstrlenW (LPCWSTR lpString=*75252488h->L"Msctf.dll") 001692 0904 0380 ????????????:7526d35a<-????????????:7c7d9aa9 lstrlenW ->int=9h (LPCWSTR lpString=*75252488h->L"Msctf.dll") 001693 0904 0380 ????????????:7526d375->????????????:77c1806b wcsncpy (*=*D3FC54h->L'L', *=*75252488h->L'M', int =F1h) 001694 0904 0380 ????????????:7526d375<-????????????:77c1806b wcsncpy ->*=*D3FC1Ch->L'\FE40h' (*=*D3FC54h->L'M', *=*75252488h->L'M', int =F1h) 001695 0904 0380 ????????????:7526d55b->????????????:7c7de4dd GetModuleHandleW+ (LPCWSTR lpModuleName=*D3FC2Ch->L"C:\WINDOWS\system32\Msctf.dll") 001696 0000 0380 NtQueryInformationProcess [patching drive map] 001697 0000 0380 NtQueryAttributesFile* objAttr=D3F364h (root=0h sd=0h qos=0h attr=(40h OBJ_CASE_INSENSITIVE) name=D3F388h (14A708h/66 "\??\C:\WINDOWS\system32\Msctf.dll"))-> st=0h OK [LOCATOR: "\??\C:\WINDOWS\system32\Msctf.dll"][Package: "%SystemSystem%\Msctf.dll":][Sandbox: "%SystemSystem%\Msctf.dll": 1:LNameNotFound] 001698 0000 0380 NtOpenFile* pHandle=00D3F450Access(100020h ***unknown=100020h)objAttr=D3F408h (root=0h sd=0h qos=0h attr=(40h OBJ_CASE_INSENSITIVE) name=D3F434h (14A708h/66 "\??\C:\WINDOWS\system32\Msctf.dll")) iosb=00D3F428hShare(5h FILE_SHARE_DELETE FILE_SHARE_READ)Options(60h FILE_SYNCHRONOUS_IO_NONALERT FILE_NON_DIRECTORY_FILE)-> st=0h OKh=11Ch [Native: ""][LOCATOR: "\??\C:\WINDOWS\system32\Msctf.dll"][Package: "%SystemSystem%\Msctf.dll":][Sandbox: "%SystemSystem%\Msctf.dll": 1:LNameNotFound] 001699 0000 0380 NtQueryInformationFile* h=11Ch InfoClass=14 FilePositionInformation iosb=00D3EF88h-> st=0h OK 001700 0000 0380 NtQueryInformationFile* h=11Ch InfoClass=5 FileStandardInformation iosb=00D3EEB4h-> st=0h OK 001701 0000 0380 NtQueryInformationFile* h=11Ch InfoClass=14 FilePositionInformation iosb=00D3ECD8h-> st=0h OK 001702 0000 0380 NtSetInformationFile* h=11Ch InfoClass=14 FilePositionInformation iosb=00D3ECDCh-> st=0h OK 001703 0000 0380 NtReadFile* h=11Ch iosb=00D3ECA4hdata=D3EE84h/64-> st=0h OK readdata=D3EE84h/64 "MZ......................@......................................." 001704 0000 0380 NtSetInformationFile* h=11Ch InfoClass=14 FilePositionInformation iosb=00D3ECECh-> st=0h OK 001705 0000 0380 NtReadFile* h=11Ch iosb=00D3ECB4hdata=D3ED1Ch/248-> st=0h OK readdata=D3ED1Ch/248 "PE..L...#..H...........!.........p...............0....jt................................S..............................." 001706 0000 0380 NtSetInformationFile* h=11Ch InfoClass=14 FilePositionInformation iosb=00D3ECECh-> st=0h OK 001707 0000 0380 NtReadFile* h=11Ch iosb=00D3ECC0hdata=D3EE5Ch/40-> st=0h OK readdata=D3EE5Ch/40 ".text..................................`" 001708 0000 0380 NtSetInformationFile* h=11Ch InfoClass=14 FilePositionInformation iosb=00D3ECECh-> st=0h OK 001709 0000 0380 NtReadFile* h=11Ch iosb=00D3EEC4h offset=0:0hdata=1110000h/299008-> st=0h OK readdata=1110000h/297984 "MZ......................@...............................................!..L.!This.program.cannot.be.run.in.DOS.mode...." 001710 0000 0380 NtSetInformationFile* h=11Ch InfoClass=14 FilePositionInformation iosb=00D3EF90h-> st=0h OK 001711 0000 0380 NtCreateSection* SectionHandle=00000110access=(Eh SECTION_ALL_ACCESS)protect=(10h PAGE_EXECUTE)sectAttr=(8000000h SEC_COMMIT) FileHandle=0000011C-> st=0h OK 001712 0000 0380 NtClose h=11Ch-> st=0h OK [CloseVirtualFileHandle] 001713 0000 0380 NtClose h=110h-> st=0h OK [CloseVirtualFileMappingHandle] 001714 0904 0380 ????????????:7526d55b<-????????????:7c7de4dd *** GetModuleHandleW+ ->*=*0h (LPCWSTR lpModuleName=*0h ) *** GetLastError() returns 126=0x7e [0]: Kan opgegeven module niet vinden. 001715 0904 0380 ????????????:752690de->????????????:7c7d97e0 TlsGetValue (DWORD dwTlsIndex=9h) 001716 0904 0380 ????????????:752690de<-????????????:7c7d97e0 TlsGetValue ->*=*146698h (DWORD dwTlsIndex=9h) 001717 0904 0380 ????????????:75269cb8->????????????:7c7d97e0 TlsGetValue (DWORD dwTlsIndex=9h) 001718 0904 0380 ????????????:75269cb8<-????????????:7c7d97e0 TlsGetValue ->*=*146698h (DWORD dwTlsIndex=9h) 001720 0904 0380 ????????????:75269cf1->????????????:7c7d99cf LocalFree (HLOCAL hMem=146698h) 001721 0904 0380 ????????????:75269cf1<-????????????:7c7d99cf LocalFree ->*=*0h (HLOCAL hMem=146698h) 001723 0904 0380 ????????????:75269cff->????????????:7c7d9c65 TlsSetValue (DWORD dwTlsIndex=9h, LPVOID lpTlsValue=*0h ) 001724 0904 0380 ????????????:75269cff<-????????????:7c7d9c65 TlsSetValue ->int=1h (DWORD dwTlsIndex=9h, LPVOID lpTlsValue=*0h ) 001725 0904 0380 ????????????:770e1693->????????????:7c7d97e0 TlsGetValue (DWORD dwTlsIndex=4h) 001726 0904 0380 ????????????:770e1693<-????????????:7c7d97e0 TlsGetValue ->*=*0h (DWORD dwTlsIndex=4h) 001727 0904 0380 ????????????:77c09fc2->????????????:7c7d97e0 TlsGetValue (DWORD dwTlsIndex=3h) 001728 0904 0380 ????????????:77c09fc2<-????????????:7c7d97e0 TlsGetValue ->*=*864160h (DWORD dwTlsIndex=3h) 001729 0904 0380 ????????????:77c0a0e8->????????????:7c7d9c65 TlsSetValue (DWORD dwTlsIndex=3h, LPVOID lpTlsValue=*0h ) 001730 0904 0380 ????????????:77c0a0e8<-????????????:7c7d9c65 TlsSetValue ->int=1h (DWORD dwTlsIndex=3h, LPVOID lpTlsValue=*0h ) 001732 0904 0380 ????????????:76332782->????????????:7e3a9bf6 GetKeyboardLayout (DWORD idThread=0h) 001733 0904 0380 ????????????:76332782<-????????????:7e3a9bf6 GetKeyboardLayout ->*=*F0010413h (DWORD idThread=0h) 001734 0000 0000 -------- end of file -------- --- Modules loaded --- --- Detected Unknown API functions --- --- Encountered possible functions, but not sure if they are functions or data --- ---- Timing Report: list of slowest 150 objects profiled --- ---- Potential Errors Detected --- 000283 00000000 0000092c NtOpenFile* pHandle=0100F460Access(100020h unknown=100020h)objAttr=100F418h (root=0h sd=0h qos=0h attr=(40h OBJ_CASE_INSENSITIVE) name=100F444h (14A708h/66 "\??\C:\WINDOWS\system32\Msctf.dll")) iosb=0100F438hShare(5h FILE_SHARE_DELETE FILE_SHARE_READ)Options(60h FILE_SYNCHRONOUS_IO_NONALERT FILE_NON_DIRECTORY_FILE)-> st=0h OKh=110h [Native: ""][LOCATOR: "\??\C:\WINDOWS\system32\Msctf.dll"][Package: "%SystemSystem%\Msctf.dll":][Sandbox: "%SystemSystem%\Msctf.dll": 1:LNameNotFound] 000303 00000904 0000092c ????????????:7526d55b<-????????????:7c7de4dd GetModuleHandleW+ ->*=*0h (LPCWSTR lpModuleName=*0h ) *** GetLastError() returns 126=0x7e [0]: Kan opgegeven module niet vinden. 000434 00000000 00000900 NtCreateFile* pHandle=0012E364Access(100001h unknown=100001h)objAttr=12E368h (root=0h sd=0h qos=0h attr=(40h OBJ_CASE_INSENSITIVE) name=12E39Ch (12E3B4h/74 "\??\UNC\ultimo\ultimo$\Bin\ultimo.exe")) iosb=0012E380hAttribs(0h)Share(1h FILE_SHARE_READ) Disposition=1 FILE_OPENOptions(20h FILE_SYNCHRONOUS_IO_NONALERT)-> st=0h OKh=114h [Native: ""][Native: "\??\UNC\ultimo\ultimo$\Bin\ultimo.exe"][Native target] 000442 00000000 00000900 NtCreateFile* pHandle=0012CA50Access(80100000h GENERIC_READ unknown=100000h)objAttr=12CA54h (root=0h sd=0h qos=0h attr=(40h OBJ_CASE_INSENSITIVE) name=12CA88h (12CAA0h/74 "\??\UNC\ultimo\ultimo$\Bin\ultimo.exe")) iosb=0012CA6ChAttribs(0h)Share(1h FILE_SHARE_READ) Disposition=1 FILE_OPENOptions(20h FILE_SYNCHRONOUS_IO_NONALERT)-> st=0h OKh=114h [Native: ""][Native: "\??\UNC\ultimo\ultimo$\Bin\ultimo.exe"][Native target] 000447 00000000 00000900 NtCreateFile* pHandle=0012CB74Access(80100000h GENERIC_READ unknown=100000h)objAttr=12CB78h (root=0h sd=0h qos=0h attr=(40h OBJ_CASE_INSENSITIVE) name=12CBACh (12CBC4h/74 "\??\UNC\ultimo\ultimo$\Bin\ultimo.exe")) iosb=0012CB90hAttribs(0h)Share(3h FILE_SHARE_READ FILE_SHARE_WRITE) Disposition=1 FILE_OPENOptions(20h FILE_SYNCHRONOUS_IO_NONALERT)-> st=0h OKh=114h [Native: ""][Native: "\??\UNC\ultimo\ultimo$\Bin\ultimo.exe"][Native target] 000707 00000000 00000900 RelaunchUsingCreateProcess::CreateProcess failed: [Native: "\\ultimo\ultimo$\Bin\ultimo.exe" > "\??\UNC\ultimo\ultimo$\Bin\ultimo.exe"][CreateProcessW \\ultimo\ultimo$\Bin\ultimo.exe -> 0h] 001698 00000000 00000380 NtOpenFile* pHandle=00D3F450Access(100020h unknown=100020h)objAttr=D3F408h (root=0h sd=0h qos=0h attr=(40h OBJ_CASE_INSENSITIVE) name=D3F434h (14A708h/66 "\??\C:\WINDOWS\system32\Msctf.dll")) iosb=00D3F428hShare(5h FILE_SHARE_DELETE FILE_SHARE_READ)Options(60h FILE_SYNCHRONOUS_IO_NONALERT FILE_NON_DIRECTORY_FILE)-> st=0h OKh=11Ch [Native: ""][LOCATOR: "\??\C:\WINDOWS\system32\Msctf.dll"][Package: "%SystemSystem%\Msctf.dll":][Sandbox: "%SystemSystem%\Msctf.dll": 1:LNameNotFound] 001714 00000904 00000380 ????????????:7526d55b<-????????????:7c7de4dd GetModuleHandleW+ ->*=*0h (LPCWSTR lpModuleName=*0h ) *** GetLastError() returns 126=0x7e [0]: Kan opgegeven module niet vinden. Legend: ====== ^function Prior function likely jmp-ed to this one +function Function also hooked by ThinApp VOS *** Function generated a potential error